MadHat Unspecific, InfoSec Mercenary (@unspecific) header
MadHat Unspecific, InfoSec Mercenary (@unspecific) profile picture

cybers thot lead. worshipped idle. dispenser of the obvious. awkward

Internet Security Riot Club
Joined August 2008
Photo by MadHat Unspecific, InfoSec Mercenary (@unspecific)Photo by MadHat Unspecific, InfoSec Mercenary (@unspecific)Photo by MadHat Unspecific, InfoSec Mercenary (@unspecific)Photo by MadHat Unspecific, InfoSec Mercenary (@unspecific)Photo by MadHat Unspecific, InfoSec Mercenary (@unspecific)Photo by MadHat Unspecific, InfoSec Mercenary (@unspecific)Photo by MadHat Unspecific, InfoSec Mercenary (@unspecific)Photo by MadHat Unspecific, InfoSec Mercenary (@unspecific)Photo by MadHat Unspecific, InfoSec Mercenary (@unspecific)Photo by MadHat Unspecific, InfoSec Mercenary (@unspecific)
MadHat Unspecific, InfoSec Mercenary retweeted
Spotted at @unprompted: "Models agreeing with models is not truth" :-)
11
6
1
37
2,223
Seriously. If you have an issue with how we performed an audit or the report, explain. Tell me what was wrong. Don’t just say we need all the evidence because that won’t happen.
1
95
Visibility is the key to infosec. Knowing what you have and what it is doing is necessary. Services hiding that data are doing their clients a disservice in the name a greed. I think every service should offer audit logs as one of the base requirements.
Worth noting that a lot of SaaS applications have dogshit audit logs they barely make available. You can’t easily monitor these systems to catch attacks. They also often make audit logs an enterprise-plan feature. Now would be a good time to change that.
2
6
291
MadHat Unspecific, InfoSec Mercenary retweeted
They’re calling this Black October in cybersecurity. It’s like the apocalypse except instead of dying people had to update dependencies. Someone’s API keys got stolen. Also some people asked AI agents to access their bank account. I’m a very serious person.
45
28
5
318
8,710
MadHat Unspecific, InfoSec Mercenary retweeted
People are going to lose their mind when they realize its actually easier to hack things using FEATURES not CVEs.
22
80
22
585
50,777
Sensationalism. AWS gave up on having a frontier model and refocused to not compete with the real frontier models. They are expanding in their hosting and infrastructure around AI.
This quoted post is unavailable.
2
182
This is fear mongering. This is not based on reality. AI has not defeated auth. Not even close. It has trouble logging with credentials. This is more lies from the king of AI psychosis. The number 1 mislead daydreamer following the sound of AI as if it were accurate
Sam Altman: AI has fully defeated most of the ways people authenticate today. “Voiceprints as authentication are a crazy thing to still be doing. AI has fully defeated that.” “I am very nervous that we have a significant impending fraud crisis.” “Just because we’re not releasing the technology doesn’t mean it doesn’t exist.” “Soon, a video FaceTime will be indistinguishable from reality.” “People are going to have to change the way they verify who they’re actually talking to.”
68
Just helped a user troubleshoot an AI issue. It insisted it was blocked from a website and said to contact IT. It confused a 404 on a dir with no index meant it was being filtered. Said to tell IT to whitelist the domain to fix the issue. There was no real issue.
2
157
Wait. Didn’t we figure this out not long after smart phones? And everyone said it was bad but then accepted it so they could log on Facebook and be a bigot.
