@hypervisor

literally just some girl - formerly talented engineer please DM me if you have something interesting to talk about!

 vt - it/its
Joined August 2022
  • Tweets802
  • Following1.8K
  • Followers776
81Media
At some point you, as an IT person, have to ask yourself the question “could someone at work beat the shit out of me in front of 50 of our coworkers and nobody would claim to have seen anything?”
Rhys 🇦🇺‼️@SulloReportOct 23
What the actual fuck have I just read
30
209
2
4,887
125,864
snoopy comic of the day
4
154
5
2,571
22,222
nora retweeted
@mikko
@mikko7 Nov 2022
-----BEGIN PRIVATE KEY-----
Lady Gaga
@ladygaga7 Nov 2012
AAAAAAAAAAAAAHHHHHRHRGRGRGRRRGURBHJB EORWPSOJWPJORGWOIRGWSGODEWPGOHEPW09GJEDPOKSD!!!!!!!!!!!!!!!0924QU8T63095JRGHWPE09UJ0PWHRGW
211
5,206
293
39,226
Anthropic should provide a setting where you can ask the safety filters to knock you down to Opus 4.6 or 4.7 instead of Worst Opus Ever
11
7
265
10,240
The first rule of cybersecurity is to never have done any weird sex stuff on the internet
160
377
78
12,406
785,862
-----BEGIN RSA PRIVATE KEY----- ワーッハッハ！このチンポのでかさを見ろ！えっ、短すぎて脆弱性になるんですか…？ -----END RSA PRIVATE KEY-----
8
257
4
2,539
44,569
Signal CVE-2026-113380 Allows hostile calls to keep the mic and camera on after calls have ended. Effects the app on every operating system.
JOSΞPH 🌳
@CupOJosephOct 22
Day 3. Railway is still down. New crit in Java: CVE-2026-91415 What fresh hell awaits us today?
4
58
10
720
111,522
The models were always going to be open. They’re now open. So the question is: in the six months of non-openness, did Glasswing and Daybreak access fix enough bugs? I don’t think there’s one answer to that question, but I also don’t think the answer is obviously “yes”.
s1r1us
@S1r1u5_Oct 22
btw, i think dario was right about the cyber risks of proliferating these models freely on the internet, but wrong about how access should be distributed. looking back at this tweet, glasswing was directionally the right approach, except it remained a walled garden for a select few. openai got this part right by giving broader access to legitimate security researchers.
9
24
2
235
11,489
shut... the ... front... door... was JAVA feeling lonely and wanted to get into the party????? Oracle Security Alert Advisory - CVE-2026-91403 CVS 9.1 oracle.com/security-alerts/a… @uwu_underground
25
254
67
3,374
203,247
4 son, or php daughter?
87
1,952
63
22,934
244,024
You've gotta patch your dependencies super fast because they're full of vulns (PHP, Node, eMudhra, etc), but not _too_ fast because they're full of backdoors (LiteLLM). Good luck!
27
231
30
2,674
60,389
nora retweeted
Shang@sse12458Oct 20
4, 56, 66, 115, 155, 156, 230, 237
⊹ damir@otomir23Oct 20
a trusted intermediate CA just "leaked" (the private key was 4)
6
227
4
4,141
55,153
nora retweeted
alice 🔜 🌁 sf (10/24-11/8) → 🇯🇵 tyo (11/9-19)@aliceisplayingOct 21
Sam Lambert
@samlambertOct 20
The TiDB leaks fulcrumsec.vg/pingcap/
3
12
1
735
34,119
nora retweeted
🕳@sekurlsa_pwOct 21
github.com/php/php-src/secur… github.com/php/php-src/secur…

RCE via OOM corruption

## Summary PHP uses `longjmp()` for out-of-memory (OOM) errors to exit the current context and abort handling of the request. In some contexts, request memory is temporarily reachable before it ...

github.com
9
32
4,365
its obviously not *good* but admittedly having a private key of *4* as a globally trusted cert authority is one of the funniest bits of all time
Ian Carroll
@iangcarrollOct 20
For the next few days or weeks, anyone now has a root CA thanks to eMudhra. Time to have some fun with MiTMing unwilling devices!
49
344
20
6,078
123,368
nora retweeted
nora@hypervisorOct 20
"before we let you text anyone we need to be ABSOLUTELY sure you're not a nuisance. fill out these forms. pay the fee. put the magic words on your website." "......wait, you're not trying to reach your customers? oh my god. i'm so sorry. you could’ve just said. right this way."
1
9
492
OpenBSD 8.0 release song? Oh yes— there's a release song.. 😏 "The Simps on AI" openbsd.org/lyrics.html#80
"The Simps on AI" - Composed & produced by Bob Kitella.

ALT "The Simps on AI" - Composed & produced by Bob Kitella.

Bryan Steele 🦋@canadianbryanOct 20
Surprise!​ #OpenBSD 8.0 is released! Happy release day! 🐡​ openbsd.org/80.html This is the 61st release of OpenBSD. Now get to upgrading/installing on all your machines. 👍 Announcement mail: marc.info/?l=openbsd-announc…
1
18
2
59
1,369
nothing matters but love. please RT.
69
18,254
196
37,701
every key press is actually a command in a special little language interpreted live often these commands are interpreted to mean insert a character but often they are not typing is programming
Emily - SF ✈️ Nov 7-21@the_aijuOct 15
claude using python to edit text files is actually extremely lindy, many early text editors (QED, ed, TECO) were like programming languages you used to edit text files, you would type like 5-10c to delete lines 5-10 and replace it with new text, or do search&replace via s/foo/bar
1
15
386
the suspect is bright red and may have a really cool jetpack xitter.cf/SkyeSharkie/status/210…
Utah teapot 🫖
@SkyeSharkieOct 10
i see everyone is cutting out the important part here where haiku was 100% just doing *exactly* as they were told, generating example tasks without having been told they weren't supposed to submit forms
8
68
3
898
15,470
Load more