Security, software correctness, and Rust 🦀 Doing the cyberz @OpenAI prev: @RobinhoodApp, Cruise, @zellic_io, @Dropbox My awful opinions are my own

San Francisco, CA
Joined November 2013
d0nut 🦀 💜 retweeted
I got second overall at the Google Bugswat in Singapore!! 🎉☺️ It was a talented group of almost 50 hackers so I am really proud of the findings and thankful to have been invited!
38
12
6
353
17,748
d0nut 🦀 💜 retweeted
The critical Brotli RCE vulnerability discovery came out of our large scale infrastructure code scanning efforts Great research by @k_tr4n and @_sy1vi3 in assessing the widespread impact of this bug Update your Node.js, Bun, Envoy, anything using Brotli ASAP!
OpenAI
@OpenAIOct 23
During this red-teaming exercise, we also found a vulnerability that allows for unauthenticated remote code execution in Brotli, a widely-deployed compression library included in many pieces of software such as Node.js, Bun, and Envoy. The flaw could let an attacker run their own code on affected systems by sending or replying with malicious compressed data, without any need to create a user account. That is, an unpatched server that accepts compressed input could be taken over by a malicious client, and an unpatched client that accepts compressed input (such as “curl --compressed”) could be taken over by a malicious server. This root cause issue was actually fixed in the Brotli source code in February, but it wasn’t known at the time that it gave rise to a security vulnerability and there was no more recent release of Brotli. Since Brotli is built into other software, any software which includes this library needs to take the update too, followed by the users of that software. We disclosed the vulnerability to Brotli and other downstream projects such as Node.js, which released or are currently releasing security updates, and Brotli cut new release versions and published a CVE. More details on the patch and mitigations below: patchtheplanet.org/brotli
6
33
2
175
18,721
d0nut 🦀 💜 retweeted
I think we’re aware enough this year.
October is Cybersecurity Awareness Month
3
3
412
d0nut 🦀 💜 retweeted
Someone told me last week to look for “signposts” that might indicate attacks were getting significantly faster and worse than the historical norm. Do you think we’re seeing any of those?
Railway is compromised, rotate all API keys as soon as possible Deployments are down so don’t wait to redeploy Attackers are draining keys in real time, we didn’t lose much but can confirm this is still an active attack Stay safe friends
11
37
5
499
22,323
d0nut 🦀 💜 retweeted
Tibo
@thsottiauxOct 22
Day 17/ Bet you thought we forgot, but no, it’s reset day today. Also good time to remind you to get Daybreak Blue access, it only takes 15 mins and you don’t want to have to do it in the middle of an incident.
2,534
560
748
13,424
2,823,050
d0nut 🦀 💜 retweeted
Replying to @4A4133
disclosing ANOTHER bug today is like proposing at someone else's wedding
3
28
4
585
26,424
d0nut 🦀 💜 retweeted
php2shell is the most consequential vulnerability I have ever helped discover. I am proud of how our team worked closely in coordination with the PHP Foundation to provide support and to harden the patch in preparation for this release.

Please read more about our approach:
OpenAI
@OpenAIOct 21
OpenAI models helped researchers—operating as part of our Patch the Planet initiative—discover critical security flaws in PHP, an open-source programming language used to run an estimated 70% of websites. Over the past two months, we led a coalition of maintainers, researchers, and security providers to prepare fixes and protections ahead of disclosure. This duration was necessary because the fix was quite intricate and required a major change to the PHP engine. Every site using PHP can now safely upgrade their version to stay secure, in addition to applying mitigations from various security vendors. Due to the severity of these flaws and PHP’s widespread use, we consider this bug to be one of the most impactful vulnerabilities in recent memory. It also marks a new phase, where AI can find security bugs with internet-scale impact. This is an example of the Defender’s Window in action: to our knowledge, frontier AI was able to find this vulnerability ahead of attackers, giving defenders time to prepare. openai.com/index/coordinated…
Readers added context they thought people might want to know
‪OpenAI may claim a role in the coordinated response and patching process. But the initial discovery and exploit development, however, occurred several months earlier by an independent researcher.‬ ‪x.com/lcfr_hax/statu…‬
46
154
15
1,390
108,844
d0nut 🦀 💜 retweeted
Node.js Security Advisory: a high-severity RCE flaw in Node's Brotli decoder affects Node.js 22, 24, and 26. Vercel WAF rules are live for every project and block known exploit patterns. vercel.com/kb/bulletin/node-…
73
312
221
2,835
609,436
d0nut 🦀 💜 retweeted
gotta give it to @OpenAI and their sane daybreak program heif heist by harsh kvmescape by paulos php2shell by lcfr gitlab rces by joaxcar chrome full chain by moyix wordpress rce by hashkitten all largely thanks to openai daybreak giving researchers access to gpt 5.6 sol.
