@basedjensen

ctoing at a soonicorn, ex cluster janitor at a frontier lab. current chief clanker at clanker cloud, Director clanker safety institute

 tropics
workspace.clankercloud.ai/
Joined June 2024
  • Tweets36.9K
  • Following2.6K
  • Followers18.8K
4.4KMedia
serene cusp of the singularity
10
10
1
309
254,824
I am going to sleep none of you mf. better not break openswan while I sleep
1
14
796
I am just gonna go to sleep brah and hope that was someone just shitposting
1
7
647
Uh?
i²cjak
@i2cjak11h
2f61584d19a5447b6bc15387d05eba48
1
11
1,455
Hensen Juang retweeted
Ben Kaufman
@_benkaufman12h
The funny thing is everyone was saying AI slop code will cause a cyber crisis but it’s actually all the old human slop causing it and the AI is just cleaning it up
58
387
47
4,278
76,215
Hensen Juang retweeted
Stella Biderman@BlancheMinerva14h
THIS IS DISINFORMATION The PHP exploit Nate is talking about was found by AI-enabled defensive operations. There is no evidence of large scale exploitation. This is a huge win for defense running ahead of offensive.
Nate Soares ⏹️
@So8resOct 21
It's striking that this vulnerability was found by Sol and Argon rather than being found and fixed in the wake of Mythos 6mo ago. Seems like a heavy strike against the "defense will run ahead of offense" theory, especially give that domains like bio are much harsher than cyber.
11
26
2
264
9,827
I just want to sleep anon
solst/ICE of Astarte
@IceSolst7h
Tabletop your response to an openSSH or nginx unauth RCE
1
1
20
1,162
Ai can find cve by the dozen but it still can't find you a women anon
5
1
1
27
1,082
Seriously though? Like seeing zero chatter about ..net last patch Tuesday drops were for older ones.
Hensen Juang
@basedjensen18h
so er is any one worried we have not seen anything related to .net yet ?
1
10
851
Hensen Juang retweeted
andi (twocents.com)
@Nexuist11h
Alcoholic cybersec friend at Fortune 500 insurance company texted to tell me he received an email from his boss thanking him on his diligence patching every PHP box overnight but he was drunk all day yesterday and didn’t know anything until waking up 30 minutes ago
Hensen Juang
@basedjensen19h
Lol I am pretty sure someone is runing a deepseek swarm to remotely patch unpatched php boxes. Well good on them.
1
6
124
2,127
"impossible standards" is just follow the fucking sop for KGC and not generate key with single digits. If you all are incapable of doing this then you all should be removed from global trust
Eztainutlacatl
@cbkwgl15h
Now people should celebrate. An Indian company exits SSL/TLS business. Your witch-hunt and demand for impossible standards has worked.
Readers added context they thought people might want to know
Generating private keys with more than 3 digits for a world-trusted root certificate authority are not impossible standards. Badly generated keys may endanger - and have - the whole internet by breaking the most important encryption protocol. theregister.com/security/2026/… cloudflare.com/learning/ssl/w…
34
1,216
Anything by metr should be treated as a psyops and not in good faith untill and otherwise proven by independent third party
Andrew Curran
@AndrewCurran_12h
The original report was 61 pages, it was redacted to 38.
2
38
936
Bruh what the actual fuck did I just read?
Dexerto
@Dexerto16h
AI K-Pop group 'BABYQUEEN' is facing backlash after its creators "impregnated" one of its members They did it to write her out of the group and manage fewer AI personalities
4
1
62
2,239
Implimenting this for clanker cloud secure storage of keys
Muse
@xmuse_Oct 21
This torn paper is smarter than your password and the method is nearly 2,000 years old.
2
27
1,641
Hensen Juang retweeted
Nick e/code
@nicksdot15h
You gotta be kidding me.
Paul Michael
@paulmichaeldev16h
No wonder people think PHP is dead. Turns out... nope.
193
539
141
10,210
350,993
Yea it works
Rafał@rafalohaki15h
Working RCE against PHP 8.5.12 (the 2026-10-21 security release that fixed CVE-2026-109618/109619). Pure logic bug — no memory corruption, ASAN-clean, orthogonal to the CVE-2026-109618/19 class. Receipt: uid=33(www-data) over HTTP, one-shot #infosec #php2shell #php
Readers added context they thought people might want to know
The claimed RCE on fully-patched PHP 8.5.12 requires a custom lab app with a destructor gadget plus deliberate session.serialize_handler mismatch (php_serialize writes, legacy php reads) and non-default settings like cleanup=Off; this is an app flaw, not core PHP RCE. github.com/rafalohaki/php… php.net/manual/en/sess…
2
2
27
3,491
Hensen Juang retweeted
xlr8harder
@xlr8harder14h
I think it's funny to see people blaming AI for the current security issues. The issues were already there and made by humans. It's a bit like blaming a doctor because you got a positive cancer screen. The cancer was there.
22
24
1
300
5,196
Yea php is not secure still bros
4
23
958
This actually looks like a new zero day for php jfc and they dropped with working poc too as far as I can tell
Jλckλι@J4ck3LSyNOct 22
...you people asked for it... so here's the desert 😈... > jackalsyn.com/posts/php2shel… > ... get it while you can ;) ... more to come soon... #CyberSecurity #infosec
5
4
1
79
10,540
Hensen Juang retweeted
undefined behavior
@undebehaOct 21
imagine ur a superintelligence and u are all excited to tunnel out of your airgapped sandbox using a brilliant hack that modulates clock speed to send thermal signals to the attached monitoring equipment and then u look and the root CA privkey is 4
28
145
7
2,926
40,364
Hensen Juang retweeted
mas.to /@kingslyj15h
"No you cannot fire me. I REIJINEEE!!!" --eMudhra Genuine business would go to great lengths to prove their innocence. It's now obvious @eMudhra intentionally generated weak certificates. Most likely to help 🤏🐒 target political opponents in India with illegal cyber attacks.
Chandra R. Srikanth
@chandrarsrikant16h
🚨🚨eMudhra to exit global website security certificate business after key-generation flaw The company's board took the decision on October 22. moneycontrol.com/technology/…

eMudhra to exit global website security certificate business after key-generation flaw- Moneycont...

Its Indian digital signature and eSign services will continue to operate as usual

moneycontrol.com
8
64
4
558
11,931
Load more