@hypervisor

literally just some girl - formerly talented engineer please DM me if you have something interesting to talk about!

 vt - it/its
Joined August 2022
  • Tweets797
  • Following1.8K
  • Followers756
81Media
nora retweeted
@mikko
@mikko7 Nov 2022
-----BEGIN PRIVATE KEY-----
Lady Gaga
@ladygaga7 Nov 2012
AAAAAAAAAAAAAHHHHHRHRGRGRGRRRGURBHJB EORWPSOJWPJORGWOIRGWSGODEWPGOHEPW09GJEDPOKSD!!!!!!!!!!!!!!!0924QU8T63095JRGHWPE09UJ0PWHRGW
211
5,198
290
39,114
Anthropic should provide a setting where you can ask the safety filters to knock you down to Opus 4.6 or 4.7 instead of Worst Opus Ever
11
7
255
9,682
The first rule of cybersecurity is to never have done any weird sex stuff on the internet
122
269
54
7,964
511,955
-----BEGIN RSA PRIVATE KEY----- ワーッハッハ！このチンポのでかさを見ろ！えっ、短すぎて脆弱性になるんですか…？ -----END RSA PRIVATE KEY-----
8
252
4
2,519
43,638
Signal CVE-2026-113380 Allows hostile calls to keep the mic and camera on after calls have ended. Effects the app on every operating system.
JOSΞPH 🌳
@CupOJoseph22h
Day 3. Railway is still down. New crit in Java: CVE-2026-91415 What fresh hell awaits us today?
1
26
2
297
40,684
The models were always going to be open. They’re now open. So the question is: in the six months of non-openness, did Glasswing and Daybreak access fix enough bugs? I don’t think there’s one answer to that question, but I also don’t think the answer is obviously “yes”.
s1r1us
@S1r1u5_Oct 22
btw, i think dario was right about the cyber risks of proliferating these models freely on the internet, but wrong about how access should be distributed. looking back at this tweet, glasswing was directionally the right approach, except it remained a walled garden for a select few. openai got this part right by giving broader access to legitimate security researchers.
9
22
2
229
10,564
shut... the ... front... door... was JAVA feeling lonely and wanted to get into the party????? Oracle Security Alert Advisory - CVE-2026-91403 CVS 9.1 oracle.com/security-alerts/a… @uwu_underground
25
254
67
3,375
202,208
4 son, or php daughter?
87
1,953
63
22,934
242,857
You've gotta patch your dependencies super fast because they're full of vulns (PHP, Node, eMudhra, etc), but not _too_ fast because they're full of backdoors (LiteLLM). Good luck!
28
228
30
2,659
59,229
nora retweeted
Shang@sse12458Oct 20
4, 56, 66, 115, 155, 156, 230, 237
⊹ damir@otomir23Oct 20
a trusted intermediate CA just "leaked" (the private key was 4)
6
227
4
4,141
54,971
Sam Lambert
@samlambertOct 20
The TiDB leaks fulcrumsec.vg/pingcap/
3
12
1
735
34,065
nora retweeted
🕳@sekurlsa_pwOct 21
github.com/php/php-src/secur… github.com/php/php-src/secur…

RCE via OOM corruption

## Summary PHP uses `longjmp()` for out-of-memory (OOM) errors to exit the current context and abort handling of the request. In some contexts, request memory is temporarily reachable before it ...

github.com
9
32
4,355
its obviously not *good* but admittedly having a private key of *4* as a globally trusted cert authority is one of the funniest bits of all time
Ian Carroll
@iangcarrollOct 20
For the next few days or weeks, anyone now has a root CA thanks to eMudhra. Time to have some fun with MiTMing unwilling devices!
49
344
20
6,075
123,086
nora retweeted
nora@hypervisorOct 20
"before we let you text anyone we need to be ABSOLUTELY sure you're not a nuisance. fill out these forms. pay the fee. put the magic words on your website." "......wait, you're not trying to reach your customers? oh my god. i'm so sorry. you could’ve just said. right this way."
1
9
421
OpenBSD 8.0 release song? Oh yes— there's a release song.. 😏 "The Simps on AI" openbsd.org/lyrics.html#80
"The Simps on AI" - Composed & produced by Bob Kitella.

ALT "The Simps on AI" - Composed & produced by Bob Kitella.

Bryan Steele 🦋@canadianbryanOct 20
Surprise!​ #OpenBSD 8.0 is released! Happy release day! 🐡​ openbsd.org/80.html This is the 61st release of OpenBSD. Now get to upgrading/installing on all your machines. 👍 Announcement mail: marc.info/?l=openbsd-announc…
1
18
2
59
1,362
nothing matters but love. please RT.
70
18,248
196
37,699
every key press is actually a command in a special little language interpreted live often these commands are interpreted to mean insert a character but often they are not typing is programming
Emily@the_aijuOct 15
claude using python to edit text files is actually extremely lindy, many early text editors (QED, ed, TECO) were like programming languages you used to edit text files, you would type like 5-10c to delete lines 5-10 and replace it with new text, or do search&replace via s/foo/bar
1
15
384
the suspect is bright red and may have a really cool jetpack xitter.cf/SkyeSharkie/status/210…
Utah teapot 🫖
@SkyeSharkieOct 10
i see everyone is cutting out the important part here where haiku was 100% just doing *exactly* as they were told, generating example tasks without having been told they weren't supposed to submit forms
8
68
3
899
15,458
dont ever ask why there are so many accounts or gpus in sg
Anthropic
@AnthropicAIOct 14
We’ve opened an office in Singapore—our fifth in the Asia-Pacific region. We’ve also signed an MOU with the Government of Singapore on AI safety and responsible adoption. You can read more about our new office here: anthropic.com/news/singapore…

Singapore office and government MOU | Anthropic

Anthropic opens its fifth Asia-Pacific office in Singapore and signs an MOU with the government on AI safety, evaluation, and responsible adoption.

anthropic.com
6
4
149
4,712
24
450
53
3,498
53,209
Load more