17
50
8
934
101,024
d0nut 🦀 💜 retweeted
Replying to @galaxy1025850
但是 Cloudflare 开了小橙云 🥰
2
3
323
17,964
d0nut 🦀 💜 retweeted
Attack surface reduction is the one thing that reliably works.
Reducing the attack surface of deployed services and apps is a fundamental component of software that is secure by design. Earlier this year we tasked Claude with autonomously mapping and reducing the attack surface of 25 large and widely used OSS codebases. This blog post covers some of our methodology and a preview of the data we collected. This research resulted in a significant reduction in OpenSSH pre-authentication attack surface (now fixed in 10.6). And over 500 findings where reachability could be reduced and configurations hardened to ensure security controls weren’t silently disabled. anthropic.com/research/attac…
5
32
2
158
13,773
d0nut 🦀 💜 retweeted
Replying to @d0nutptr
Replying to @doiftrue
Partial mitigation
1
1
3
978
If you run PHP please: session.upload_progress.enabled = Off php_admin_flag session.upload_progress.enabled Off
1
9
2
44
20,934
d0nut 🦀 💜 retweeted
Tibo
@thsottiauxOct 19
Our team worked with OpenCode to have their users who are also OpenAI API customers back in business and any credits refunded which would have been drawn in the attack. Also, you can request Daybreak Blue access to use our cyber permissive setup for defense. Do not wait until you have to deal with an incident. We’re here to help.
468
297
125
8,258
1,408,660
d0nut 🦀 💜 retweeted
How often do ArXiv papers contain errors in the main theorems they claim to prove? Using GPT-6.1 Sol to identify such mistakes, it finds: - 6% of papers before 08/2026 contain main theorems that are false. - Only 1.5% contain similar mistakes in the last two months.
19
74
16
562
93,472
d0nut 🦀 💜 retweeted
Tomorrow the vulnerability details for the coolest (imo) KVM escape will drop. The Vercel team was amazing to work with and has been an incredible partner throughout this journey!
This is one of the most exhilarating times in technology, and this challenge was yet another jaw-dropping moment. When the details of OpenAI’s agent escape and Hugging Face hack started to emerge, it became clear that agent containment would be one of the most important priorities for any AI infra company. There are two classes of escapes: ① "escape the network" and ② “escape the matrix” 😁, as in, break the spell of virtualization. OpenAI was the former, where an agent not supposed to have internet access… gained it by hacking another system. Genuinely astonishing and worrisome. Through this challenge, however, we discovered something even more groundbreaking. A talented white-hat researcher, armed with a swarm of AI agents, expertise and perseverance, "pierced through" the Linux virtualization boundary that nearly every cloud sandbox provider in the world banks on today. I'm very thankful we got the report, were able to quickly move to protect our customers, found no evidence of customer data compromise, and collaborated with many industry partners to protect the wider internet. Our confidence and conviction in Vercel Sandbox are even greater now, after some of the smartest, most motivated researchers in the world, and their agents, gave it their best shot.
10
17
1
239
10,591
d0nut 🦀 💜 retweeted
Replying to @RadishHarmers
There's no point in coping. The AI will be better than you at coping within 6 months.
13
200
11
2,214
38,354
d0nut 🦀 💜 retweeted
ugh, this came out just when i needed it
The optimality of the packing for 11 squares has been formalized in lean thanks to Astra and Claude! Huge thanks to @ojoshe, @kleddamag, @wand_125, @guzhou0806, and @ctjlewis for aiding in the process. Image credit: jlevy.github.io/squares/case… 1/n
107
7,226
125
121,592
2,612,113
d0nut 🦀 💜 retweeted
They call me 007… I am very bad at Linux permissions
64
548
22
8,435
122,818