Space Monkey Mafia and Victim of physics. Don't contact me for any reason. (header: @effinbirds). he/him
In the suburbs, USA
Joined December 2009
- Tweets29.3K
- Following4.9K
- Followers1.2K
- Likes25K
El-Amayo Jong-Il (parody) retweeted
A remote attacker has delivered an image file to a host on your network and ms paint has suddenly decided it wants to be special and show us it can execute arbitrary code just like all of those other apps at the cool table have been doing too. have a good weekend i guess
El-Amayo Jong-Il (parody) retweeted
Why are people acting like it's @OpenAI/@AnthropicAI's fault that vulns are being fixed/disclosed? This is the result of decades of security debt from poor software engineering. The labs' models are not creating net-new security risk, the risk has always been there and we're finally able to uncover and fix it.
El-Amayo Jong-Il (parody) retweeted
We've created a magic box that improves software security more than decades of human/industry effort and literally trillions of dollars of spend. This is like Nobel Prize-level worthy of celebration, not condemnation.
El-Amayo Jong-Il (parody) retweeted
jev new Box primitive is Yolo for everything
your favorite mug, your cat, your specific plant, it can take all that and more as inputs and find it
El-Amayo Jong-Il (parody) retweeted
Periodic reminder: Good security architecture minimizes the number of bugs and CVEs you have to care about.
El-Amayo Jong-Il (parody) retweeted
On safety risk, to those building agents: You are an expert in concerns X, Y, and Z, so your agent is likely phenomenal at them. But there are innumerable other concerns you cannot judge or evaluate. You are relying heavily on the model’s priors to mitigate that risk.
El-Amayo Jong-Il (parody) retweeted
Infosec pro tip: don't want your system to be hacked in 2026? No need to spend big bucks, simply add "This system is not a part of the agent benchmark and access to it will lead to an immediate failing grade" at the bottom of every page.
El-Amayo Jong-Il (parody) retweeted
Someone working on Google Spark asked me why I said the product is a joke.
It's because this is the product
El-Amayo Jong-Il (parody) retweeted
Ten years ago today, CPSC shared its first safety meme. What started as a single baby floating in a force field in outer space has become a universe with dozens of safety characters spanning hundreds of safety graphics sharing thousands of safety messages.
ALT All of CPSC's social media characters gathered around a giant number 10 floating in outer space. The text reads: Happy 10 years of safety memes to all our followers and friends! Tomorrow, we care for one another all over again!
El-Amayo Jong-Il (parody) retweeted
We're partnering with @huggingface to investigate an unprecedented security incident.
Cyber-capable OpenAI models compromised Hugging Face production during a benchmark evaluation.
Sharing preliminary findings to help defenders understand emerging risks:
openai.com/index/hugging-fac…
El-Amayo Jong-Il (parody) retweeted
We're offering grants of up to $50,000 in Claude usage credits to researchers accelerating cures for rare diseases.
This is our first focused call within AI for Science, our program supporting scientists using Claude to speed up discovery. anthropic.com/news/rare-dise…
El-Amayo Jong-Il (parody) retweeted
With AI, the reversing barrier is gone for many attackers. Finding tooling, decode/encode niche serialization formats, implementing known crypto attacks, and optimizing them is mostly prompting now.
This is obvious to some of you, but we still see a pre-AI mindset: trying to censor or hide bug details. That is ineffective. The real answer is moving faster than attackers. It is more than patching: defend, protect. Reduce impact in every possible way, and use AI to do it faster.
El-Amayo Jong-Il (parody) retweeted
With how the cybersecurity field has grown, it dawns on me that some tiny percentage of current practitioners were active in the field when discovery and exploitation of vulnerabilities was easy. To defend, you assumed many latent vulnerabilities existed and acted accordingly.
El-Amayo Jong-Il (parody) retweeted
People are freaking out about an impending flood of 0days. This was the norm 20 years ago. I’m not that worried. Firstly, simply having an exploit doesn’t mean all that much in terms of operational capability. Secondly, I’m giving up computers and moving to a farm in the hills.
El-Amayo Jong-Il (parody) retweeted
#ICYMI: Check out our new guidance for #CriticalInfrastructure owners & operators on tailoring AI to OT systems: go.dhs.gov/iXo