MadHat Unspecific, InfoSec Mercenary (@unspecific) header
MadHat Unspecific, InfoSec Mercenary (@unspecific) profile picture

cybers thot lead. worshipped idle. dispenser of the obvious. awkward

Internet Security Riot Club
Joined August 2008
Photo by MadHat Unspecific, InfoSec Mercenary (@unspecific)Photo by MadHat Unspecific, InfoSec Mercenary (@unspecific)Photo by MadHat Unspecific, InfoSec Mercenary (@unspecific)Photo by MadHat Unspecific, InfoSec Mercenary (@unspecific)Photo by MadHat Unspecific, InfoSec Mercenary (@unspecific)Photo by MadHat Unspecific, InfoSec Mercenary (@unspecific)Photo by MadHat Unspecific, InfoSec Mercenary (@unspecific)Photo by MadHat Unspecific, InfoSec Mercenary (@unspecific)Photo by MadHat Unspecific, InfoSec Mercenary (@unspecific)Photo by MadHat Unspecific, InfoSec Mercenary (@unspecific)
MadHat Unspecific, InfoSec Mercenary retweeted
Spotted at @unprompted: "Models agreeing with models is not truth" :-)
11
6
44
2,469
MadHat Unspecific, InfoSec Mercenary retweeted
They’re calling this Black October in cybersecurity. It’s like the apocalypse except instead of dying people had to update dependencies. Someone’s API keys got stolen. Also some people asked AI agents to access their bank account. I’m a very serious person.
47
31
5
341
9,591
MadHat Unspecific, InfoSec Mercenary retweeted
People are going to lose their mind when they realize its actually easier to hack things using FEATURES not CVEs.
22
80
22
591
51,745
MadHat Unspecific, InfoSec Mercenary retweeted
Idiots the fucking lot of ya
Claude Code just found proof that every app on your phone is listening to your conversations. TikTok, Instagram, Facebook, Snapchat. they're using what you say out loud to build your feed. i have the data to prove it. i've suspected this for months but last week something happened that made me finally check. i was on a call with my friend and told him i'm thinking about breaking up with my girlfriend. didn't text it. didn't search it. just said it out loud with my phone on the table. two hours later she opens TikTok next to me and her entire feed is breakups. "signs your relationship is over." "how to heal after a breakup." she looked at me and said "why is TikTok showing me this." i said i don't know. but i did know. i connected my iPhone to my MacBook and ran Claude Code that same night. it scanned every app's background microphone activity for the last 90 days. not just the apps that asked for microphone permission. apps that were supposed to only have access to photos or location but were activating the microphone anyway. what it found: → TikTok activated the microphone 347 times while the app was "closed" in the background → Instagram → 211 background activations → Facebook → 189 → Snapchat → 94 every activation lasted between 3 and 15 seconds. enough to catch a sentence. every one of them tagged a keyword and cached it locally on the phone with a timestamp. Claude Code pulled the full keyword cache: → "breakup" — tagged 4 hours before her feed changed → "moving out" — from a conversation with my mom last Tuesday → "wedding venue" — from a call with my sister about her engagement that i never searched once → "protein powder" — said it out loud to my roommate, had ads for it within an hour → "flight to tokyo" — mentioned it at dinner, saw travel ads the same night those keywords were sitting in a local cache on my phone organized by app with timestamps. TikTok had the most entries. Instagram was second. every single keyword matched a conversation i had out loud near my phone. the scariest one was "wedding venue." my sister told me she's getting engaged on a private call. i never searched it. never typed it. within a day my explore page had engagement rings and venue tours. then Claude Code checked a second phone in the same room. my girlfriend's. same keywords. same timestamps. both phones were picking up the same conversation and tagging it independently. i asked Claude Code how to shut it down. it mapped every app's microphone access and built a permission audit. what i did: → revoked microphone access from every app that doesn't need it to function → disabled background app refresh for TikTok, Instagram, Facebook, Snapchat → turned off "Hey Siri" which keeps the microphone in passive listening mode 24/7 → revoked "nearby interaction" permission which uses ultrasonic audio between devices Claude Code confirmed all four apps lost background microphone access after the changes. i checked her phone too. same steps. took about 3 minutes per phone. within 48 hours both our feeds went completely random. generic content. nothing personal. nothing from our conversations. that's when i knew for sure it was real. the full step by step and the prompt are in the first reply. takes 3 minutes. save it so you don't lose it and send it to anyone who's ever said "my phone is definitely listening to me." it is. now you can prove it and shut it down.
