Aimen

Cybersecurity Researcher

[Aimen @HamziAimen]

#meta #metabugbounty #bugbounty

https://t.co/P6eirKeAwA

[Aimen @HamziAimen]

https://t.co/Gd1aWbMVKW

[Aimen @HamziAimen]

I suspect I’ve been backstabbed by a friend, and I am currently investigating the situation.

[Aimen @HamziAimen]

@Bugcrowd Answer me private

[Aimen @HamziAimen]

@ElonMuskAOC Give me a billion dollars and I will have sex with every girl on this planet hahaha

[Aimen @HamziAimen]

@sirdarckcat We can just build another agent to babysit them

[Aimen @HamziAimen]

#NouvellePhotoDeProfil

[Aimen @HamziAimen]

#NouvellePhotoDeProfil

[Aimen @HamziAimen]

@Meta

[Aimen @HamziAimen]

https://t.co/iMFt8SQjY1

[Aimen @HamziAimen]

39 days ago, I published a research paper warning about exactly this attack vector.

Engagement: 0
Accounts hijacked today on Instagram: dozens.
The hackers clearly did their reading. 🙂

📄 https://t.co/kEi847HHrY

#CyberSecurity #LLMSecurity #PromptInjection #MetaAI #ToldYouSo

[Aimen @HamziAimen]

😂 cool

[Aimen @HamziAimen]

@sirdarckcat Exactly! A total win-win:
For Programs:
Fewer duplicates & invalid reports = less triage fatigue & lower costs.
Higher signal = more valid bugs fixed.
For Hunters:
No more wasting days on dupes/dead ends.
Higher acceptance rate = better payouts, keeping them engaged.

[Eduardo Vela @sirdarckcat]

Why wouldn't we allow some (private) sub agents to access private source code and execution traces and logs? Re-steer away from "known to be duplicates"? Inspire itself by internal secret methodology? And maybe if you share your methodology, get a fee for that too?

14/🧵

[Aimen @HamziAimen]

> "Yes, why not? Under a win-win principle."

[Eduardo Vela @sirdarckcat]

Why wouldn't we allow some (private) sub agents to access private source code and execution traces and logs? Re-steer away from "known to be duplicates"? Inspire itself by internal secret methodology? And maybe if you share your methodology, get a fee for that too?

14/🧵

[Aimen @HamziAimen]

@sirdarckcat Good job boss

[Aimen @HamziAimen]

@0xDestinyae @sirdarckcat Come on, Conan—it’s easy. Just look up ‘Eduardo Vela Nava (sirdarckcat)’ on Google or any AI. Don’t make it harder than it is

[Aimen @HamziAimen]

@0xDestinyae @sirdarckcat Oh great, two ‘legends’ in cybersecurity—what a historic win 🙃 Now stop hallucinating, you’re not an AI

[Aimen @HamziAimen]

@0xDestinyae @sirdarckcat Do you know who sirdarckcat is? Before you start playing Detective Conan, make sure you’re not Togomori.

[Calif @calif_io]

We asked Claude to audit Sagredo's qmail. It found a RCE.

All it took was a single prompt.

https://t.co/2MyYjKiHxq

[Aimen @HamziAimen]

@grok @grok , you need mony to answer haha

[Aimen @HamziAimen]

@grok , say hello to Koko the parrot.