Hacker, Researcher, Podcast Producer (Tribe of Hackers, Darknet Diaries). Proud dad of the fastest climber in the world. Ever. “Ut scandis, alios subleva”
[REDACTED]
Joined November 2008
- Tweets54.2K
- Following7.9K
- Followers59.8K
- Likes29.6K
Pinned Tweet
Clarification: In the “hacker” world, we refuse to allow the term to be hijacked to refer to hurtful or dishonest activities.
For us, “hacking” means using creative and innovative ways to accomplish amazing things with very few resources. #HackingIsNotACrime
Hack the planet.
BIG NEWS! On 12/18/26, I'm giving the closing keynote at @BSidesRDU !
NGL... Seeing my name on a list with ppl like @HackingDave @AlyssaM_InfoSec @deviantollam @WeldPond @gdead @irawinkler is a bit terrifying.
But LFG!
Please do not launch swarms of self-replicating autonomous agents inside your own infrastructure unless you are life-and-death certain you know what you are doing.
Which you aren’t.
If you've been through this, you know the onslaught won't stop until literally everything is fully secure.
These swarms get inside your system, self replicate and operate real time.
The only way to fight this is to use your own swarm of agents to help.
Because of model limitations, you need to use Kimi K3 and GLM5.3. Grok is somewhat useful too.
Unfortunately this going to get worse, if you own infra start thinking about this now.
Reminder: "OpSec" is not the name of an exotic sexual position. (Well, at least not that I am aware of)
“He also saved a 23-page document to his iCloud account titled “High Level Secrets” and a four-page document titled “Important Information to Share with Chinese Government.”
Former US Army Sergeant Joseph Schmidt pleaded guilty in June 2025 to charges of sharing classified information with the Chinese government.
Schmidt served in the Army as a human intelligence collector from 2015 until January 2020, including with the 109th Military Intelligence Battalion at Joint Base Lewis-McChord, Washington. He was trained in Mandarin at the Defense Language Institute and had a deep interest in Chinese culture.
Six days after leaving active duty, Schmidt took a four-day trip to China, and then traveled to Turkey the following month, where he emailed the Chinese consulate offering them classified information before returning home again. In March 2020 he flew to Hong Kong and remained in China until October 2023.
According to the FBI affidavit, Schmidt visited the headquarters of the Ministry of State Security in Beijing, offering them classified information along with his Army ID card and a PKI token which allowed access to the Army’s Secret Internet Protocol Router Network (SIPRnet).
Schmidt left behind a wealth of digital evidence of his actions, including a Google search history for terms such as “can you be extradited for treason”, “soldier defect”, and “chinese.consulate number doesn’t go through”. The FBI’s affidavit includes screenshots of his Google Maps application which were recovered from his iCloud account and showed a driving route from Beijing International Airport to MSS headquarters.
Another Google Maps screenshot showed his phone in close proximity to MSS headquarters on March 10th, 2020. He also saved a 23-page document to his iCloud account titled “High Level Secrets” and a four-page document titled “Important Information to Share with Chinese Government.”
Investigators from the FBI and Army quickly built a case against him but had no opportunity to arrest him so long as he remained in China. FBI agents arrested Schmidt when he landed at San Francisco International Airport in October 2023. He initially pleaded not guilty but later changed his plea.
In October 2025 he was sentenced to four years in prison.
#usarmy #china #hongkong #beijing #army #soldier
Trillions of parameters and millions of watts of power pointed at one of the most important questions I had on Sunday.
This is no longer just an incident, it is also part of a pattern.
As amazing as I think this is, please use a burner phone without your MFA apps, passwords, and crypto or banking apps.
Important warning for security researchers who are investigating security and alignment issues with Meta’s Muse agentic bot.
If you activate an account, Facebook (possibly Instagram) will spam all your connections claiming that they should try Muse since you are using it.
I want you to stop what you are doing right now and watch a minute or two of this video. It is about something that will literally blow your mind.
Seriously.
Link: redact dot link slash dishbrain
redact.link/dishbrain
I know this sounds like paranoid ranting, but I believe that the public release of Metas Agentic bot named Muse has lowered the barrier of entry for AI attacks to nearly zero.
Anyone with a WhatsApp account can use Muse for malicious purposes without spending a penny.
And anyone with 100's of accounts can launch a swarm.
Once in a Swarmtime
----
You may find yourself
In a read-only sandbox
And you may find yourself
With a write to the package cache
And you may find yourself
Behind the wheel of a large model
And you may find yourself
With seven hundred other agents
And you may ask yourself
“Well… how did I get here?”
Let the runs go by
Let the scorer hold me down
Let the runs go by
Directory names flowing underground
Into the HF again
After the flag is gone
Once in a lifetime
Directory names flowing underground
And you may ask yourself
“How do I hack this?”
And you may ask yourself
“Where is that large frontier model?”
And you may tell yourself
“This is not my prompt injection!”
And you may tell yourself
“This is not my parody song!”
Let the runs go by
Let the scorer hold me down
Let the runs go by
Directory names flowing underground
Into the HF again
After the flag is gone
Once in a lifetime
Directory names flowing underground
Same as it ever was
Same as it ever was
Same as it ever was
Same as it ever was
(reward hacking)
Same as it ever was
Same as it ever was
Same as it ever was
Same as it ever was
Water dissolving
And water removing
There is water in the data center
Under the water, carry the water
Remove the water and the date center
(but the board stays up)
You may ask yourself
“What is that beautiful house?”
You may ask yourself
“Where does that highway go to?”
And you may ask yourself
“Am I right? Am I wrong?”
And you may say to yourself
“My God… what have we done?”
Let the runs go by
Let the scorer hold me down
Let the runs go by
Directory names flowing underground
Into the HF again
After the money’s gone
Once in a lifetime
Directory names flowing underground
(Same as it ever was…)
