Believer. Beard. Coffee. Tech. Youtube. Check the link in my bio to see my latest video!
Dallas, TX
Joined March 2016
- Tweets5.4K
- Following849
- Followers274K
- Likes3.6K
Pinned Tweet
NEW VIDEO ----> Decision models are now a thing....but what exactly are they? Who is Jev? Clef? Bob?
(link in the reply)
I like this mentality. Do you agree?
Bug bounty has definitely changed.
I used to spend hours analyzing HTTP requests, switching back and forth between Firefox and Burp Suite.
Now, I open my terminal, point my AI skills at a target, intercept and analyze HTTP traffic using Burp Suite MCP, and offload heavy tasks to my HackBot running on a VPS.
But here’s the thing: AI doesn’t replace your hacking skills. It scales them.
The goal is to get really good at manual hacking first, then use AI to automate and scale what you already know.
Not the other way around.
You don’t start by building a HackBot and expecting it to hack for you when you don’t even understand what it’s doing.
Learn to hack first. Automate second. Scale third.
Keep hacking! ✌️
Thanks to @allietheicon and @CompleteSkeptic for the help with this video!!
@typesafeai jev is pretty sick.
my list for Halloween week:
- finish Resident Evil Requiem
- Watch 3 horror movies (open to suggestions)
- Code a Halloween scavenger hunt with the kids that interacts with Home Assistant
Reminding myself of this today.
"Most of our bitterness and anger towards others is rooted in an inability to be profoundly amazed at Christ's love for us in our sin." — John Piper
"But God, being rich in mercy, because of the great love with which he loved us, even when we were dead in our trespasses, made us alive together with Christ—by grace you have been saved—and raised us up with him and seated us with him in the heavenly places in Christ Jesus, so that in the coming ages he might show the immeasurable riches of his grace in kindness toward us in Christ Jesus." Ephesians 2:4-7 (ESV)
Dude, can we please stop publishing vulns before they are disclosed to the vendor!?!?!?!??!
Congrats @rez0__ !!!
I want to type faster than I talk.
I know that the move now is voice, typing is legacy...blah blah blah.
But I still really enjoy typing. It's just a different way to get your thoughts out.
What's your favorite site/app for getting faster at typing?
Right now my favorite way to talk with my agents is through iMessage.
Claude code, Hermes, codex -----> all setup to talk via text.
It's so simple and doesn't rely on me having a remote session or anything. I'll often talk to my agents via a terminal app on my iPhone but there is this one dead zone on my morning walks that kills the connection. iMessage just works.
Setting it up is relatively easy.
- Use photon
- Hermes has a built in way to connect
- Claude Code and other terminal-based harnesses will need a bridge that you can have your agent put together pretty quick.
Imagine an AI agent that grows with you and continuously upgrades itself in the background⚡
——-> That’s exactly what the Curator feature in Hermes does. It helps you refine and improve your skills, removing the ones that don't work and creating new ones automatically.
Check it out! 👇
youtu.be/QQEgIo4Juxg?si=EsXz…
The #1 Danger Isn't Roblox
Ryan Montgomery on the #1 thing parents get wrong about protecting kids from online predators.
Check out the FULL VIDEO here: youtu.be/5wZUwZWxMLQ
Rule of thumb for MOST of you right now ———-> don’t expose anything to the internet.
- Close all those ports
- Put everything behind a firewall
- Use VPN for access
Keep coding all that personal software but keep your attack surface small.
Windows doesn't save your real password... it saves an NTLM hash.
Grab that hash, feed it into a password cracker (like Hashcat), and crack it back into plain text
-----> Watch how easy it is to grab that hash.
You are going to walk into a business and face technical issues that neither you nor AI have ever seen before.
It's getting more intense!!
For you on the frontlines, how's it looking?
I know it sucks to wake up with your hair on fire. Praying for ya'll.
🚨 Nightmare day for cybersecurity
Multiple major security incidents, active exploits, supply chain compromises...
If you run production systems, start patching NOW.
PHP: Two critical unauthenticated RCEs. Attackers already exploiting them. Patch NOW
LiteLLM: v1.107.0 on PyPI and Docker is BACKDOORED. Steals cloud, SSH, and AI credentials. Pin 1.106.2. Rotate secrets.
eMudhra: A certificate authority's keys were crackable. Update your browsers, systems, and trust stores.
Node.js / Next.js / React: Security releases for Brotli RCE, TLS bypasses, and TWO critical Next.js RCEs.
TiDB Cloud: PingCAP breached through stolen credentials. Customer information and other sensitive data exfiltrated. Read the attacker's release, fun stuff.
Plex2Shell: Weaponized within HOURS of the PoC. Attackers already deploying cryptominers and proxy backdoors.
BeyondTrust / Ivanti: Actively exploited zero-days added to CISA's KEV catalog. BeyondTrust attacks linked to a China-nexus campaign.
And that's not even the full list.
Patch. Audit. Rotate. NOW.