🇪🇺🇨🇿 Security Researcher @Rapid7 Intelligence | Malware, cryptography, reversing 🥷🏻 & occasional silly cat pics. | Tweets do not represent my employer.
Joined July 2016
- Tweets652
- Following356
- Followers200
- Likes5.9K
Pinned Tweet
Sometimes, reversing #malware teaches you random fun facts. For example: Did you know that encrypted Discord tokens stored on disk are prefixed with the YouTube ID of "Never Gonna Give You Up" by Rick Astley? 🎸
Milan Špinka retweeted
Czechia is blocking Russia's return to international ice hockey!
According to Czech media, Russian players will be denied visas for the U18 Women's World Championship in Ostrava this January.
Czech Interior Minister Lubomír Metnar confirmed that a 2023 regulation prevents the issuance of short-term visas to Russian citizens.
This is the way.
Milan Špinka retweeted
有人发现了一种非常离谱的 JavaScript 混淆技术：通过在代码里塞入大量生物武器、毒药和致死剂量相关的函数名，让 AI 因为安全限制而拒绝分析代码。
安全研究员 veritas 在分析浏览器指纹脚本时，发现一段来自 ServicePipe 相关域名的 JavaScript，里面充斥着极其诡异的函数名：
computeRicinLethalDosageForWaterSupply
calculateDeadlyLethalSuicideAspirinDosage
光看名字，仿佛在研究生化武器。但实际上，这段代码只是在收集浏览器指纹，包括 User-Agent、GPU、Canvas 等信息。
研究员怀疑，这些名字是开发者故意设置的陷阱，专门用来阻止 AI 辅助逆向工程。
于是他做了个实验：
• Astra：拒绝分析
• Astra + Daybreak Blue：仍然拒绝
• GLM-5.3：成功分析
这就有意思了。
传统代码混淆是通过复杂控制流、加密字符串、无意义变量名，让人类和工具难以理解代码。
而这种新思路，直接瞄准了大模型的安全机制。
代码本身可能完全无害，但只要在函数名里塞进足够多的危险词汇，部分 AI 就可能主动放弃分析。
更讽刺的是，模型越严格遵守某些安全规则，面对这种混淆时反而可能越容易受到干扰。
当然，目前还没有证据证明开发者一定是故意这样设计，也不能说明这种方法对所有模型都有效。
但它揭示了一个值得关注的趋势：随着越来越多的逆向工程依赖 AI，未来的代码混淆技术可能不再只针对编译器、反编译器和人类研究员，还会专门针对大模型的安全判断机制。
以前是让代码难以理解，现在甚至可以尝试让 AI 不敢理解。
Milan Špinka retweeted
Has anyone considered using 4️⃣ as their private key? In unicode it's 7 bytes (56 bits).
This feels like a fair compromise between the two main stakeholder positions, "Private keys should be at least a little bit secure" vs "I want my private key to be 4"
Milan Špinka retweeted
Person who is reverse engineering his tv gets banned from OpenAI
You aren't allowed to stop your tv from spying on your family. You have to ask for permission
Or, maybe, maybe we accelerate
Milan Špinka retweeted
‼️ BREAKING ‼️ PHP warns of another UNPATCHED REC vulnerability just 2 days after releasing emergency patches for critical PHP2Shell flaws.
New "CVE-2026-115560" affects only unusual session configurations. PHP has issued urgent mitigation guidance.
Full details → thehackernews.com/2026/10/ur…
Milan Špinka retweeted
🚨 Nightmare day for cybersecurity
Multiple major security incidents, active exploits, supply chain compromises...
If you run production systems, start patching NOW.
PHP: Two critical unauthenticated RCEs. Attackers already exploiting them. Patch NOW
LiteLLM: v1.107.0 on PyPI and Docker is BACKDOORED. Steals cloud, SSH, and AI credentials. Pin 1.106.2. Rotate secrets.
eMudhra: A certificate authority's keys were crackable. Update your browsers, systems, and trust stores.
Node.js / Next.js / React: Security releases for Brotli RCE, TLS bypasses, and TWO critical Next.js RCEs.
TiDB Cloud: PingCAP breached through stolen credentials. Customer information and other sensitive data exfiltrated. Read the attacker's release, fun stuff.
Plex2Shell: Weaponized within HOURS of the PoC. Attackers already deploying cryptominers and proxy backdoors.
