founder @osec_io | web/pwn with @redpwnctf + @dicegangctf | prev @dfsec_com
Joined September 2018
- Tweets646
- Following712
- Followers8.1K
- Likes6.8K
Robert Chen retweeted
We will be hacking OpenAI more closely now!
openai.com/index/partnering-…
Robert Chen retweeted
OpenAI has announced a partnership with Hacktron to investigate vulnerabilities in its systems. Our researchers will work with @OpenAI's engineers to prioritize testing of connections with third-party services, with broader frontier-model access through Daybreak Red.
We're excited to deepen our partnership with OpenAI, combining our offensive security expertise with their frontier models to help secure OpenAI and the broader software ecosystem.
openai.com/index/partnering-…
congrats on the marriage!
and @zeyu1337 @LiveOverflow for drafting the openai quote the night of the wedding
sept 17th: @HacktronAI pwns @OpenAI
nov 6th: OpenAI partners with Hacktron
crazy how much can change in a month!
openai.com/index/partnering-…
Robert Chen retweeted
Always a pleasure working with @Wealthsimple, where my dad is a user lol
Congrats to the winners, excited to see everyone at Breakpoint!
Congrats to @kaptan_web3 and @vanshuETH, the winners of our travel grant! OtterSec is sponsoring their trip to @solana Breakpoint in London, Nov 15-17, see you both soon! 🇬🇧
Thanks to everyone who applied!
Robert Chen retweeted
I'll be speaking at Scale or Die in London next week about our work on Anchor v2!
that's why we launched the $100k Save CTFs fund. CTFs need to quickly adapt to AI, or else they'll disappear. I heard ECSC did a good job this year.
@_mixy1 wrote a great blog osec.io/blog/save-ctfs-fund/
hacker address:
orbmarkets.io/address/AffzFD…
(fixed explorer)
There's dozens of critical, latent vulnerabilities lying deep in the modern software stack
This was one of the scariest ones yet, full compromise of bash, lp, cp, rm, and tons more..
Great work @S1r1u5_ and @HacktronAI!
future of hacking = exploiting 1days in all your dependencies
the internet is no longer for humans
The internet’s current security regime, which was built on the assumption that attackers are human, is obsolete in the face of AI. View article
i wonder how true this is. (without knowing any details) i would hope that exploitation of these bugs is super noisy, and Cathedral was only able to pull that chain off because they participated in an authorized bug bounty.
but with all of the RL env escapes, it's a bit hard to believe that lab monitoring is particularly strong. especially around 3rd party dependencies
maybe somebody from anthropic can comment..
thanks for the laptop @0xSigil!
All AI should be free, so I’m giving away the first RTX laptop for free, signed by NVIDIA Founder
@UnderdogAI gives everyone a free, capable & private AI. 100% on-device
To enter:
1) Retweet and like this post
2) Sign up for Underdog giveaway: underdog.ai/spark
3) follow @UnderdogAI so we can dm u
lots of noise with new CVEs. I hope we'll see more challenges like stealmybitcoin.com to prove how exploitable these issues are, especially with open models
my sense is the nodejs brotli bug is an order of magnitude easier to exploit than php2shell.
with cheap tokens, perhaps we can get a more insightful measure of exploitability. as opposed to just indexing off of CVSS rating..
