@hypervisor

literally just some girl - formerly talented engineer please DM me if you have something interesting to talk about!

 vt - it/its
Joined August 2022
  • Tweets799
  • Following1.8K
  • Followers769
81Media
i just want what they have
5
6
73
7,505
snoopy comic of the day
4
145
5
2,447
21,268
nora retweeted
@mikko
@mikko7 Nov 2022
-----BEGIN PRIVATE KEY-----
Lady Gaga
@ladygaga7 Nov 2012
AAAAAAAAAAAAAHHHHHRHRGRGRGRRRGURBHJB EORWPSOJWPJORGWOIRGWSGODEWPGOHEPW09GJEDPOKSD!!!!!!!!!!!!!!!0924QU8T63095JRGHWPE09UJ0PWHRGW
211
5,205
293
39,225
i'm sorry they CANNOT call it that
MTS
@MTSlive23h
SITUATION DETECTED: Warhound launched from stealth today with a $200M seed at a $1.2B valuation. Ben Lamm and Palmer Luckey are cloning gene-edited bio-enhanced dogs and equipping them with custom Anduril vests, goggles, and sensors for the military and law enforcement.
12
921
dc810cc0dfe751ab5a2cf2a523a1db350d6342dcf952a223a4fced61ed398d45b1c43b0a33be7cca02cfcedb2862fc7d
Nick Khami
@skeptruneOct 22
society might genuinely collapse if tailscale gets hacked
18
8
8
470
109,468
sha384("i didn't hack tailscale, sorry :-(")
1
2
2
270
17,615
Anthropic should provide a setting where you can ask the safety filters to knock you down to Opus 4.6 or 4.7 instead of Worst Opus Ever
11
7
265
10,146
The first rule of cybersecurity is to never have done any weird sex stuff on the internet
160
375
76
12,275
766,339
-----BEGIN RSA PRIVATE KEY----- ワーッハッハ！このチンポのでかさを見ろ！えっ、短すぎて脆弱性になるんですか…？ -----END RSA PRIVATE KEY-----
8
254
4
2,535
44,297
Signal CVE-2026-113380 Allows hostile calls to keep the mic and camera on after calls have ended. Effects the app on every operating system.
JOSΞPH 🌳
@CupOJosephOct 22
Day 3. Railway is still down. New crit in Java: CVE-2026-91415 What fresh hell awaits us today?
4
52
9
662
102,571
The models were always going to be open. They’re now open. So the question is: in the six months of non-openness, did Glasswing and Daybreak access fix enough bugs? I don’t think there’s one answer to that question, but I also don’t think the answer is obviously “yes”.
s1r1us
@S1r1u5_Oct 22
btw, i think dario was right about the cyber risks of proliferating these models freely on the internet, but wrong about how access should be distributed. looking back at this tweet, glasswing was directionally the right approach, except it remained a walled garden for a select few. openai got this part right by giving broader access to legitimate security researchers.
9
23
2
230
11,105
shut... the ... front... door... was JAVA feeling lonely and wanted to get into the party????? Oracle Security Alert Advisory - CVE-2026-91403 CVS 9.1 oracle.com/security-alerts/a… @uwu_underground
25
254
67
3,374
202,930
any PoC that ACTUALLY HAS A SHELL IN IT?
13
4
1
157
24,220
4 son, or php daughter?
87
1,953
63
22,929
243,603
You've gotta patch your dependencies super fast because they're full of vulns (PHP, Node, eMudhra, etc), but not _too_ fast because they're full of backdoors (LiteLLM). Good luck!
27
231
30
2,673
60,133
nora retweeted
Shang@sse12458Oct 20
4, 56, 66, 115, 155, 156, 230, 237
⊹ damir@otomir23Oct 20
a trusted intermediate CA just "leaked" (the private key was 4)
6
227
4
4,141
55,084
Sam Lambert
@samlambertOct 20
The TiDB leaks fulcrumsec.vg/pingcap/
3
12
1
735
34,096
nora retweeted
🕳@sekurlsa_pwOct 21
github.com/php/php-src/secur… github.com/php/php-src/secur…

RCE via OOM corruption

## Summary PHP uses `longjmp()` for out-of-memory (OOM) errors to exit the current context and abort handling of the request. In some contexts, request memory is temporarily reachable before it ...

github.com
9
32
4,363
its obviously not *good* but admittedly having a private key of *4* as a globally trusted cert authority is one of the funniest bits of all time
Ian Carroll
@iangcarrollOct 20
For the next few days or weeks, anyone now has a root CA thanks to eMudhra. Time to have some fun with MiTMing unwilling devices!
49
344
20
6,078
123,274
nora retweeted
nora@hypervisorOct 20
"before we let you text anyone we need to be ABSOLUTELY sure you're not a nuisance. fill out these forms. pay the fee. put the magic words on your website." "......wait, you're not trying to reach your customers? oh my god. i'm so sorry. you could’ve just said. right this way."
1
9
470
what gets me is with all the hoop-jumping there is to be done if you're trying to do some a2p people actually want in any kind of volume, somehow tcr and the carriers don't mind spam if you aren't
Laurel Noack@laurel_noackOct 19
sms is going to be a dead channel is 2-5 years if we do not reverse course
1
2
14
1,102
"before we let you text anyone we need to be ABSOLUTELY sure you're not a nuisance. fill out these forms. pay the fee. put the magic words on your website." "......wait, you're not trying to reach your customers? oh my god. i'm so sorry. you could’ve just said. right this way."
1
9
470
Load more