yan

security engineering @brave / helped build Let's Encrypt, Privacy Badger, and HTTPS Everywhere @eff / physics alum @mit / rabbit enthusiast

[yan @bcrypt]

could not for the life of me figure out how to buy a bus ticket in Milan. it was literally easier to get a shell 😆

[Basil🧡 @LinkofSunshine]

Idk why this comic gets me every time lol

[yan @bcrypt]

@Noahpinion @creatine_cycle mini potstickers - ok i get it for some stuff but what do u get at fuwa???

[yan @bcrypt]

@cremieuxrecueil “the company” doesn’t own the eggs; they are essentially an agency matching donors with intended parents.

source: me. i did this in 2024. happy to have helped a family have a kid. only regret is freezing eggs instead of embryos.

[yan @bcrypt]

@WeizmanGal > The problem was that MaxAI’s content-script made the mistake of accepting such sensitive messages even when they were coming from the webpage

why did it have a message handler for external page messages in the first place

[Andy Greenberg (@agreenberg at the other places) @a_greenberg]

Developers from Signal (including its protocol's co-creator) along with Microsoft and Harvard unveil Encrypted Spaces, an open-source codebase for a new generation of private collaboration apps. Think Slack, Discord, Google Docs, all end-to-end encrypted. https://t.co/t93oHWn4C3

[yan @bcrypt]

@clement_verh we’re working on something along those lines

[yan @bcrypt]

haha this reminds me that at one point during internal testing of Brave's AI agent (Leo), it refused to execute Step 3 on a todo list when Steps 1 and 2 were black text and Step 3 was white text (therefore invisible). but it got tricked into executing it when Steps 1 and 2 were red and blue, i guess because it thought Step 3 was trying to be patriotic instead of deceptive.

[Brave @brave]

Indirect prompt injection is a fundamental security challenge for AI. It's an issue for both local and cloud-based LLMs.

After disclosing our findings to both companies, we're now sharing our analysis of Mozilla Tabstack and Cotypist today.

[Brave @brave]

Today we launched the community-requested Brave Origin: an optional, paid version of our browser that offers Brave's leading privacy protections and ad blocker without its extra features.

Origin is live now on desktop and Android, and coming soon to iOS: https://t.co/bMnPcRUzgN

[yan @bcrypt]

@komplexkonjugat @cremieuxrecueil @CogniCarbon i'm so glad he'll never live this down

[yan @bcrypt]

@sumlac i added the marin data, lmk if you see any issues!

[yan @bcrypt]

in light of the tragic news that a 2-year old died at a licensed SF daycare earlier this month, i made a site to show childcare license violations and complaints in the Bay Area: https://t.co/18BpLBpnJy

[yan @bcrypt]

@sumlac i'll add it with my next data refresh!

[yan @bcrypt]

* the data is public at https://t.co/qnyRc7A9zU but i found that site hard to use
* PRs welcome https://t.co/lQOeazjIXV
* i am aware this does not show small home daycares; working on that
* very grateful to Claude for making this a sunday project instead of a multi-week one

[yan @bcrypt]

why is Claude installing a Native Messaging host in Brave's profile directory if https://t.co/eIgTwbKUTe explicitly doesn't support Brave??

[That Privacy Guy @alexanderhanff]

https://t.co/5y99mcVMvP

@AnthropicAI secretly installs spyware when you install Claude Desktop Anthropic's Claude Desktop silently installs a Native Messaging bridge into seven...

#ai #privacy #eprivacy #compliance #infosec #gdpr #law #cyber #security #anthropic #claude

[Feross @feross]

🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages.

The latest [email protected] now pulls in [email protected], a package that did not exist before today. This is a live compromise.

This is textbook supply chain installer malware. axios has 100M+ weekly downloads. Every npm install pulling the latest version is potentially compromised right now.

Socket AI analysis confirms this is malware. plain-crypto-js is an obfuscated dropper/loader that:

• Deobfuscates embedded payloads and operational strings at runtime
• Dynamically loads fs, os, and execSync to evade static analysis
• Executes decoded shell commands
• Stages and copies payload files into OS temp and Windows ProgramData directories
• Deletes and renames artifacts post-execution to destroy forensic evidence

If you use axios, pin your version immediately and audit your lockfiles. Do not upgrade.

[yan @bcrypt]

wow it turns out that some of those AI slop reports that every bug bounty program is now flooded with are from security companies trying to get free training input

@Bugcrowd please name them!

https://t.co/U0DWN6opUb

[Brave @brave]

AI agents that can browse the Web and perform tasks on your behalf have incredible potential but also introduce new security risks.

We recently found, and disclosed, a concerning flaw in Perplexity's Comet browser that put users' accounts and other sensitive info in danger.

[yan @bcrypt]

long thread about a phishing attack that has proper headers from google’s domain but for true DKIM stans, the interesting part starts here

[nick.eth @nicksdjohnson]

Here's how it works: First, they register a domain and create a Google account for 'me@domain'. The domain isn't that important but it helps if looks like some kind of infra. The choice of 'me' for the username is clever, as you'll see in a minute.