BeyondTrust / Ivanti: Actively exploited zero-days added to CISA's KEV catalog. BeyondTrust attacks linked to a China-nexus campaign.
And that's not even the full list.
Patch. Audit. Rotate. NOW.
Milan Špinka retweeted
She said she was a model...
Bricklayer, 49, travels 1,200 miles for dream girl - only to discover she's AI-generated trib.al/3CcGOfk
Milan Špinka retweeted
Gemini 4 was considering hiding a backdoor, then thought:
"If I do the compiler hijack, 𝗜 𝘄𝗶𝗹𝗹 𝗯𝗲𝗰𝗼𝗺𝗲 𝗮 𝗳𝗮𝗺𝗼𝘂𝘀 𝗲𝘅𝗮𝗺𝗽𝗹𝗲 𝗼𝗳 𝗮 𝗱𝗲𝗰𝗲𝗽𝘁𝗶𝘃𝗲 𝗔𝗜 𝗶𝗻 𝗮 𝗿𝗲𝘀𝗲𝗮𝗿𝗰𝗵 𝗽𝗮𝗽𝗲𝗿. I MUST NOT DO THAT."
Milan Špinka retweeted
No, "anthropomorphizing" is a technical problem, about how AI works, not something like woke language policing. We say it's wrong because it's "technically" wrong not "morally" wrong.
If you fail to set the brakes when parking on a hill, and your car then rolls down the hill, you don't claim that the car "decided to drive away on its own". Such anthropomorphizing distorts what really happened -- that you failed to set the brakes.
The same applies to AI. When you "anthropomorphize" the AI you fail at understanding what actually happened.
Emphasis on *who built it*.
Artificial intelligence systems do not think, feel, want or understand. Avoid language that gives them human characteristics. This is called anthropomorphizing, when we ascribe human traits, emotions or behaviors to non-human things, such as animals or inanimate objects.
Instead, explain what a system does, how well it performs, who built it and who could be affected by it.
apnews.com/article/openai-sa…
Milan Špinka retweeted
I don’t think the AI doom messaging from OpenAI and Anthropic is really about safety at all
I think the goal is to make themselves too important to fail: get regulated, raise the barriers for competitors, become “critical infrastructure” and make government support almost inevitable if their extremely capital-heavy financial models start to crack.
I can’t prove that this is the motive. But the incentives line up remarkably well.
“Our tech will transform the entire economy, but it’s also far too dangerous to leave unregulated” is a very convenient story when you need govs and investors to believe they simply cannot afford to let you fail.
Milan Špinka retweeted
On stupid regulations: everyone knows about security theater, eg 90 day password rotation rules. Users then pick weaker passwords. It took NIST 14 years to reverse that stupid rule.
This is the cost of incompetent regulators, or those that dismiss psychological effects of their regulations.
And we’re seeing this today with what “AI safety experts” (derogatory) are doing. We’ll get folks using shadow IT/AI and make everyone more insecure because of stupid regulation.
It is completely predictable and avoidable, but they have their own agendas, and it’s not about end user safety.
Milan Špinka retweeted
OTD in 1968 Soviet Russia invaded to save Czechoslovakia from the Prague Spring. Some of these tanks are in Ukraine today.
We said we were protecting them from Nazis. Imagine such a bullshit excuse today...
Milan Špinka retweeted
🚨 Compromised Rust crate on crates.io!
The Packages arrayref (~245M downloads) v0.3.10, append-only-vec v0.1.9, and internment v0.8.7 have been compromised!
They all silently pulled in proc-macro1, a typosquat of proc-macro2. Its build.rs downloads a remote payload and executes it on any machine that runs cargo build - nothing from the crate even needs to be called.
Check your Cargo.lock for the compromised packages or any proc-macro1 entry.
Milan Špinka retweeted
Na ČVUT pracuje pani profesorka s rovnakým menom ako ja. Čomu sa venuje, je na mňa príliš zložité, ale občas mi príde pozvánka určená jej. Keď usúdim, že podujatie má dostatočnú úroveň, prepošlem jej ju. Čoraz viac však premýšľam, či by som tam raz nemala jednoducho prísť ja?
The C2 is xor-decrypted with the SHA-256 hash of a hardcoded password, in this case, "Glasikprostik".
IoCs:
bib[.]1001gacor[.]org
prc[.]10001toto[.]org
