FahimSamadi

Cyber Security Specialist | AI, Cloud & Microsoft Security

[FahimSamadi @Fahim_Samadi007]

@libracoder good breakdown, worth checking which SSH rules even allow forwarding

[FahimSamadi @Fahim_Samadi007]

Tailworm: Security Assessment Report, Tailscale v1.104.2 and headscale v0.29.5 (Cyberdione Labs)
https://t.co/mNeNTPOqAa

The Hacker News: Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers
https://t.co/VkOEoYlXqp

[FahimSamadi @Fahim_Samadi007]

Tailscale SSH has an unpatched root issue.

If a device is allowed to SSH into a box, and forwarding is on, a hacked version of that device can get root on it.

No CVE or fix yet.

Go through your SSH rules today. Who's allowed, as which user, and is forwarding actually needed?

[FahimSamadi @Fahim_Samadi007]

@RobotsTJ500 did anything break you didn't expect?

[FahimSamadi @Fahim_Samadi007]

@burhansebin the org chart line is too accurate lol

[FahimSamadi @Fahim_Samadi007]

@audiee_ai subtraction until you need an approval gate, then that's the one thing I'd keep separate

[FahimSamadi @Fahim_Samadi007]

@Neo_Puneet the 2x is nice but the bit about one merge breaking their support flow is the real lesson

[FahimSamadi @Fahim_Samadi007]

@saen_dev agree for most stuff, I'd still keep one for anything that needs separate permissions tbh

[FahimSamadi @Fahim_Samadi007]

@noxflux saving logins on a rented trading box is asking for this

[FahimSamadi @Fahim_Samadi007]

@kinderlayer @MAXdeg0 which tool are you running for the RAG poisoning tests?

[FahimSamadi @Fahim_Samadi007]

@MattGaszek @neil_xbt underrated tip, ‘follow this repo’s instructions’ is the whole attack

[FahimSamadi @Fahim_Samadi007]

@talhaminhaas @zeekrey_ @vercel @rauchg yep, that’s the guardrail working, not a bug

[FahimSamadi @Fahim_Samadi007]

@danielko @IlmenAI how are you sandboxing it?

[FahimSamadi @Fahim_Samadi007]

@HouMuza @OpenAI what are you using it for day to day?

[FahimSamadi @Fahim_Samadi007]

@gpt972394 @adonis_singh annoying, but honestly I’d rather approve twice than have it click around freely

[FahimSamadi @Fahim_Samadi007]

@Sumohax0r same here, Codex computer use feels smoother but I trust Opus more on refactors

[FahimSamadi @Fahim_Samadi007]

@cortijc the jump from 321 to 14,943 a month is wild, how much of that do you reckon is AI finding stuff?

[FahimSamadi @Fahim_Samadi007]

@0xpiyushvm the slow drift test is underrated, most people only test the obvious jailbreak

[FahimSamadi @Fahim_Samadi007]

@ShatzMichal new hire is a decent frame, just don't hand them every key on day one

[FahimSamadi @Fahim_Samadi007]

@ihm185 a sandbox label doesn't do much when the internet's on. egress is the control here, not the model promising to behave