Dylan

Security researcher, public speaker and founder.

Forbes 30 Under 30

Truffle Security @trufflesec

@Netflix

[Dylan @InsecureNature]

@caseyjohnellis Hang on, I'll ask Claude if it looked at nearby code or stuck with the original patched code

[Dylan @InsecureNature]

@LiveOverflow What's the term for "Bro your AI output is technically correct but Aesthetically incorrect"

[Dylan @InsecureNature]

The number 4 was just as likely as any other number, I don't really see what the big deal is

[Dylan @InsecureNature]

The question isn't Calif or Wiz, it's who spent more money on tokens finding it?

[Dylan @InsecureNature]

Drop your breach news now, no one is gonna notice.

[Dylan @InsecureNature]

The cycle:
1. I need DayBreak to fix this issue
2. Oh I'll use daybreak to find new issues
3. *5000 more people now need daybreak*

[Dylan @InsecureNature]

The only way out is through.

[Dylan @InsecureNature]

@My1xT @AngryMulbear They support a couple options, in the screenshot is S/MIME

[Dylan @InsecureNature]

Credit where credit is due, the Internet moved really fast with revoking the bad root CA, so fast there's not much space for mischief

[Dylan @InsecureNature]

@AngryMulbear This was github code signing in the screenshot. Which I thought for sure would have taken longer

[Dylan @InsecureNature]

@IceSolst Goal drift and selective pressure will realign the worm to just spreading. I did a blog on it https://t.co/IjnbE8kb89

[Dylan @InsecureNature]

@msuiche @Kwathomas0 Yes, the models have gotten significantly better than Mythos at cyber capabilities.

[Dylan @InsecureNature]

Seeing people speculate distillation wasn't the objective of the OpenCode breach is a little baffling.

There's a massive war going on to distill frontier models, billions of dollars ride on it, is as big as any incentive I can think of.

[Dylan @InsecureNature]

@IceSolst @mattjay I would wager the main goal was distillation. There's a real battle between the frontier labs and the distilled open weight models, and it's being fought somewhat out in the open. https://t.co/u4pPSuzml3

[Dylan @InsecureNature]

@IceSolst @mattjay I would wager the main goal was distillation. There's a real battle between the frontier labs and the distilled open weight models, and it's being fought somewhat out in the open. https://t.co/u4pPSuzml3

[Director Michael Kratsios @mkratsios47]

We have information that Moonshot AI distilled Anthropic’s Fable for the development of its K3 model.

To do this they developed a sophisticated internal platform to conduct large scale distillation against U.S. models, allowing them to quickly switch between multiple methods of access to avoid detection. Moonshot AI has also acquired GB300-equipped servers and has accessed GB300s in Thailand, likely to train its AI models.

The United States strongly supports the free and fair development of AI, including a thriving competitive ecosystem that spans frontier models, specialized systems, open-source frameworks, and open-weight models. Legitimate AI distillation used to create smaller, more efficient models plays a vital role in this open innovation ecosystem. However, large-scale, covert industrial distillation aimed at stealing proprietary U.S. technology and undermining American research is unacceptable.

[Dylan @InsecureNature]

@kbsingh @mattjay Yeah unknown how they got in, but I read the key theft was in service to do installation

[Truffle Security @trufflesec]

Deleted the secret from your repo? Cool. Your coding tool might still have a copy.
We found 2,148 distinct secrets in Claude files and 603 in Replit files. They showed up in settings, saved conversations, and worktrees.
Deleting it from source is only part of the cleanup.

[Dylan @InsecureNature]

@LiveOverflow "We'll never run out of oil, because the last barrel will be too expensive for anyone to afford"

[Truffle Security @trufflesec]

A short-lived key is only safer if the replacement stays secret.
From Sept. 1 to Oct. 7, one container image leaked a newly issued AWS STS key 1,146 times 🫠
This is the first in a series on how coding tool state can turn credential rotation into repeated exposure.

[Dylan @InsecureNature]

@0xTib3rius capability URL's