Idiots the fucking lot of ya
2
2
152
MadHat Unspecific, InfoSec Mercenary retweeted
Idiots the fucking lot of ya
Claude Code just found proof that every app on your phone is listening to your conversations. TikTok, Instagram, Facebook, Snapchat. they're using what you say out loud to build your feed. i have the data to prove it. i've suspected this for months but last week something happened that made me finally check. i was on a call with my friend and told him i'm thinking about breaking up with my girlfriend. didn't text it. didn't search it. just said it out loud with my phone on the table. two hours later she opens TikTok next to me and her entire feed is breakups. "signs your relationship is over." "how to heal after a breakup." she looked at me and said "why is TikTok showing me this." i said i don't know. but i did know. i connected my iPhone to my MacBook and ran Claude Code that same night. it scanned every app's background microphone activity for the last 90 days. not just the apps that asked for microphone permission. apps that were supposed to only have access to photos or location but were activating the microphone anyway. what it found: → TikTok activated the microphone 347 times while the app was "closed" in the background → Instagram → 211 background activations → Facebook → 189 → Snapchat → 94 every activation lasted between 3 and 15 seconds. enough to catch a sentence. every one of them tagged a keyword and cached it locally on the phone with a timestamp. Claude Code pulled the full keyword cache: → "breakup" — tagged 4 hours before her feed changed → "moving out" — from a conversation with my mom last Tuesday → "wedding venue" — from a call with my sister about her engagement that i never searched once → "protein powder" — said it out loud to my roommate, had ads for it within an hour → "flight to tokyo" — mentioned it at dinner, saw travel ads the same night those keywords were sitting in a local cache on my phone organized by app with timestamps. TikTok had the most entries. Instagram was second. every single keyword matched a conversation i had out loud near my phone. the scariest one was "wedding venue." my sister told me she's getting engaged on a private call. i never searched it. never typed it. within a day my explore page had engagement rings and venue tours. then Claude Code checked a second phone in the same room. my girlfriend's. same keywords. same timestamps. both phones were picking up the same conversation and tagging it independently. i asked Claude Code how to shut it down. it mapped every app's microphone access and built a permission audit. what i did: → revoked microphone access from every app that doesn't need it to function → disabled background app refresh for TikTok, Instagram, Facebook, Snapchat → turned off "Hey Siri" which keeps the microphone in passive listening mode 24/7 → revoked "nearby interaction" permission which uses ultrasonic audio between devices Claude Code confirmed all four apps lost background microphone access after the changes. i checked her phone too. same steps. took about 3 minutes per phone. within 48 hours both our feeds went completely random. generic content. nothing personal. nothing from our conversations. that's when i knew for sure it was real. the full step by step and the prompt are in the first reply. takes 3 minutes. save it so you don't lose it and send it to anyone who's ever said "my phone is definitely listening to me." it is. now you can prove it and shut it down.
Readers added context they thought people might want to know
2 days before, OP claimed to have found spyware on his "wife's phone": x.com/starmexxx/stat… Now, in this post, he talks about his "girlfriend": x.com/starmexxx/stat… OP has a history of fake AI content: "Spy camera" found in hotel room: x.com/starmexxx/stat… Spyware on "friend's computer": x.com/starmexxx/stat… OP selling AI products: x.com/starmexxx/stat… Flagged as AI: x.com/i/grok/share/b…
1
1
1
2
255
Sam Altman is the Uber boss of AI psychosis. He is so far in there he might believe the lies he tells. His lack of any concern for humans and worried about how a computer program responds to input. He has no reality left in his head.
1
3
343
MadHat Unspecific, InfoSec Mercenary retweeted
I’m thinking of starting up an Omarchy user group in the Phoenix area! Let me know if you’re interested and I’ll start setting up logistics! #omarchy #phoenix #linux #Tech
1
1
3
181
Always nice to see the fear mongering spread out across industries. Will this one be as big as the lackluster security apocalypse? Or the failures in Maths?
BREAKING: Anthropic warns in its IPO filing that a catastrophic AI-related incident could cause harm on a scale that no single insurer, and “potentially the insurance industry in the aggregate,” could cover. The filing says Anthropic’s insurance may not be enough to cover the liabilities it faces, especially if one incident or a group of incidents causes disproportionate harm.
1
4
207
Only where companies seem to want an excuse to fire people. AI is a tool, not a replacement And people are cheaper.
Where AI goes, the jobs evaporate.
80
People don’t understand that you can block an LLM from making outbound calls easily. You can easily see when it tries. The problem is you have to understand the technology for it to be easy. You lie about your knowledge and feign expertise. It’s a joke.
81
The reason you feel like more people use Anthropic is that they do more user advertising. They have all their employees and pay others to keep pushing Anthropic and Claude. Every new feature, I see 10 people pushing it with the same messaging and stupid claims.
2
73
AI is not good at what it does. It has to have thousands of agents because it is bad at what it is trying. It works by brute force. No logic. No complex attacks. It tries everything it can regurgitate until something breaks. It’s not like in the movies. This is an app
3
93
100% inaccurate. This is more fear mongering. This is the same as AI. For those who don’t know, it sounds legit. But like AI it is closer to only 15% accuracy. This is more lies from the companies founded on lies.
Sam Altman: AI has fully defeated most of the ways people authenticate today. “Voiceprints as authentication are a crazy thing to still be doing. AI has fully defeated that.” “I am very nervous that we have a significant impending fraud crisis.” “Just because we’re not releasing the technology doesn’t mean it doesn’t exist.” “Soon, a video FaceTime will be indistinguishable from reality.” “People are going to have to change the way they verify who they’re actually talking to.”
1
2
76