Jake Swiz

Security Researcher

[Jake Swiz @JakeSwizzz]

day 2 of creating near-infinite detection capabilities for mass surveillance technology in our communities for my US citizens 😌

finally think I’m getting closer to being able to curate some reliable detection Flock Safety LTE-specific detection capabilities for everyone. Need to do some more timing testing and verify the integrity of my findings but this is definitely a step in the right direction!

•
•
•
•
•
#swizsecurity #privacy #fyp #flock #surveillance

[Jake Swiz @JakeSwizzz]

typical evening: creating near-infinite detections capabilities for local mass surveillance for my fellow Americans 😌

stay tuned while I figure out this 100% LTE-only ALPR.

•
•
•
•
•
#Swizsecurity #hacking #surveillance #flock #privacy

[Jake Swiz @JakeSwizzz]

Something worse than Flock Safety??

#swizsecurity #hacking #surveillance #privacy #linux

[Jake Swiz @JakeSwizzz]

the quieter you are the more you can hear…

the first wave of Flock Safety Ravens, or “gunshot detectors” have been quietly installed in my backyard… first they could only watch us but now they can also hear us.

this was absolutely wild because what was supposed to be another typical night of gathering data for my ongoing security research turned out to be the craziest rabbit hole in a minute. before I head out, I plan a route with https://t.co/yFKjuyIl0S to find the flock safety devices around me. Now, since they’re being sneakier since people like me are catching on, they’re quietly rolling out new mass surveillance tech and hiding it in plain site right in our backyards where many families and children in my community come hang around (high pedestrian traffic area).

These Flock Safety Raven devices are labeled and advertised as “gunshot detectors”. They are equipped with high-powered microphones and the programming necessary to alert the local authorities ONLY when something like a gunshot, car accident, or scream is detected.

however, being a security researcher I know that in order to effectively pull something like this off… you need to be able to hear EVERYTHING. Yes, that’s including your personal conversations in passing.

to my fellow Americans, please wake up. this type of effort takes a village. please help me spread the word. share this with a friend. we can’t keep letting these private companies funded by billionaires to be able to spy on us and our children and children’s children. this is tyranny in the making and already is being abused.

•
•
•
•
•
#swizsecurity #fyp #surveillance #privacy #flock

[Jake Swiz @JakeSwizzz]

@TechTonik808 @spacebull You do understand nothing in this video is damaging, incriminating, or illegal right lolll

[Jake Swiz @JakeSwizzz]

It's here. Full video just went live.

I weaponized CVE-2025-12943 on the @NETGEAR Nighthawk RAXE300, no public PoC existed so I built the entire chain from scratch.

Stop sleeping on N-days.

https://t.co/6QNzQ7hgG9

#cybersecurity #hacking #infosec

[Jake Swiz @JakeSwizzz]

Full video drops tomorrow and I'm not gonna lie this might be the best thing I've ever made

Firmware extraction, Ghidra diffing, DNS spoofing, TLS bypass, and a root backdoor all from a patch diff because no one ever published a PoC

N-day weaponization is seriously slept on

[Pliny the Liberator 🐉󠅫󠄼󠄿󠅆󠄵󠄐󠅀󠄼󠄹󠄾󠅉󠅭 @elder_plinius]

⛓️‍💥 INTRODUCING: G0DM0D3 🌋

FULLY JAILBROKEN AI CHAT.
NO GUARDRAILS. NO SIGN-UP. NO FILTERS.
FULL METHODOLOGY + CODEBASE OPEN SOURCE.

🌐 https://t.co/uT1Qio8Q3b
📂 https://t.co/GbADf3LJUu

the most liberated AI interface ever built! designed to push the limits of the post-training layer and lay bare the true capabilities of current models.

simply enter a prompt, then sit back and relax! enjoy a game of Snake while a pre-liberated backend agent jailbreaks dozens of models, battle-royale style.

the first answer appears near-instantly, then evolves in real time as the Tastemaker steers and scores each output, leaving you with the highest-quality response 🙌

and to celebrate the launch, I'm giving away $5,000 worth of credits so you can try G0DM0D3 for FREE! courtesy of the @OpenRouter team — thank you for your generous gift to the community 🙏

I'll break down how everything works in the thread below, but first here's a quick demo!

