just_a_lurker (@cyberGoatPsyOps) profile picture

Staff Engineer at a cyber company. Prior DFIR @Tesla, @TrustedSec, @Fujitsu, @USARMY Special Operations

Austin, TX
Joined May 2025
Photo by just_a_lurker (@cyberGoatPsyOps)Photo by just_a_lurker (@cyberGoatPsyOps)Photo by just_a_lurker (@cyberGoatPsyOps)Photo by just_a_lurker (@cyberGoatPsyOps)Photo by just_a_lurker (@cyberGoatPsyOps)Photo by just_a_lurker (@cyberGoatPsyOps)Photo by just_a_lurker (@cyberGoatPsyOps)Photo by just_a_lurker (@cyberGoatPsyOps)
My time to shine!!!
Shout-out to everyone that keeps posting with zero likes and 10 views
6
just_a_lurker retweeted
Every tech bro rn
🤖 Made with AI
People should always be in control of the future. OpenAI is against the notion that it would be acceptable for people to be relegated to a role of doing things that “AI systems think makes sense to reward in humans”. People should not cede control of the future to superintelligence, and that requirement should ultimately constrain AI progress.
108
4,733
70
61,147
836,239
Everytime Lauren posts, it adds something else to my backlog to read. Is there a GrokBot way to handle this? I'm new to GrokBot. How would yall handle this? My goal is to get the important pieces of what she (and others) share out.
some fun slides from my upcoming talk @aiDotEngineer very excited to share how we ship crazy amounts of code (30x'd) without reading it, yet perf is as good if not better then when we launched there's a lot more to improve of course, and the ceiling is far from being reached, but given the relentless shipping speed and our high bar for polish, i think that our agent friendly architecture bets are paying off at taming the slop fun fact: ~230 people landed at least 1 PR to grok bot in october!
1
1
41
In the DFIR world, when a new security practitioner onboards, one of the first things I tell them is: 1. Do whatever you have to. Your number 1 goal is to stop the bad guys (we can talk all day about who the bad guys are, but not here), but be within the legal bounds, AKA never break the law. 2. Never lie (there is nuance here, but you NEVER LIE; you never know when you or your data goes to litigation) 3. CYA, what do I mean by this? A company has no issues throwing you to the wolves. Better be on point and document everything. It better show good intentions at the bare minimum, but it won't save you on your own 4. Personal hygiene. During incidents, its easy to forget about your personal health. During high-stress situations, you want your best self, and also you want to think about your long-term health. It's unfortunate about the @Railway situation; any junior security practitioner with leaders worth their salt pass this on and knows how to handle this exact situation. Also, don't listen to the FUD from X influencers when your company is on the line. Last place you would like to take advice from. Ironic while I write this LOL
Cybersecurity is super easy: - don’t do Crime - enable mfa literally NOTHING you do matters until you cover these two.
1
1
35
Crazy that I have to say this, I would probably add DON'T post incident details to X until the incident/event is investigated to closure and it's been cleared for dissemination
5
I like Maria, super smart individual from what I can tell. You can also tell the inexperience. This is why you hire security professionals. Even a junior 1st year at the SOC can give you better advice.
also to the people saying that he or whoever should go to prison i hope you've never pirated music, games, books or even cracked photoshop oh no!! but he ran some commands to see if secrets were exposed! he must be sent to Guantanamo Bay for sure.
32
Bro, is Austin, Texas partying tonight or what? Mallace in the place, LFG!!!
34
Mallace in the Palace
6
I've been around long enough to know not to fuck with the following when I see them in the wild. They will either be your best ally or fuck up your day. You've been warned. @joshmanders you have a new follower. God speed, m8 🫡
1
1
27
Hey @Railway, is there a reason employee's of yours are trying to breach my infrastructure? Your employee Jake Runzer, just attempted to tonight.
