software architect / data engineer; hobby security researcher; AI enthusiast

Maryland, USA
Joined September 2025
6.1 Sol is more efficient than previous models, so some won't be hurt by halved usage. But those on Daybreak Blue aren't allowed to use 6.1 Sol; the strongest is still the much less efficient 5.6 Sol. I hope OpenAI has an answer for this token problem.
8
1,000
Grab a coupon! BugBunny is doing great work. I personally haven't used it, but only because I don't want to subliminally copy for my own security harness. I've had plenty of feature improvements by thinking "what would BugBunny do"
it's official. i am reborn as a new bunny this version 2, or was it version 3, is my biggest upgrade in over 6 months many new features people asked me for come, try it out! 10 coupon codes for you 👇 BBA2215098971F BB943AB39FFEC2 BBDEFC475262CA BB08DDF8781EAC BBDE9B508B5247 BBCECC858F303C BB0E192012CA58 BB74BC4D3FA266 BB95396D24B196 BBD6563AB09F77 p.s. please behave, one code by account - i'll go hunting those who use them multiple times and block the accounts fully hehehehe
1
2
996
Philo Groves retweeted
found the qwen neuron that unlocks this lady
57
170
40
3,465
235,524
sir, this is an act of war
Native iPhone Duo apps, built with Expo. Ship yours before your AppleCare appointment!
1
38
1
2,831
170,657
Philo Groves retweeted
It is easier to build features than it is to announce them
227
92
47
2,437
92,084
i was watching a video about RCEs via media codecs and my browser froze
11
678
Update: Microsoft has removed seven certificates associated with the affected eMudhra hierarchies from the Microsoft Edge trust list, following their removal from the Windows trust list. We’ve updated our guidance with additional information on these protections and what customers should consider when managing trust locally. Read the latest in our blog: msft.it/6014aLxJw
6
71
258
19,496
Eerrr what did they do
Muse is cute, until it isn’t. Stay tuned.
3
965
cyber is basically professionally asking
cyber is basically professionally asking “but what if I do this”
9
576
DeepSeek was used for security research for three days and it only cost $15.20. That implies a month will cost only around $150, entirely manageable. I need to reconsider tokenomics as they stand.
1
1
13
1,370
Philo Groves retweeted
"I could have made this without ai" Yah but you didn't. "I could just copy you and make this with ai" Yah but you're not going to.
16
17
1
285
4,346
Philo Groves retweeted
“Woah dude, OpenAI just proved the exponential time hypothesis false” “That’s insane, do you know what the exponential time hypothesis is?” “No, do you?” “No”
this is completely fucking insane.
16
256
5
5,844
69,064
happy CVE-2026-112668 bug collision day to those who celebrate
1
9
796
not feeling very trusted for accessing cyber
2
427
Philo Groves retweeted
Replying to @C2IRIS
If I can’t use a model for cyber, it practically doesn’t exist
1
2
480
UUUGGH 6.1 Terra is not available for Daybreak Blue either unhappy customer
1
8
540
Interesting 👀
We finally benchmarked Claude Opus 5.5 on the @BugBunny_ai VulnPR-100 benchmark. Our earlier attempt without Claude CVP access was unusable because 45 of the 100 security reviews were blocked. After getting CVP access, we reran all 100 pull requests with an hour per PR. Opus 5.5 found 68/100 vulnerabilities for $312.29, the highest score we’ve recorded. Claude Opus 5 found 48 for $447.90. Opus 5.5 caught 20 more vulnerabilities while costing $135.61 less. It also beat Grok 4.7, which found 62 for $338.67, by 6 findings while costing $26.38 less. Eight reviews still triggered policy refusals and scored zero. It took us longer to benchmark properly, but the result is clear, Opus 5.5 now tops VulnPR-100.
378
The way frontier labs have restricted access to cyber capabilities makes no sense. If you're considered a "defender" you're not allowed access to the "offensive" versions of the models (the ones that can do development/validation of malware and exploits). So for example, if you want to build some sample malware to test a detection system, nope. Or if there's a major crisis due to a critical vulnerability in PHP and you need to rapidly triage fake exploits to see if there are any real ones floating around so you can warn people, nope. Want to build a remote code exploit to make sure the detection rules you plan on proposing to the clients actually work? Hard nope. You gotta call your red team friend and wait for them to do your job for you, because "defender" are only allowed to play in the sandbox with the children. Not an expert, but I think that the ability to triage in-the-wild exploits during a major crisis affecting 40 million systems is possible maybe important. And then they want to ban abliterated open weight models, which half of the people are only using because frontier labs will only give them access to lobotomized models.
33
68
12
485
27,029
Philo Groves retweeted
🚨 One bug, three names, and a growing list of affected software. Here’s where HTTP2Shell / Node2Shell / Broccoli2Shell (CVE-2026-111497) stands. The flaw is an out-of-bounds write in Google’s Brotli decoder. It affects versions 1.0.3–1.0.9, 1.1.0 and 1.2.0, and GitHub rates it Critical at CVSS 9.2. Full breakdown: hacktron.ai/blog/node2shell?…
3
5
2
68
7,205
One thing that can change my mind: make 6.1 Sol available to Daybreak without lobotomizing it
Not looking forward to OpenAI Pro200 usage limits being cut in half this week. $200 -> $500 for nearly the same allowance. I will be reconsidering my OpenAI subscriptions, but will probably keep at least one Pro100 for little things.
2
1
7
739