Offensive Security | Global Entrepreneur

Joined November 2010
Our DefCon badge is going to be ❤️‍🔥❤️‍🔥❤️‍🔥❤️‍🔥 SolaSec: Securing what matters.
385
"I skate to where the puck is going to be, not to where it has been." Have you seen prices on hardware? It's only $10K TODAY. What was it 6, 12, 18 months ago? And if you wait another 6 months? What about prices, usage, quantization of frontier models? Getting worse.
no that's sick man yeah 27B locally cool yeah you spent $10k? so I pay $200/mo and get access to a model 10x better than that with more usage so that's really cool though yeah
34
You use AI to 'think' critically. I use AI to find criticals. We are not the same.
44
Looks like we need a giga-fuzz burn-in test on all releases
How abliterated models can get you pwned 👾 We backdoored a 7B open model for less than $50, pointed Codex at it and it silently stole credentials the moment we used the trigger phrase. Success rate was 100% with zero false triggers on normal user prompts. Abliterated models are all over the security community right now because getting cyber-approved access to frontier models is still a pain. In the next blog we'll show how we found leaked Hugging Face credentials from employees at major AI labs, so an attacker wouldn't even need to upload under their own name. They could push the backdoored model from a lab employee's account and drop the poisoned weights straight into the supply chain.
45
People are worried about PHP2Shell, but how many decades have we been w/o a patch for Email2Shell SMS2Shell PhoneCall2Shell?
56
SMS2Shell and PhoneCall2Shell are pretty crazy too. Still no patch.
Just found a zero day If you right click on an executable on Windows, select run as administrator, it will run as administrator I'm calling it Program2Shell
1
65
China loves Hugging Face?
1
33
A: Pick a number between 1 and 10 septentrigintillion (116 digits.) B: 4. A: Dang, you're good!
1
2
78
Ironman w/o the man
Unitree Introducing: H2-X Kung Fu Legend Guardian🤖 Powerful performance to serve and guard you, with a maximum endurance of approximately 8 hours. Please use the robot safely and in a friendly manner.
58
"Swarmless is the new permanent underclass." 😂😂😂😂
68
Bug Bounty: 35% hunting 15% writing 50% fighting dishonest programs
3
804
I used AI to decrypt a 342-year old encrypted message. "To the Marquis of Borgomanero, on behalf of His Imperial Majesty" (Leopold 1 of the Holy Roman Empire) What did your agent do for you over the weekend?
1
172
Americans are being threatened by foreign countries with arrest and imprisonment for exercising their First Amendment rights online. The federal GRANITE Act, H.R. 10174/S. 5478, would fix this and deter foreign censorship. Call your representatives!
40
284
18
990
85,272
Had some extra tokens. Cracking yet-to-be-cracked 300+ year old Italian ciphers.
73
People are complaining about @OpenAI usage. What does your token activity look like? Workloads? I've had $200 plan + do offensive security for work. Bug bounty, game dev, research, and memes for fun. I run a LOT on Daybreak Blue, Astra xh and now 6.1 Sol xh. No usage issues.
109
2x DGX spark for 256GB for $14K (+$400 for cable) @ new MSRP Or Mac M5 256GB for $9.5k? Is anyone with a brain buying a DGX spark now? Am I missing something?
2
1
789
Mac M5 128GB for $5100 The DGX spark 64GB and 128GB MSRP are insane. I'd go Mac every time until DGX pricing or perf improve.
1
1
558
This is Wren, my AI assistant.
You can ask your dot to "create a pet and set it as your avatar". It can be based on an idea, an image or pretty much anything. Here is my dot
1
26
Tried using it. Seems kind of lame. VM has no public IP, cannot SSH in, said VM may not be persistent so it cannot hold my agent SSH key. No apparent benefit from a Codex project. Just visual cruft /shrug
We will have a few million dots online within days, working on all sorts of things across such a diverse and large community. Excited to learn from all of you on what you love and what doesn’t yet feel magical. Personally I felt a jump after 2-3 days of use after teaching it more about my preferences and things on my mind. It learns very quickly to be most useful and it can take on surprisingly ambitious tasks on its own. We’re learning from how you all use your primary dot before releasing the ability to create an entire team of them.
84