security engineering @brave / helped build Let's Encrypt, Privacy Badger, and HTTPS Everywhere @eff / physics alum @mit / rabbit enthusiast

Joined November 2012
could not for the life of me figure out how to buy a bus ticket in Milan. it was literally easier to get a shell 😆
89
597
52
6,839
Brave Leo now runs on private AI inference from NEAR AI Cloud, by @near_ai. Pick GLM 5.3 Flash in Leo and your chat is end-to-end encrypted into a hardware enclave (TEE). @brave can't read it. NEAR AI can't read it. The cloud host can't either. 🧵
Leo, the AI assistant in Brave, now offers end-to-end encrypted chat with GLM 5.3 Flash! Your browser encrypts each prompt before it leaves your device, so only an attested Trusted Execution Environment (TEE) can decrypt it. It's industry-leading privacy you can verify.
30
165
29
1,050
113,069
what if instead of sandboxing the agents we sandboxed ourselves
121
348
64
5,645
167,824
openai and anthropic can have the existing internet for RL runs; let’s just make a second one for everything else
3
5
1
88
4,831
Please don't install - it's trivial to turn Muse into the ultimate backdoor 💀👀 Ya, as an AI assistant built to manage your Mac, Muse needs broad access to your digital life. But serious 0-day flaw(s) can let local malware/attackers invisibly hijack it. Let me show you. 🧵
Introducing Muse, the personal agent that understands your goals and works 24/7 to get things done for you.
42
132
47
660
236,580
Day 2 of voting on randomly-selected songs on SoundCloud until we collectively find the best one: tracks with 37 plays are outperforming ones with 15k+! azuki.vip/bse/
3
12
2,700
yan retweeted
HELP NEEDED: please vote at azuki.vip/bse/ so we can determine the best song ever uploaded to soundcloud (songs are picked completely at random)
3
3
9
2,602
HELP NEEDED: please vote at azuki.vip/bse/ so we can determine the best song ever uploaded to soundcloud (songs are picked completely at random)
3
3
9
2,602
yan retweeted
Alibaba's AliExpress was caught using users' audio systems to track them. AliExpress wasn't recording users but instead playing a silent sound and measuring how users' specific devices processed it in order to fingerprint them. But don't worry because Brave stops this.
486
4,916
889
46,145
8,630,903
this, unfortunately, goes hard
Transform your triangular room into a stunning space!
3
1
76
14,731
yan retweeted
Replying to @bcrypt @octal
truly sad that LLMs could never produce this specific type of trash
got the best, AKA worst, hackerone report ever. someone reported that an attacker website can figure out a person's IP address by *gaining local access to the person's machine*, installing a NodeJS webserver, and using the IP npm package to get the IP.
3
3
31
4,720
if you’ve been on either side of a bug bounty you know the joy in it is gone now. it’s just AI reports coming in, AI patches going out, and decreasing human understanding of either. i wonder what is left of the security industry once the fun clever hacking parts are all outsourced to AI.
9
21
2
235
24,351
planked for 9+ minutes continuously today to win a contest and now am regretting my hubris in even looking this up…
4
2
115
6,860
(i thought the record would be approximately 10 minutes)
1
32
1,544
yan retweeted
The site looks like a coffee shop to humans. To Claude, it serves a fake Cloudflare check. web_fetch is read-only, so the page builds an alphabetical directory Claude clicks through to spell out your data, one letter at a time. ayush.digital/blog/the-memor…
21
21
9
460
29,777
yan retweeted
By popular request: Brave now has Containers! In Brave for desktop, you can now separate your browsing sessions with a couple of clicks. Here's what this means...
224
309
49
3,866
240,874
38
217
11
8,221
200,586
Idk why this comic gets me every time lol
183
1,522
104
69,080
2,486,076
Developers from Signal (including its protocol's co-creator) along with Microsoft and Harvard unveil Encrypted Spaces, an open-source codebase for a new generation of private collaboration apps. Think Slack, Discord, Google Docs, all end-to-end encrypted. wired.com/story/signal-alums…
13
41
6
196
42,066