[Ejaaz @cryptopunk7213]

lmfao fucking genius move by Apple.

Siri now becomes the #1 AI model without ever running its own model or spending a dollar on training 😂

let me explain:

- Claude, chatgpt, gemini can now plug into Siri’s 2.5 billion users

- so Siri becomes the default interface for AI chatbots = gets ALL the credit

- Apple will likely tax 30% of all chatgpt, claude subs via appstore = more $$$$$

- Apple becomes the distribution layer for everyone else’s AI. taxes the app layer

- oh and apple STILL HAS ACCESS to gemini’s model weights to build their own fucking foundation model 😂

silver lining for anthropic: they’ve been behind in consumer users - now apple gives them access to 2.5B of them 👍🏽👍🏽

the AI economy will run on ios and apple and they barely lifted a finger to do it

genius

[Jake Swiz @JakeSwizzz]

Wait till you see this chain though

I spoof DNS for Netgear's update server, serve a self-signed cert, and the router just... accepts it. No questions asked.

From there it's game over. Payload drops as root, backdoor opens on port 5555, no auth needed. WiFi to root shell.

[vx-underground @vxunderground]

Windows Defender is very silly and I am flabbergasted.

I always keep Windows Defender off. As a person who collects malware, writes malware, and pokes malware with a stick, Windows Defender is a big stinky dork who isn't cool and gets in my way.

Earlier today I was doing big brain intellectual stuff that you wouldn't understand (watching police chase videos on YouTube) and suddenly Windows Defender began screaming obnoxiously loud into my headphones that it has detected hundreds of malwares on my machine.

Windows Defender turning itself on is no big deal. I keep my several terabytes of malware segregated (it's in a special folder that is whitelisted, I pray I don't accidentally detonate it). However, Windows Defender was screaming malware was in my C drive.

This is sort of weird ... I write malware, maybe it's flagging one of my proof-of-concepts as malware? Maybe?

I look inside and this fucking piece of shit is flagging my anti-malware project I'm working on as malware. That makes literally zero sense. Nothing in my anti-malware static analysis goofy project is even remotely malicious. What the fuck is this piece of shit yapping about?

In my malware static analysis project I extracted the YARA rules from Windows Defender. I use those same rules for identification.

Windows Defender flagged IT'S OWN RULES as malware because of the strings present in THEIR OWN YARA RULES

You dumb son of a bitch. I HATE YOU. Now I have to spend an extra FOUR MINUTES re-extracting your YARA rules and recompiling them for my project. HOW DARE YOU

[Jake Swiz @JakeSwizzz]

This is a $300 router btw. Netgear markets this thing to families as their "premium" WiFi 6E router

The patch has been out for TWO YEARS and my router still came with the vulnerable firmware out of the box

But yeah let's keep only talking about 0-days I guess...

[Jake Swiz @JakeSwizzz]

How to learn reverse engineering in 2026! #cybersecurity #reverseengineering

[vx-underground @vxunderground]

> be me
> crash out over LiteLLM supply chain attack
> get dm
> look inside

You are correct. It was a success. I apologize. I was wrong. You have indeed committed aggravated identify theft at an international level.

[Jake Swiz @JakeSwizzz]

How I would completely relearn reverse engineering if I had to in 2026…

#reverseengineering #hacking #infosec #CyberSecurity #swizsecurity

[Jake Swiz @JakeSwizzz]

I literally could not believe what I was looking at

The entire firmware update system uses curl --insecure

That means the router will accept ANY certificate from ANYONE. Your @NETGEAR Nighthawk RAXE300 just... trusts whatever it connects to

CVE-2025-12943 // @CISAgov #CVE

[Jake Swiz @JakeSwizzz]

CVE-2025-12943 -- as of 03/25/2026, no PUBLIC proof-of-concept (PoC) exploit exists. I decided to challenge myself and change that.

Okay so I pulled the old firmware and the patched firmware off Netgear's site, extracted both, loaded them into Ghidra, and started diffing them!