Matrices on a grill!

We're Sunk
Joined August 2024
💯💯💯
Don't waste your potential because you're not feeling confident or fully prepared. People who have only a fraction of your talent are already achieving great things, while you're still waiting for the right moment to start.
232
🇷🇺🇮🇱 | Mesut Özil acusó a la FIFA de doble estándar por sancionar a equipos rusos pero no aplicar medidas similares a equipos israelíes.
283
10,395
461
99,690
1,362,720
"The Linear Algebra Behind Google" is a short paper that explains the mathematics behind Google's original PageRank algorithm. The paper covers eigenvalues and eigenvectors, stochastic matrices, Markov chains, and iterative methods, using numerical examples and graphs to illustrate how PageRank works. Beyond the algorithm itself and the original paper by Larry Page and Sergey Brin, this is an interesting read for anyone curious about how linear algebra applies to one of the most influential algorithms in the history of the web. sites.cs.ucsb.edu/~gilbert/c…
29
236
14
1,670
58,379
Broccoli 🥦 Heartbleed potential: From unitialized 64kb ringbuffer bytes to multi-megabyte leak with ASLR pointers included. The overflow corrupts pos, the decoder’s ringbuffer write cursor that is enough to overwrite Brotli's function pointers and leak bytes👇
3
4
24
2,006
Lula versus Bolsonaro: Passei 1.901 dias em confinamento solitário por revelar a verdade sobre os assassinatos e a espionagem do governo dos EUA, inclusive contra o Brasil e suas indústrias. Lula, fora do poder, lutou pela minha liberdade. Lula, no poder, discutiu minha perseguição com o papa Francisco, que decidiu se encontrar com minha família e ajudar. Depois da minha libertação, Lula e eu nos encontramos em Roma para lamentar a morte do Santo Padre. Lula foi gentil com meus filhos e não pediu nada em troca. Em contraste, Jair e Flávio Bolsonaro nada fizeram e nada disseram. Sem a capacidade de dizer não a Washington e a Tel Aviv, não pode haver política interna, apenas ordens estrangeiras. Essas instruções são sempre as mesmas: “Ampliem nosso roubo de recursos e salários e calem a boca sobre nós assassinarmos crianças”. Os entreguistas entregarão tudo em troca de uma fatia, até a própria língua.
1,511
26,062
770
77,614
900,435
Another round of attack on my home country is imminent! The corrupt Trump government has lost public support with a skyrocketing inflation and now as a last resort wants to attack Iran again! Stop this madness. What happened to Americas first? Poor Iranians …
37
51
3
535
16,197
The Broccoli 🥦 bug (CVE-2026-111497) affected Chrome for ~8 years. Brotli decoding runs outside the renderer sandbox and is unsandboxed on some platforms. Back in 2015, a Chrome dev @chrisbentzel explicitly warned about this risk before enabling it: groups.google.com/a/chromium…
5
20
2
123
15,484
We got a PHP exploit working against MediaWiki, but getting freed memory reused just right takes some tinkering under normal traffic. LLMs struggle here without an expert's guidance, which may help explain the attempts but no confirmed successes.
Re: the widely circulated blog claiming the PHP bugs aren't easily exploitable: @trailofbits has a working exploit that gets a shell on an unmodified MediaWiki installation. eliastaylor.com/noexploit/
4
19
3
153
12,816
yrology retweeted
I think this team of hackers might be cracked. Calif is the same team behind the PHP vuln. iPhone duo jailbreak on release day is wild.