1
5
just_a_lurker retweeted
🤖 Made with AI
Ah yup. That was indeed me. No mallace intended. I've been running some agents to do signups + agentic testing on similar platforms. Just halted the harness I was designing around this as it was definitely going off the rails and reaching too far
Readers added context they thought people might want to know
In many jurisdictions this is a crime. In the US under Computer Fraud and Abuse Act, 18 U.S.C. §1030, in the UK under Computer Misuse Act (CMA) 1990, in Germany Strafgesetzbuch (StGB), and many others. justice.gov/jm/jm-9-48000-… legislation.gov.uk/ukpga/1990/18/… gesetze-im-internet.de/stgb/
36
183
18
3,506
141,399
Austin, tech, and taco trucks. Name a better combo
🚨 AUSTIN 🚨 are you excited for the Grand Opening of your very own local Micro Center on November 13th? We are, because we're going to have a huge celebration with food trucks, some of your favorite influencers, a DJ, and more!
7
Probably part of the reason you would want to hire professional engineers or even a junior security person would have of told you this was a bad idea. This is basic engineering/security practice 101 stuff
Ah yup. That was indeed me. No mallace intended. I've been running some agents to do signups + agentic testing on similar platforms. Just halted the harness I was designing around this as it was definitely going off the rails and reaching too far
Readers added context they thought people might want to know
In many jurisdictions this is a crime. In the US under Computer Fraud and Abuse Act, 18 U.S.C. §1030, in the UK under Computer Misuse Act (CMA) 1990, in Germany Strafgesetzbuch (StGB), and many others. justice.gov/jm/jm-9-48000-… legislation.gov.uk/ukpga/1990/18/… gesetze-im-internet.de/stgb/
14
Repost since I agree so much with this
Replying to @MalwareTechBlog
Are people just like, not aware that I track threat actors for a living? The reason I'm not crying / screaming / throwing up about AI is because I'm watching what threat actors are actually doing, and it's still the same attacks we've been seeing for the past decade.
8
Yo, @BSides_NoVA is there still a way to attend last minute? Online ticket sales are closed.
1
51
Maybe tomorrow during Apple's Creator Expo?
Is the 512 Mac Studio coming out?
1
9
The way frontier labs have restricted access to cyber capabilities makes no sense. If you're considered a "defender" you're not allowed access to the "offensive" versions of the models (the ones that can do development/validation of malware and exploits). So for example, if you want to build some sample malware to test a detection system, nope. Or if there's a major crisis due to a critical vulnerability in PHP and you need to rapidly triage fake exploits to see if there are any real ones floating around so you can warn people, nope. Want to build a remote code exploit to make sure the detection rules you plan on proposing to the clients actually work? Hard nope. You gotta call your red team friend and wait for them to do your job for you, because "defender" are only allowed to play in the sandbox with the children. Not an expert, but I think that the ability to triage in-the-wild exploits during a major crisis affecting 40 million systems is possible maybe important. And then they want to ban abliterated open weight models, which half of the people are only using because frontier labs will only give them access to lobotomized models.
34
70
12
494
28,416
This is why there always been animosity between offense and defense in cyber. Like bro, lets work together
‼️ Researcher Erica Windisch skipped coordinated vulnerability disclosure and published 11 unpatched Tailscale flaws. In her lab, Tailscale SSH race conditions let one hacked device get root on other servers and add a rogue node.
9
My 10 year old gaming computer about to come out of the closet!
卧槽,3090要可能要涨价了!! 因为老黄的刀法被人破解了 有人给3090解了个锁,同样限制在 360W,PyTorch 测试从 75 TFLOPS 跑到了 135 TFLOPS,提升约 80%! 你以为是超频,把功耗往上拉? 但他改的是显卡里控制运算速度的寄存器,这些寄存器平时有权限保护,正常改不了 他利用 GPU 启动固件的漏洞,赶在 NVIDIA 驱动加载之前拿到写入权限,把相关运算改成全速,再交给原版驱动使用 解开的主要是 FP16/BF16 输入、FP32 累加这类 AI 运算的速度限制 但测试算力多了 80%!! 4090 也有分支项目做到了:同类运算的指令吞吐,从约 165 TFLOPS 提升到 331 TFLOPS,接近翻倍 项目地址,附上👇 github.com/Zagitta/gpu-unloc…
6