@rockkdev

cto @cubbylaw, prev. edge security @vercel

 Los Angeles
Joined July 2015
  • Tweets1.8K
  • Following266
  • Followers1.4K
185Media
Include

Only show posts containing:

Exclude

Hide posts containing:

Time range
-
Minimum likes
Replying to @winhelpwin
Dots "." are treated as a sorta invisible character to the Gmail parsing system, so warriorsFan[at]gmail[dot]com with 1 or more "."s anywhere in the "warriorsFan" portion will be ignored and still forwarded to the original email
3
1
92
62,602
Replying to @davidgobaud @RobinhoodApp @twilio @vladtenev
There would be no need for the dot trick, then. Everyone I’ve seen who’s gotten this has been to a dot trick address
4
1
118
34,775
Replying to @linguinelabs
Yeah; this is one of those things that seems obvious in retrospect, but honestly really easy to miss as an engineer
1
1
177
37,578
Replying to @bmgentile
Yes, HTML injection via the device name. Basically XSS with no scripting, just HTML. I did check, the URL is a phishing URL, albeit I refrained from linking it.
8
3
195
66,448
New Robinhood phishing chain that's kinda beautiful: 1. Attacker creates an RH account using the Gmail dot trick of your email (same inbox, different address) 2. Sets device name to HTML 3. RH's "unrecognized activity" email renders the device name unsanitized (html injection) The result is a real email from [email protected], DKIM pass, SPF pass, DMARC pass, with a phishing CTA Just because it's real, doesn't mean it's safe... $HOOD
177
360
125
3,761
2,978,184
Day 1! Come say hi if you are in NYC this week! 🏇
Truman Sacks
@trumansacks125 Aug 2025
Excited to share we’ve raised $2.75M for @CubbyLaw from @LudlowVentures, @SamHinkie, and @PSUMVC. We’re building the first AI teaching assistant for law students, powered by our own legal intelligence model trained on thousands of professors’ syllabi, past exams, outlines, and grading rubrics. Cubby started as a horizontal AI research tool, but when law students began adopting it fast, we went all in. Law school prep is broken: • Curve-based grading • 100+ hrs building outlines • Legacy tools students still pay thousands for Cubby brings it all into one connected workspace: case briefs, outlines, and practice exams, calibrated to how your professor teaches and tests. Law school is our first step toward a new era in legal tech.
5
1
86
17,789
Excited to be apart of this 🏇
Truman Sacks
@trumansacks125 Aug 2025
Excited to share we’ve raised $2.75M for @CubbyLaw from @LudlowVentures, @SamHinkie, and @PSUMVC. We’re building the first AI teaching assistant for law students, powered by our own legal intelligence model trained on thousands of professors’ syllabi, past exams, outlines, and grading rubrics. Cubby started as a horizontal AI research tool, but when law students began adopting it fast, we went all in. Law school prep is broken: • Curve-based grading • 100+ hrs building outlines • Legacy tools students still pay thousands for Cubby brings it all into one connected workspace: case briefs, outlines, and practice exams, calibrated to how your professor teaches and tests. Law school is our first step toward a new era in legal tech.
3
4
951
Replying to @stockxsucks
you're just hanging around the wrong areas 💯
1
143
Replying to @pookybypass
👀 their cold pressed juices and protein smoothies are actually pretty good
1
155
LA is under appreciated
1
1
5
3,009
Replying to @cultured
Built a Minecraft server
6
221
Replying to @cubbylaw @CubbyApp
🐎⚔️
228
Replying to @b_nnett @AppStore
A few apps I have just make this a secret. The main app is free and has limited demo/free functionality. You then go to settings, press and hold an unrelated icon or piece of text, and then the license box pops up.
286
Replying to @aycdjake
Some drop shipping stores probably do more revenue 😭
1
134
I have so many things I want to create that I end up getting put in a mental gridlock where I don’t create anything.
11
1,718
Replying to @umasiii
Childhood dream from 2015 secured
203
Throwback to when I found a bypass to Adidas splash. It worked because Adidas development team still returned developer cookies on a GET to the staging splash page, even with invalid auth. I'd GET staging, take the hmac, transfer to the live domain, and bypass splash.
8
1
118
28,968
Replying to @b_nnett
Yeezy Mafia, Sole Slayer, AIOBot, OG YZYlab, Heatedsneaks refresh bypass, Wrath Adidas (Wrath logo is Adidas upside down), and way, way, way more. Been in the botting game since 16' and sneakers since 15', and I have seen a lot in that time. Way too much to list.
5
508
Replying to @stockxsniper
The fact this isn’t even a meme 😭
9
2,847
Replying to @3liet
I think that this is the problem. The Ivy League and similar have a leg up mentally. You're not even given a shot with interviews otherwise. The people I know who DID find a way to get an interview had amazing results. It's that first leg that's the hardest.
3
1,567
Load more