Penetration Tester / Speaker/ Bug Bounty Hunter /
Oklahoma
Joined July 2021
- Tweets3.1K
- Following2.2K
- Followers2.5K
- Likes42.8K
Just going to hit delete and start building again, end up worse off and more frustrated but it will feel nice for like 5 minutes.
Roll4Combat retweeted
Sometimes it seems security is drifting back towards a "Prevent Breach" mindset.
Prevent breach was never enough. Patch faster, of course.
But offensive AI is about a lot more than finding bugs!
Invest in Assume Breach!
Grow an internal Red Team. Automate offensive AI. Learn with defenders what matters
Exploit yourself before someone else does it for you.
In the end, you will not patch your way out of this.
Roll4Combat retweeted
Before local AI is banned, learn how to host and tune your own models.
Specific learning curves to understand for me were:
- Offloading portions of newer models to SSD rather than RAM
- Prompt caching configs
- Preload tuning
- the right choice of model for the task
- pre optimized models for your hardware and harness
- finding the fastest inference server at the web/api level
Roll4Combat retweeted
Sometimes you get on here and everyone is shouting about things you know… They are friends, and people you respect, or with titles, etc, and when those opinions get numerous you begin to doubt yourself…
Don’t.
9 times out of 10, it’s hyperbole, groupthink, sensationalism, trolling, marketing, or grift.
Test your assumptions and expertise, pivot if things change, but if you are true expert or practitioner, stay strong and confident in your abilities and intuition. 🫶
Roll4Combat retweeted
daybreak-blue cares so much about authorisation, I asked it to patch a bug in "scope add" and it removed the feature to make scope read-only 🤣
Roll4Combat retweeted
Guys I do sometimes prompt like… “find me a crit, make no mistakes” but only because I have 70+ thoroughly researched and defined skills for my custom harness…
New Executive Offense with @Jhaddix and me on why every model has to earn its way into Armada, what refusals cost a hackbot, and why benchmarks only nominate challengers.
executiveoffense.beehiiv.com…
Can’t wait till everyone gets their hands on it
We tried all the agent harnesses, frameworks, and commanders under the sun… and none was right for us. So we built our own, Armada. Here’s what we focused on:
Specialized for offsec (deep skill engineering)
Engineered to fight competition bias Performs on long running tasks
Web, recon, LLM, Internals
Auto scaling
Auto learning (skills)
Deep logging
90% browser based for max success
Local and remote model compatible
Mutator proxy to enhance injection testing
Separate review agent
Next up:
Mobile client
Phone alerts
Model routing
Web Dashboard