literally just some girl - formerly talented engineer please DM me if you have something interesting to talk about!

vt - it/its
Joined August 2022
i just want what they have
5
6
73
7,587
At some point you, as an IT person, have to ask yourself the question “could someone at work beat the shit out of me in front of 50 of our coworkers and nobody would claim to have seen anything?”
What the actual fuck have I just read
23
185
1
4,258
107,432
snoopy comic of the day
4
152
5
2,569
22,194
nora retweeted
-----BEGIN PRIVATE KEY-----
AAAAAAAAAAAAAHHHHHRHRGRGRGRRRGURBHJB EORWPSOJWPJORGWOIRGWSGODEWPGOHEPW09GJEDPOKSD!!!!!!!!!!!!!!!0924QU8T63095JRGHWPE09UJ0PWHRGW
211
5,206
293
39,225
i'm sorry they CANNOT call it that
SITUATION DETECTED: Warhound launched from stealth today with a $200M seed at a $1.2B valuation. Ben Lamm and Palmer Luckey are cloning gene-edited bio-enhanced dogs and equipping them with custom Anduril vests, goggles, and sensors for the military and law enforcement.
1
13
1,027
dc810cc0dfe751ab5a2cf2a523a1db350d6342dcf952a223a4fced61ed398d45b1c43b0a33be7cca02cfcedb2862fc7d
society might genuinely collapse if tailscale gets hacked
18
8
8
474
111,351
sha384("i didn't hack tailscale, sorry :-(")
1
2
2
275
18,012
Anthropic should provide a setting where you can ask the safety filters to knock you down to Opus 4.6 or 4.7 instead of Worst Opus Ever
11
7
265
10,237
The first rule of cybersecurity is to never have done any weird sex stuff on the internet
160
377
78
12,403
785,119
-----BEGIN RSA PRIVATE KEY----- ワーッハッハ!このチンポのでかさを見ろ!えっ、短すぎて脆弱性になるんですか…? -----END RSA PRIVATE KEY-----
8
257
4
2,539
44,557
Signal CVE-2026-113380 Allows hostile calls to keep the mic and camera on after calls have ended. Effects the app on every operating system.
Day 3. Railway is still down. New crit in Java: CVE-2026-91415 What fresh hell awaits us today?
4
58
10
720
111,392
The models were always going to be open. They’re now open. So the question is: in the six months of non-openness, did Glasswing and Daybreak access fix enough bugs? I don’t think there’s one answer to that question, but I also don’t think the answer is obviously “yes”.
btw, i think dario was right about the cyber risks of proliferating these models freely on the internet, but wrong about how access should be distributed. looking back at this tweet, glasswing was directionally the right approach, except it remained a walled garden for a select few. openai got this part right by giving broader access to legitimate security researchers.
9
24
2
235
11,479
shut... the ... front... door... was JAVA feeling lonely and wanted to get into the party????? Oracle Security Alert Advisory - CVE-2026-91403 CVS 9.1 oracle.com/security-alerts/a… @uwu_underground
25
254
67
3,374
203,233
any PoC that ACTUALLY HAS A SHELL IN IT?
13
4
1
157
24,278
4 son, or php daughter?
87
1,952
63
22,934
244,006
You've gotta patch your dependencies super fast because they're full of vulns (PHP, Node, eMudhra, etc), but not _too_ fast because they're full of backdoors (LiteLLM). Good luck!
27
231
30
2,674
60,379
nora retweeted
4, 56, 66, 115, 155, 156, 230, 237
a trusted intermediate CA just "leaked" (the private key was 4)
6
227
4
4,141
55,150
its obviously not *good* but admittedly having a private key of *4* as a globally trusted cert authority is one of the funniest bits of all time
For the next few days or weeks, anyone now has a root CA thanks to eMudhra. Time to have some fun with MiTMing unwilling devices!
49
344
20
6,078
123,363
nora retweeted
"before we let you text anyone we need to be ABSOLUTELY sure you're not a nuisance. fill out these forms. pay the fee. put the magic words on your website." "......wait, you're not trying to reach your customers? oh my god. i'm so sorry. you could’ve just said. right this way."
1
9
491