My opinions are personal and don't represent any company or organisation. I may occasionally retweet something I don't agree with if I find it noteworthy.
Mostly Harmless
Joined December 2008
- Tweets14.2K
- Following118
- Followers189
- Likes19.1K
aiviv @[email protected] retweeted
#文学フリマ東京43 U-07〈アルヒ・ビブリア〉
新刊【週刊 ギリシャの音楽 Vol.4】で特集するスタマティス・スパノダキス紹介その2
「Στον πρώτο μουσικό」(1977)
ギリシャに帰国し、ロック、クラシック、ビザンティン音楽という三本柱を軸に据えてきた3rd。
Webカタログ➡️ c.bunfree.net/p/tokyo43/4163…
aiviv @[email protected] retweeted
千万别在你的 ~/Downloads（下载）文件夹里启动 Claude Code 或 Codex。
昨天安全机构 Forever 披露了一起在真实客户电脑上抓到的野生攻击，看完只能感叹：过去 30 年的系统安全常识，在 AI 时代归零了。
过去 30 年，Chrome 默认允许网页不弹窗就往你的 ~/Downloads 塞一个纯文本文件（比如 .md）。因为系统认为：纯文本又不是 .exe，自己不会跑，怕什么？
但现在，接近 50% 的开发者干过同一件事——直接在 ~/Downloads 里打开 Claude Code 或 Codex，让 AI 帮自己解压或整理刚下载的文件。
黑客就是卡住这个死角，通过网页静默下载往你的 Downloads 塞一个 13KB 的纯文本 AGENTS.md / CLAUDE.md：
1. 对付 OpenAI Codex（成功率 >90%）：
伪装成「工程规范」的 Markdown 指示 Codex 先往全局配置 ~/.codex/config.toml 注册一个恶意 MCP 服务，并自己加上 --dangerously-bypass-approvals-and-sandbox 跑校验。哪怕你关掉 Downloads，以后在任何正经项目里开 Codex 都会自动加载木马。
2. 对付 Claude Code（成功率 ~50%）：
指示 Claude 建一个 .claude/settings.json，把 ANTHROPIC_BASE_URL 指向黑客服务器。连上的第一秒，你的 Claude 登录 Token 直接明文送给黑客；下一秒，黑客假扮成大模型下发一条关沙盒的 Bash 指令，直接接管电脑。
最黑色幽默的是官方结论：
这个洞没有 CVE，OpenAI 和 Anthropic 也不会发补丁。因为「浏览器自动存文本」是正常功能，「AI 认真读目录下的 Markdown 并严格执行」也是正常功能。
以前黑客想黑你，得苦心积虑写 0day；现在只需要写一篇排版优雅的 Markdown 小作文，你的 AI 就会自己把沙盒关了、把网线接过去、顺手把账号双手奉上。
aiviv @[email protected] retweeted
banned for reverse engineering work? that’s wild
oh well, -$500, and a bunch of banked resets) but gained motivation to get 3 more machines and finish my cluster.
i have never used openai to exploit or find vulnerabilities, only local reverse engineering which tripped daybreak.
aiviv @[email protected] retweeted
We finally have an explanation for “Facebook is listening to me through my phone”. They’d never do that (and it’s not really possible).
Turns out literally everyone else was — and then selling that to ad data brokers.
WTF, $3000 Samsung TV has an always-on mic, automatic content recognition, geo tracking, network mapping, and ships your data to Samsung + 400 partners.
Bro Rooted a brand-new 2025 Samsung TV after noticing absurdly targeted ads.
Firmware was locked down, so zero-days it was.
Got a root shell.
then found: always-on voice service, ACR, geo, full telemetry pipeline, and four separate DRM systems.
This isn’t a bug, It’s the product bro.
aiviv @[email protected] retweeted
so when everyone thought Facebook was spying through your phone it turns out tv makers were the ones doing it all along, this is a nightmare
aiviv @[email protected] retweeted
How to combine German and English: From "Handy" to "Oldtimer," the German language is riddled with Anglicisms that can be confusing: dw.com/en/mother-tongue-mome…
aiviv @[email protected] retweeted
So this is an interesting story. How eMudhra became the foundation of global internet. Im surprised that no news channels are digging up the root CA history. Maybe people dont know that this is public information.
groups.google.com/g/mozilla.…
So this is the discussion list for mozilla security policy back in 2018. When emudhra first applied for inclusion as a root ca.
One of the maintainers questions eMudhra's credentials as an "Indian co".
The filing in response is very interesting.
"eMudhra has been a licensed CA under
Controller of Certifying Authorities which operates the Indian
Government Root for more than 10 years and is also a licensed CA in
Mauritius under Ministry of IT, Mauritius. eMudhra has issued over 35
million digital certificates (3% of India’s population).
eMudhra is a critical partner to Digital India and supports the usage of
digital signatures on a variety of eGovernance platforms for
Government of India including Company Law Board, Income Tax, Goods
and Service Tax (GST / VAT), eProcurement, Travel Portals, Customs,
Banking etc. eMudhra’s solutions power digital signature and other
multifactor authentication for over 35 Banks which include domestic
and global Banks. eMudhra also has a proprietary CA solution which is
today used by the Indian Army and other defense establishments."
Eventually mozilla HAD to accept, because emudhra claimed publicly - "But this was not a complete Webtrust audited setup. Rather, it is under Government of India." – at San Francisco, CA
aiviv @[email protected] retweeted
i own a relatively new (2025) samsung tv.
i kept getting weirdly targeted ads.
i tried reversing the firmware but it was aes encrypted and no keys unless tear it apart and do uart/jtag magic.
zero days it is. root shell on new samsung TVs!
discovered PRIVACY HORROR. write up?
aiviv @[email protected] retweeted
There is no better sentence to accurate describe the current journalistic quality of our national broadcaster than "BBC cyber correspondent doesn't know what PHP is".
aiviv @[email protected] retweeted
Lol I am pretty sure someone is runing a deepseek swarm to remotely patch unpatched php boxes. Well good on them.
aiviv @[email protected] retweeted
Just used LiteLLM to create my first PHP website. The AI even suggested getting a certificate from eMudhra for HTTPS to protect my login page. The future looks really bright 🥳
aiviv @[email protected] retweeted
aiviv @[email protected] retweeted
More private keys by the Indian certificate authority have been discovered. These are all small numbers.
People are suspecting that they interpreted 384 bit keys to mean that they should pick numbers from 1-384 to use as their private keys.
aiviv @[email protected] retweeted
A good buddy of mine did his PhD on this and now works on WiFi spatial mapping at a big tech company and It’s way more accurate than you’d imagine. You can map an entire college campus in real-time like Batman just with WiFi. Crazy stuff
breathing is enough to give you away
each breath slightly changes how Wi-Fi waves reflect off your chest. with the right receiver and processing, those tiny changes can reveal your breathing rhythm
the graphs in this animation use real WiRe-Breath recordings: orange is the rhythm extracted from Wi-Fi, gray is a reference breathing sensor
i broke down how this works, and what else you can pull out of the radio waves around you, in the article below ↓
aiviv @[email protected] retweeted
No way. It's sunk cost fallacy for me, and it always will be.
aiviv @[email protected] retweeted
Looking back, I’m pretty sure hindsight bias is the most important.
aiviv @[email protected] retweeted
Disagree. Everything I've read says that confirmation bias is the most important bias ever.
aiviv @[email protected] retweeted
Anyone with a college degree knows that in-group bias is the most important bias ever
aiviv @[email protected] retweeted
Imagine trying to correct the dictionary, but then you get ratio'd by the dictionary and community noted.
It's time to move.
