FOLLOWS YOU • “Wir müssen wissen, wir werden wissen” -Hilbert • (he/they/him/them) • infosec and privacy aficionado • mage
@da5ch0 || wishabitchwoods 😉
Joined February 2011
- Tweets70.9K
- Following4.9K
- Followers8K
- Likes102K
—————————————————————————————————————————dash🏴☠️ retweeted
Happy "Smashing the Stack for Fun and Profit" day for those who celebrate
30 years ago today, Phrack 49 published Aleph One’s “Smashing the Stack for Fun and Profit”.
A legendary paper that inspired generations of hackers and helped shape modern exploit development.
Still an essential reading.
phrack.org/issues/49/smashin…
Phrack 73 is coming soon!
—————————————————————————————————————————dash🏴☠️ retweeted
it's crazy that the only way to get a RTX 5080 is by sleeping with Jensen Huang
—————————————————————————————————————————dash🏴☠️ retweeted
i am a simple man. i just want to see @JensenHuang and @nvidia get their shit rocked. us computer nerds used to be on their side but now memory costs more than fissile material and it’s time people start shifting all their cuda efforts elsewhere, mayhaps
—————————————————————————————————————————dash🏴☠️ retweeted
in an age of meatproxies, seeing this mini documentary about the demoscene is needed
youtu.be/PeZNLvD4mds?is=IcYr…
"If programming and typing is your problem, maybe you shouldn't be programming"
Chaos from Farbrausch
—————————————————————————————————————————dash🏴☠️ retweeted
30 years ago today, Phrack 49 published Aleph One’s “Smashing the Stack for Fun and Profit”.
A legendary paper that inspired generations of hackers and helped shape modern exploit development.
Still an essential reading.
phrack.org/issues/49/smashin…
Phrack 73 is coming soon!
—————————————————————————————————————————dash🏴☠️ retweeted
So much “wait until the agent swarms are stealthy” talk. They’re effective today because they do a massive amount of noisy testing and iterate on the results. Making them stealthier means sacrificing coverage.
That tradeoff has always existed. This is the same pentest vs. red team conversation we’ve been having for years. You get coverage or stealth you don't get both.
—————————————————————————————————————————dash🏴☠️ retweeted
Yet another example of AI not boosting everyone’s agency equally. Some people exclusively receive a false confidence boost.
Mind you, this isn’t just very basic multi decades old security best practices, it’s documented in the product manual.
—————————————————————————————————————————dash🏴☠️ retweeted
It's laughable how much trust some people put in AI.
—————————————————————————————————————————dash🏴☠️ retweeted
No matter what Anthropic does, Dario can just write another 10k word essay and at least half the ea / ai safety crowd will be totally on his side again.
Their culture (long form essays) is their kryptonite. They’re powerless against it even when they’re obviously being played.
—————————————————————————————————————————dash🏴☠️ retweeted
Bump
OPENAI to EMPLOYEES: If someone is trying to seduce you, first consider — could they be a spy???
OpenAI is warning its employees about honeypot spies and strangers with children in playgrounds ... a very fun one with @georgia_wells and @MeghanBobrowsky:
wsj.com/tech/ai/ai-companies…
—————————————————————————————————————————dash🏴☠️ retweeted
Cyber is an extremely specialized field and now that the general public is paying attention they should know the following:
You shouldn’t listen to most defenders about offsec and you also shouldn’t listen to most offsec people on defensive work.
—————————————————————————————————————————dash🏴☠️ retweeted
Okay but it’s like you’re in an octagon and then the copper wires turn into snakes and they bite you but the snakes aren’t real they’re ghost snakes. It’s like that. That’s cyber defense
—————————————————————————————————————————dash🏴☠️ retweeted
Ah yup. That was indeed me. No mallace intended. I've been running some agents to do signups + agentic testing on similar platforms. Just halted the harness I was designing around this as it was definitely going off the rails and reaching too far
Readers added context they thought people might want to know
In many jurisdictions this is a crime. In the US under Computer Fraud and Abuse Act, 18 U.S.C. §1030, in the UK under Computer Misuse Act (CMA) 1990, in Germany Strafgesetzbuch (StGB), and many others.
justice.gov/jm/jm-9-48000-…
legislation.gov.uk/ukpga/1990/18/…
gesetze-im-internet.de/stgb/
