@hypervisor

literally just some girl - formerly talented engineer please DM me if you have something interesting to talk about!

 vt - it/its
Joined August 2022
  • Tweets789
  • Following1.8K
  • Followers685
81Media
i just want what they have
5
5
71
6,721
Signal CVE-2026-113380 Allows hostile calls to keep the mic and camera on after calls have ended. Effects the app on every operating system.
JOSΞPH 🌳
@CupOJoseph4h
Day 3. Railway is still down. New crit in Java: CVE-2026-91415 What fresh hell awaits us today?
1
5
47
1,996
The models were always going to be open. They’re now open. So the question is: in the six months of non-openness, did Glasswing and Daybreak access fix enough bugs? I don’t think there’s one answer to that question, but I also don’t think the answer is obviously “yes”.
s1r1us
@S1r1u5_14h
btw, i think dario was right about the cyber risks of proliferating these models freely on the internet, but wrong about how access should be distributed. looking back at this tweet, glasswing was directionally the right approach, except it remained a walled garden for a select few. openai got this part right by giving broader access to legitimate security researchers.
7
16
2
152
7,067
nora retweeted
Helios Mier@hmier18h
shut... the ... front... door... was JAVA feeling lonely and wanted to get into the party????? Oracle Security Alert Advisory - CVE-2026-91403 CVS 9.1 oracle.com/security-alerts/a… @uwu_underground
25
240
64
3,236
186,103
any PoC that ACTUALLY HAS A SHELL IN IT?
13
4
1
156
23,582
4 son, or php daughter?
86
1,941
63
22,788
239,486
You've gotta patch your dependencies super fast because they're full of vulns (PHP, Node, eMudhra, etc), but not _too_ fast because they're full of backdoors (LiteLLM). Good luck!
27
226
29
2,599
57,147
nora retweeted
Shang@sse12458Oct 20
4, 56, 66, 115, 155, 156, 230, 237
⊹ damir@otomir23Oct 20
a trusted intermediate CA just "leaked" (the private key was 4)
6
227
4
4,140
54,640
Sam Lambert
@samlambertOct 20
The TiDB leaks fulcrumsec.vg/pingcap/
3
12
1
735
33,979
nora retweeted
🕳@sekurlsa_pwOct 21
github.com/php/php-src/secur… github.com/php/php-src/secur…

RCE via OOM corruption

## Summary PHP uses `longjmp()` for out-of-memory (OOM) errors to exit the current context and abort handling of the request. In some contexts, request memory is temporarily reachable before it ...

github.com
9
32
4,304
its obviously not *good* but admittedly having a private key of *4* as a globally trusted cert authority is one of the funniest bits of all time
Ian Carroll
@iangcarrollOct 20
For the next few days or weeks, anyone now has a root CA thanks to eMudhra. Time to have some fun with MiTMing unwilling devices!
48
344
20
6,052
122,158
nora retweeted
nora@hypervisorOct 20
"before we let you text anyone we need to be ABSOLUTELY sure you're not a nuisance. fill out these forms. pay the fee. put the magic words on your website." "......wait, you're not trying to reach your customers? oh my god. i'm so sorry. you could’ve just said. right this way."
1
8
194
what gets me is with all the hoop-jumping there is to be done if you're trying to do some a2p people actually want in any kind of volume, somehow tcr and the carriers don't mind spam if you aren't
Laurel Noack@laurel_noackOct 19
sms is going to be a dead channel is 2-5 years if we do not reverse course
1
2
14
682
"before we let you text anyone we need to be ABSOLUTELY sure you're not a nuisance. fill out these forms. pay the fee. put the magic words on your website." "......wait, you're not trying to reach your customers? oh my god. i'm so sorry. you could’ve just said. right this way."
1
8
194
fun thought experiment: is there ANY imaginable scenario that an HDCP 2 SRM actually makes survivable?
2
1
17
1,113
more replies
this has to be a prank on the content owners. "hey i bet i can't convince the movie studios this counts as revocation" ..... "WHAT DO YOU MEAN THEY BOUGHT IT"
1
6
61
like they really couldn't have snuck an intermediate cert or a part number or global serial or even a manufacturer ID or ANYTHING useful in here? one starts to imagine they never wanted it to work....
5
62
OpenBSD 8.0 release song? Oh yes— there's a release song.. 😏 "The Simps on AI" openbsd.org/lyrics.html#80
"The Simps on AI" - Composed & produced by Bob Kitella.

ALT "The Simps on AI" - Composed & produced by Bob Kitella.

Bryan Steele 🦋@canadianbryanOct 20
Surprise!​ #OpenBSD 8.0 is released! Happy release day! 🐡​ openbsd.org/80.html This is the 61st release of OpenBSD. Now get to upgrading/installing on all your machines. 👍 Announcement mail: marc.info/?l=openbsd-announc…
1
18
2
59
1,359
Al Right to Reverse?
7
11
2
396
10,584
Load more