26
157
10
1,488
57,418
yrology retweeted
I just remembered why Brotli looked vaguely familiar: I worked on it at Google. I even co-authored an RFC [1]. Hopefully they haven't found my bugdoor 😅 Joking aside, CRIME [2] led me to work on things like Brotli and HPACK, the header compression scheme used in HTTP/2. That was the magic of working at Google. They operated at such a huge scale that a few weeks of your work could become part of a widely used Internet standard. One of my fondest memories is helping audit QUIC and writing little bits of crypto code for it. Before I left Google, a teammate on the Tink [3] team told me he believed Tink would last 50 years, outliving everyone on the team. Tink is now in its 10th year. 40 more to go! I also learned that breaking things is fun, but lasting contribution often comes from building things that make the Internet faster and safer. That same belief shapes much of our work at Calif. People know us for our offensive security research, but we've also done a lot of security engineering to harden systems and mitigate attacks, from large-scale Rust migrations to fast sandboxing or reducing zero-click attack surface in mobile apps. We'll be sharing some of that work soon. Stay tuned! [1] rfc-editor.org/rfc/rfc9841.t… [2] en.wikipedia.org/wiki/CRIME [3] github.com/tink-crypto
4
16
2
153
13,646
yrology retweeted
Vietnamese rulez!
The critical Brotli RCE vulnerability discovery came out of our large scale infrastructure code scanning efforts Great research by @k_tr4n and @_sy1vi3 in assessing the widespread impact of this bug Update your Node.js, Bun, Envoy, anything using Brotli ASAP!
4
52
3,385
How exploitable is the recent Broccoli 🥦 vulnerability (CVE-2026-111497)? We went beyond reproducing memory corruption and demonstrated a control-flow hijack. Not a realistic RCE exploit, but definitely not just a crash. Here's what we found. 🧵
3
19
5
110
49,063
yrology retweeted
Just in case it wasn’t clear: we popped the iPhone Duo on release day, adding a much needed feature, inspired by the php2shell hacker @lcfr_hax! What else there to hack? Wrong answers only.
75
77
10
977
84,303
yrology retweeted
This is too far. First our fav restaurants shutdown their booking websites because the NSA told them so, now they refuse to serve broccoli.
How exploitable is the recent Broccoli 🥦 vulnerability (CVE-2026-111497)? We went beyond reproducing memory corruption and demonstrated a control-flow hijack. Not a realistic RCE exploit, but definitely not just a crash. Here's what we found. 🧵
13
11
3
355
39,103
I’m honoured to be on the advisory board of the new Alignment Journal, and we open for submissions today! The field of AI safety needs more canonical, high-quality spaces for exposition (despite the wonderful efforts of many, many people, including Victoria Krakovna who is on the advisory board as well!) and I think this could be a great addition. Please take a look, and if you're doing research on AI safety then (Thank You! And) consider submitting!
The Alignment Journal publishes research on the scientific foundations of understanding, predicting, and steering artificial intelligent systems. As of today, submissions are open to everyone. What we do differently: - We pay reviewers, with bonuses for speed and insight. - Review discussion is confidential, but every accepted paper is published with a “review summary” to distill the insights generated. - Each paper is judged against our acceptance bar, not against other submissions. - Papers under review are listed publicly, and researchers can nominate themselves to review, so each paper can reach the reviewers who know the topic best. We seek work that builds theoretical or otherwise principled analyses of agency, robustness, incentives, interpretability, generalization, and long-term behavior, and whose significance survives the deletion of any particular model, dataset or benchmark. Empirical investigations of such ideas are welcome, and negative results are encouraged. We are especially interested in approaches that could apply to future superintelligent systems that interact and self-improve. You can submit your preprint in any format. Submissions are rolling and open now on the website. If you are instead interested in reviewing or serving as an action editor (basically: an area chair), create an account on our website. Links to submit, our scope and the reasoning behind the Journal are in the reply ⬇️
6
16
1
115
8,382
yrology retweeted
Who would’ve ever thought that my Cyanide port of Graviboard would end up running on a Duo on launch day?
10
12
1
290
13,945
yrology retweeted
Guys please give us a break
2
3
166
6,376
yrology retweeted
We cracked the new hardware based UFP mitigation in the iPhone Duo on release day (UFP = unavailable for purchase)
21
68
4
718
64,118
Hi, Duo
11
12
1
457
15,911
Hi from Calif
85
168
20
2,227
90,598