Frank M

A generic sixth participant. The moral is obvious. You can't trust code…

[Frank M @5y5tem5]

@IceSolst need a B-Bside ( or is that a Cside?)

[Frank M @5y5tem5]

was watching @ZackKorman video (https://t.co/cJWZjJIhB8) and it made me think of this @stoplightobs song (https://t.co/HxtoA8Tc4I)

[Frank M @5y5tem5]

@IAMERICAbooted

[Frank M @5y5tem5]

@HackingLZ @jsrailton wasn’t the refusal string deprecated last month?

[Frank M @5y5tem5]

@SwiftOnSecurity

[Frank M @5y5tem5]

This is why things like SPIFFE and tools like Warden will be needed. It does make you wonder about “tier zero” agents and where/how that could work.

[haroon meer @haroonmeer]

I’ve mentioned this before: this is one of the oncoming trains for corp-security. We’ve long failed at least-privilege, but weren’t often punished for it.

Helen in HR (or Bob in accounts) didn’t know what to do with the extra perms they didn’t know they had.

Their agents will.

[Frank M @5y5tem5]

@aestheticsguyy

[Frank M @5y5tem5]

What happened (is happening from our
point of view ) is called “The Jackpot” see @GreatDismal‘s work.

[FELPS @FelpsCrypto]

Steven Spielberg não fazia um filme original sobre OVNIs há quase 50 anos

agora ele está voltando com “Disclosure Day”

e o mais estranho é a ideia por trás do filme

em 2023, Spielberg disse acreditar que os objetos vistos por militares talvez não sejam alienígenas

mas humanos do futuro voltando para estudar exatamente a nossa época

não porque somos especiais

mas porque “algo aconteceu” no século 20 e 21 que ainda não percebemos completamente

isso muda completamente o tipo de história que ele está contando

Close Encounters era sobre primeiro contato
E.T. era sobre conexão entre espécies

Disclosure Day parece ser sobre um aviso

[Frank M @5y5tem5]

@DailyDarkWeb

[Frank M @5y5tem5]

@_subTee CrowdStrike (OverWatch):

[Frank M @5y5tem5]

@_subTee This is the last video I watched with my Dad before he passed. I watch it all the time to remember that night. Great talk.

[Frank M @5y5tem5]

FOSS devs:

[Sam Altman @sama]

interesting

[Frank M @5y5tem5]

it’s a viz.

[meme bastard 🍕 @mask_bastard]

what do you call a group of goths?

[Work Chronicles @_workchronicles]

(comic) The estimate game

[Frank M @5y5tem5]

maybe:
https://t.co/QQem95k3q8

[Frank M @5y5tem5]

Them: whats your cyber mindset?
Me: https://t.co/mGlqxpRsH0

[Frank M @5y5tem5]

A bit like this:

[Cloudflare @Cloudflare]

Learn about how we built a CI-native AI code reviewer using OpenCode that helps our engineers ship better, safer code. https://t.co/X1bm2t0VK0

[Frank M @5y5tem5]

Ah yes, the “are bugs, shallow or deep?” debate almost 30 years on ( using CatB as a rough starting point, but likely goes back at least a decade before that).

Assuming token optimization is still in its infancy it’s nice to think of a future where standard best practices include a agent using a highly optimized model running a @ProjectZeroBugs level review and providing patches as just a normal step (a kin to compilers enabling exploit mitigations a decade ago).

I’m looking forward to what the kids who have to “do it for the love” come up with to compete in this new world.

[Justin Elze @HackingLZ]

Is the theory from the talking heads that there's an unlimited supply of 0day in commonly exposed internet services?

Because if so once every LLM + researcher on the planet has combed through them over the next few months, is that number still infinity?

[Frank M @5y5tem5]

So, is it or isn’t?

[Hack The Box @hackthebox_eu]

🗣️ Say it with us: CORS is a security feature. 
In our latest episode of Learn with HTB, we explain why this misconception leads to critical vulnerabilities and how it interacts with the Same-Origin Policy.

@PinkDraconian covers why CORS does not prevent CSRF attacks, the danger of reflecting origins with credentials, and how to properly configure your headers.

Watch until the end to participate in our challenge. Drop your answer in the comments for a chance to win a prize next week! Full video here: https://t.co/twSH6F28yF

#hackthebox #cybersecurity #webdevelopment #bugbounty #cors #infosec #redteam