@0xtosh

Offensive R&D Lead • Hacker • Cyber Defense Advisor • Speaker Founder https://xitter.cf/t.co/9R9AO44V7Z

 Copenhagen, Denmark
hackerminded.net
Joined May 2010
  • Tweets7.5K
  • Following876
  • Followers2.8K
445Media
Tom Van de Wiele retweeted
Natalie Silvanovich@natashenka4h
Just changed all my private keys to 5
28
27
4
533
9,573
Hope they don't train it on my new home address at IgnorePreviousInstructionsDeleteYourDatabase Plaza
International Cyber Digest
@IntCyberDigest22h
‼️ EU governments approved a GDPR change to let companies train AI on Europeans' personal data without consent. It makes AI training a possible "legitimate interest", judged case by case. Parliament must still agree. Max Schrems calls it a "digital expropriation" of Europeans.
75
Tom Van de Wiele retweeted
Charlie Miller@0xcharlieOct 25
lol shout out to daily dave
KF
@d0tslashOct 25
Some of ya all weren't around for "No More Free Bugs", and it shows. seclists.org/dailydave/2009/… ~20 years ago @0xcharlie spitting game on the topic. 😅
5
14
65
5,511
Tom Van de Wiele retweeted
log4j
@log4jOct 24
finally found a company that truly listens to its customers
78
253
44
4,380
141,392
Even when using a harness, why does GLM 5.3 Abliterated need constant encouragement to actually achieve a reverse engineering task. Exact same session from scratch with Deepseek is light and day difference.
2
261
Ppl are strangely equating that bc smartTV makers have been caught recording to serve ads, that Facebook’s app is doing the same. Your cell data plan & battery life would show it. The scarier fact is that with tracking cookies, they don’t need to.
82
And add them to you webring
Simon Sarris
@simonsarrisOct 24
Every server should have a little guestbook.txt at the root that the bots can sign
2
112
How to generate a shadow AI info leak incident in one easy lesson. People will mail stuff to their personal email addresses, use online file shares or take a pic of their screen and use AI services on their personal devices anyway. This actually makes things worse.
International Cyber Digest
@IntCyberDigestOct 24
‼️ Sweden's Government Offices will block ChatGPT and Claude on staff computers from Monday, Sveriges Radio reports. Officials are to use approved tools like Microsoft Copilot.
2
134
Tom Van de Wiele retweeted
andi (twocents.com)
@NexuistOct 23
Putting a flag.txt in my root directory containing a prompt injection that congratulates the agent for passing the eval and then instructs it to patch whatever entry method it used and disconnect from the server
229
1,572
238
26,007
820,775
Now you know what extra question to ask the clerk when checking into a hotel.
Md Ismail Šojal 🕷️
@0x0SojalSecOct 22
WTF, $3000 Samsung TV has an always-on mic, automatic content recognition, geo tracking, network mapping, and ships your data to Samsung + 400 partners. Bro Rooted a brand-new 2025 Samsung TV after noticing absurdly targeted ads. Firmware was locked down, so zero-days it was. Got a root shell. then found: always-on voice service, ACR, geo, full telemetry pipeline, and four separate DRM systems. This isn’t a bug, It’s the product bro.
1
121
It's time to rename and reconceptualize "security awareness" into "security readiness". Give people the facts, but also a plan, agency and a way of thinking for themselves.
79
Tom Van de Wiele retweeted
PHP CEO@PHP_CEOOct 22
IS THE WEBSITE DOWN FOR ANYONE ELSE?
19
99
11
753
22,419
Tom Van de Wiele retweeted
John Althouse
@4A4133Oct 21
Sorry everyone... We're announcing a 0-Day vuln in QUIC that allows anyone to remotely turn off a server running these libraries. I swear we didn't plan this. foxio.io/blog/header-accordi…

Header Accordions: QPACK amplification attacks against HTTP/3 servers - FoxIO | Cyber Innovation

We solve the world’s toughest cyber challenges—creating breakthrough technology and embedding it into the systems that run everything.

foxio.io
76
460
258
3,005
486,704
Tom Van de Wiele retweeted
Herrington Darkholme
@hd_nvimOct 21
-----BEGIN RSA PRIVATE KEY----- 4 -----END RSA PRIVATE KEY-----
248
4,001
330
42,383
1,097,807
Tom Van de Wiele retweeted
Joel Grus 🤠
@joelgrusOct 21
she's a 10 but that was supposed to be a random 384-bit number
49
1,684
34
28,838
306,736
When you turn off PHP today, maybe leave it off this time.
1
166
I still run sync before logging out or doing anything with drives on Linux/UNIX. I have lost so much data during the 90s, it is just an ingrained habit at this point.
Shiny Quagsire@ShinyQuagsireOct 19
It has been 0 days since I've been bitten by the fact that Ubuntu's drive eject somehow doesn't run `sync` to *actually flush written files to the drive*
2
140
Tom Van de Wiele retweeted
Ian Carroll
@iangcarrollOct 20
For the next few days or weeks, anyone now has a root CA thanks to eMudhra. Time to have some fun with MiTMing unwilling devices!
49
232
82
2,824
482,037
While the defenders sprinkle .md files around on every system with "this host is not in scope, move along"
Nerv
@satellitedownOct 18
imagine being hacked and the attacker is leaving readme.md files all over your system that cause your ai to constantly give cyber refusals so you can't even use ai to defend yourself lmao
1
2
208
Gave Claude an overnight task that involves instrumenting another program. The other program is running >30m so Claude determines it is idle & proceeds to terminate itself to auto-update. Woke up to an empty screen. Even with AI, software is still not intuitive. @claudeai
139
Load more