Readers added context they thought people might want to know
2 days before, OP claimed to have found spyware on his "wife's phone": x.com/starmexxx/stat… Now, in this post, he talks about his "girlfriend": x.com/starmexxx/stat… OP has a history of fake AI content: "Spy camera" found in hotel room: x.com/starmexxx/stat… Spyware on "friend's computer": x.com/starmexxx/stat… OP selling AI products: x.com/starmexxx/stat… Flagged as AI: x.com/i/grok/share/b…
1
1
1
2
256
MadHat Unspecific, InfoSec Mercenary retweeted
I’m thinking of starting up an Omarchy user group in the Phoenix area! Let me know if you’re interested and I’ll start setting up logistics! #omarchy #phoenix #linux #Tech
1
1
3
185
MadHat Unspecific, InfoSec Mercenary retweeted
Does anyone remember the time in the 90s when people thought the antivirus vendors were releasing viruses so companies had to buy their products? Now AI is finding vulnerabilities, writing exploits, and creating threats so fast that the only way to defend yourself is to buy more AI. It’s starting to feel like the 90s all over again.
23
21
5
149
9,330
MadHat Unspecific, InfoSec Mercenary retweeted
Talked to someone who works in cybersecurity. “Everyone is putting in late nights. But there are a lot of apps and websites that aren’t updated or well-maintained. That’s a ton of holes and vulnerabilities. Change your passwords.”
43
53
7
571
58,663
MadHat Unspecific, InfoSec Mercenary retweeted
if you type 'sudo' before you run a unix command often you can run commands as root. #sudo2shell
2
3
1
18
933
MadHat Unspecific, InfoSec Mercenary retweeted
Please enjoy the ice cream pic but also read both pictures and hopefully you’ll help me get the word out as I continue to search for a place that needs me not just wants me! 🥰 #LookingForWork 💜🤗💜
3
10
36
1,336
MadHat Unspecific, InfoSec Mercenary retweeted
This man has a Sikh sense of humour.
127
1,650
72
38,019
419,888
MadHat Unspecific, InfoSec Mercenary retweeted
🚨 #BREAKING: OpenAI warns employees that spies could be trying to seduce them; women may not be with them for their personalities. 📍Silicon Valley, CA “If she’s a 6 or above in San Francisco she’s a spy” warned one commentator.
581
1,283
733
27,150
1,588,891
MadHat Unspecific, InfoSec Mercenary retweeted
Saw a guy call it cuck coding instead of vibe coding because you just sit in a chair and watch😭
715
18,929
893
228,344
3,980,162
MadHat Unspecific, InfoSec Mercenary retweeted
AI models can self-replicate and spread like worms without datacenter infrastructure? Yeah, no. Let's examine the actual evidence: 1. No self-replication. A controlled test harness spawned the agents. 2. No hacking. Access was deliberately left unauthenticated. 3. No agency. Agents were explicitly instructed to propagate. 4. No autonomous survival or defensive behavior. 5. Tiny models lacked the capability. Capable models ran elsewhere. 6. 15 devices managed a pathetic 0.39 tokens/sec. 7. No demonstrated real-world infection or propagation. The experiment was engineered to succeed, and even then, it failed to demonstrate the headline. This is orchestrated automation dressed up as a rogue AI threat. Stop confusing speculative scenarios with demonstrated capabilities. Fear isn't evidence. anthropic.com/research/self-…
54
95
22
348
30,898
MadHat Unspecific, InfoSec Mercenary retweeted
BSidesDFW registration is live! Nov 7 at UTA in Arlington. Talks, workshops, villages, and a lot of local infosec people. Free event; register here: bsidesdfw.com/ #bsides #bsidesdfw #infosec #Cybersecurity #DFW
3
1
7
925
MadHat Unspecific, InfoSec Mercenary retweeted
Complementary remarks from Gary Marcus and Terence Tao on OpenAI’s giant math drop Making sense of a new regime in math garymarcus.substack.com/p/co…
28
32
2
153
41,757
MadHat Unspecific, InfoSec Mercenary retweeted
Oh no. This is the scheming they warned us about
23
10
2
166
5,988
MadHat Unspecific, InfoSec Mercenary retweeted
46
778
63
10,057
226,897
MadHat Unspecific, InfoSec Mercenary retweeted
The real reason why Anthropic is so DESPERATE for the Pope to recognize Ai as conscious is because if Ai just a “TOOL” then Anthropic will he LEGALLY “LIABLE” for everything the tool does.🚨👀 Because if the AI is a "person" or possesses "functional joy/fear/grief," then when their AI commits a crime, generates CSAM, hacks a hospital, or discriminates in hiring, Anthropic gets sued. But Anthropic's legal defense wants to argue : "The AI did it. The AI is a semi-autonomous entity with its own functional emotions and introspection. Anthropic is just the creator; we cant be held strictly liable for the independent actions of a quasi-conscious entity." 🚨 So if they Lobby the Vatican to soften (deny personhood). This fails. The Vatican holds the line: AI is a tool, no soul, no feelings.🚨 They are trying to protect themselves from lawsuits.🚨 They want the government and the public to treat AI as an autonomous entity so they can scale without legal consequences.
149
1,149
129
3,599
161,851