Imdad retweeted
I packaged up the "autoresearch" project into a new self-contained minimal repo if people would like to play over the weekend. It's basically nanochat LLM training core stripped down to a single-GPU, one file version of ~630 lines of code, then:
- the human iterates on the prompt (.md)
- the AI agent iterates on the training code (.py)
The goal is to engineer your agents to make the fastest research progress indefinitely and without any of your own involvement. In the image, every dot is a complete LLM training run that lasts exactly 5 minutes. The agent works in an autonomous loop on a git feature branch and accumulates git commits to the training script as it finds better settings (of lower validation loss by the end) of the neural network architecture, the optimizer, all the hyperparameters, etc. You can imagine comparing the research progress of different prompts, different agents, etc.
github.com/karpathy/autorese…
Part code, part sci-fi, and a pinch of psychosis :)
Imdad retweeted
New York’s incoming mayor bans Raspberry Pi at his inauguration party theregister.com/2025/12/31/z…
Imdad retweeted
Serious bugs often occur in third-party components integrated by other software. @ifsecure and I found this vulnerability in the Dolby Unified Decoder. It affects Android, iOS and Windows among other platforms, sometimes 0-click.
project-zero.issues.chromium…
Imdad retweeted
1/10 - I've been doing offensive security source code review for a long time now, and along the way I've learnt a lot of lessons that can make you more effective. Some of them include:
Imdad retweeted
To succeed in the future, you MUST learn web3.
Here's a list of 24 top resources to get up to speed (for free):
Imdad retweeted
🚨 ¡LARGAMOS! 🚀 Aprendé cómo explotar webviews junto a @imdadvs y @shiv__sahni en Apollo 12 en la #Eko2021 👏
🚨 NOW! Join @imdadvs & @shiv__sahni on Apollo 12 at @ekoparty to learn common webview related security issues & the story behind CVE-2021-21136 🔥
EN✅ | ES❌
Imdad retweeted
📢 In this @ekoparty talk, Imdadullah Mohammed (@imdadvs) & Shiv Sahni (@shiv__sahni) will discuss common webview related security issues & how they discovered CVE-2021-21136 🔥 which allowed sensitive data leakage to 3rd parties via HTTP request headers. Join us at #Eko2021! 🙌
Imdad retweeted
Mariana Trench is an open source static analyzer written to detect and prevent security issues in #Android and #Java applications. It can review large codebases, provide feedback to engineers, and detect bugs before they are introduced into a codebase. engineering.fb.com/2021/09/2…
Imdad retweeted
iOS 14.7.1 / 14.6 / 14.4 #JAILBREAK News: RELEASE Of New XNU Vulnerability PoC (Open Source Code)
VIDEO HERE: youtu.be/NCH2EKOIbPo
In a previous video, I said this will be released and it's now finally out. It's a bug reachable from the Sandbox and works on 14.7.1 and lower.
Imdad retweeted
Webview: An in-app Web Browser created to ensure seamless user experience without context switching between browser and mobile application. How secure is that? Ask CVE:2021-21136 and @imdadvs at #BSidesBCN21 SagradaFamilia track on Sept 30 at 4.45pm CEST
Imdad retweeted
building a new reconnaissance platform? I have attempted to gather most of the open source tool-set into a mind-map. You might refer this XMind: xmind.net/m/Xy7XEW . Other file-types: github.com/himanshudas/RaaP #recon #asm #monitoring #bugbounty
Imdad retweeted
Very happy to announce that I’ll be speaking at HITB2021SIN @HITBSecConf along with @imdadvs on Securing Webviews and the Story Behind CVE-2021-21136!
Join us on Friday, 27 Aug 3:00 PM SGT!!
#hitb #mobilesecurity #infosec #appsec #cybersecurity #HITB2021SIN
Imdad retweeted
Writing an iOS Kernel Exploit from Scratch
secfault-security.com/blog/c…
Imdad retweeted
Meet WiFiDemon: iOS WiFi RCE 0-Day Vulnerability & a 'Zero-Click' Vulnerability That was Silently Patched blog.zecops.com/research/mee…
Imdad retweeted
Hello world! I want to share with you a device I made, its name is "Yayagram", a machine that helps our beloved elders to keep communicating with their grandchildren . How? Let me open a thread to give you all the details of this contraption.
Imdad retweeted
Blogged! I wrote about a Discord's RCE I found.
masatokinugawa.l0.cm/2020/10… (日本語)
mksben.l0.cm/2020/10/discord… (English)
youtube.com/watch?v=0f3RrvC-… (DEMO)
Imdad retweeted
Excited to share my latest research! h2c smuggling: request smuggling via HTTP/2 cleartext. Leveraging TCP tunnels provided by HTTP/1.1 upgrades, we can initiate h2c connections directly with compatible back-end services, bypassing proxy access controls. labs.bishopfox.com/tech-blog…
Imdad retweeted
YOUR immunity is stronger than hydroxychloroquine (HCQ)
Studies show HCQ is ineffective in treating/preventing COVID
Meaning many patients who improved on it, improved by themselves. Our body is able to beat this virus in >90% of cases!
THINK POSITIVE
nyti.ms/2MXEXNB
Imdad retweeted
I've compiled a summary of every original public iOS kernel exploit from app context since iOS 10, describing the high-level exploit flow to get stable kernel read/write. The trends of how these exploits have evolved over time are quite interesting: googleprojectzero.blogspot.c…
Imdad retweeted
We are going to release #unc0ver 5.0.0 with support for every signed iOS version on every device using a 0day kernel vulnerability from @Pwn20wnd in sponsorship with phonerebel.com very soon. Update your devices to 13.5 and follow our progress on unc0ver.dev.

























