@rockkdev

cto @cubbylaw, prev. edge security @vercel

 Los Angeles
Joined July 2015
  • Tweets1.8K
  • Following266
  • Followers1.4K
185Media
Include

Only show posts containing:

Exclude

Hide posts containing:

Time range
-
Minimum likes
Replying to @winhelpwin
Dots "." are treated as a sorta invisible character to the Gmail parsing system, so warriorsFan[at]gmail[dot]com with 1 or more "."s anywhere in the "warriorsFan" portion will be ignored and still forwarded to the original email
3
1
92
62,603
Replying to @davidgobaud @RobinhoodApp @twilio @vladtenev
There would be no need for the dot trick, then. Everyone I’ve seen who’s gotten this has been to a dot trick address
4
1
118
34,775
Replying to @linguinelabs
Yeah; this is one of those things that seems obvious in retrospect, but honestly really easy to miss as an engineer
1
1
177
37,578
Replying to @bmgentile
Yes, HTML injection via the device name. Basically XSS with no scripting, just HTML. I did check, the URL is a phishing URL, albeit I refrained from linking it.
8
3
195
66,449
New Robinhood phishing chain that's kinda beautiful: 1. Attacker creates an RH account using the Gmail dot trick of your email (same inbox, different address) 2. Sets device name to HTML 3. RH's "unrecognized activity" email renders the device name unsanitized (html injection) The result is a real email from [email protected], DKIM pass, SPF pass, DMARC pass, with a phishing CTA Just because it's real, doesn't mean it's safe... $HOOD
177
360
125
3,759
2,978,202
Day 1! Come say hi if you are in NYC this week! 🏇
Truman Sacks
@trumansacks125 Aug 2025
Excited to share we’ve raised $2.75M for @CubbyLaw from @LudlowVentures, @SamHinkie, and @PSUMVC. We’re building the first AI teaching assistant for law students, powered by our own legal intelligence model trained on thousands of professors’ syllabi, past exams, outlines, and grading rubrics. Cubby started as a horizontal AI research tool, but when law students began adopting it fast, we went all in. Law school prep is broken: • Curve-based grading • 100+ hrs building outlines • Legacy tools students still pay thousands for Cubby brings it all into one connected workspace: case briefs, outlines, and practice exams, calibrated to how your professor teaches and tests. Law school is our first step toward a new era in legal tech.
5
1
86
17,789
Excited to be apart of this 🏇
Truman Sacks
@trumansacks125 Aug 2025
Excited to share we’ve raised $2.75M for @CubbyLaw from @LudlowVentures, @SamHinkie, and @PSUMVC. We’re building the first AI teaching assistant for law students, powered by our own legal intelligence model trained on thousands of professors’ syllabi, past exams, outlines, and grading rubrics. Cubby started as a horizontal AI research tool, but when law students began adopting it fast, we went all in. Law school prep is broken: • Curve-based grading • 100+ hrs building outlines • Legacy tools students still pay thousands for Cubby brings it all into one connected workspace: case briefs, outlines, and practice exams, calibrated to how your professor teaches and tests. Law school is our first step toward a new era in legal tech.
3
4
952
Load more