Zetha (Javier R.)

InfoSec | Gamer | Geek |
Gaming acc: @zethaGG

[Elisa @eeelistar]

Nuno Loureiro was assassinated yesterday

He was a professor + the director of MIT Plasma Science and Fusion Center

> 47 years old
> Studied nuclear fusion (= energy source of the Sun + stars) for 10 years at MIT
> His award-winning work focused on creating a virtually limitless, clean energy source on Earth - one that doesn’t produce carbon or radioactive waste (usual biproduct of fission reactors)
> His research was essentially a threat to companies in the energy sector (fossil fuels, wind, solar, etc)
> Nuno was vital to the development of fusion nuclear power plants, without him the path ahead is less clear + his death will set back the entire field

Nuno is not the first MIT fusion scientist to be brutally murdered, in 2004 Eugene Mallove was also shot in his home

I hope this opens eyes – there is an agenda at play

[Josh Whiton @joshwhiton]

Five neural nets, achieving completely local voice AI, no internet, on an M1 with only 16GB ram.

Neural-based voice activity detection and turn detection means it's interruptible, but never interrupts me, and is able to sit idle and waiting. It's been flawless so far.

12B parameters is definitely smart enough for some very cool use-cases (will share more later).

Computers that can "think" feel strangely alive compared to dumb or networked hardware.

Fast? No. But crazy that it works at all on such a modest machine.

The stack:
- Silero VAD voice activity detection
- Whisper Large v3 turbo
- Smart Turn v2 by @trydaily
- Kokoro_tts
- Gemma_3_12B_it_QAT_Q4 rock-solid on @lmstudio
- vision easily removed thx to gguf @ggerganov
- @pipecat_ai integration by @kwindla

[Alex @xaitax]

0-Day Market Hits USD $20 million. Another heavyweight (@advance_sec0) has entered the 0-day broker market, and they’re buying everything.

Full exploit chains across the board. OS, mobile, browsers, servers, MS office, mail, databases, network gear, messengers, web apps - you name it.

Mobile clearly leads the pack: up to $20M for an SMS/MMS full chain, which is about a 400 to 500% jump in just five years. Sure, part of it is because exploits are getting rarer and harder to develop. But the other driver is pure market heat: brokers are now outbidding each other to lock down supply.

Smart business. Dangerous game.

[Creepy.org @creepydotorg]

‘Terminator 2: Judgment Day’ was released 34 years ago today.

This scene still haunts me after all these years.

[mRr3b00t @UK_Daniel_Card]

MOTHER OF ... THIS IS AMAZING!!! WE DID IT! 2024 and the world has said in formal documents:

DO NOT USE A CONSUMER VPN!!

If I had time I would bake a CISA CYBER CAKE!

I have a feeling they will not be the only agency....

#VPN #CYBER #SECURITY

[Zetha (Javier R.) @Javi_InfoSec]

@ed_pracnet I voted ip addr, but it's actually "ip a" for me, I'm just lazy

[Zetha (Javier R.) @Javi_InfoSec]

@sixtycyclespdx @fuckyouiquit If you know what you are worth, you never accept lower than that. What can you expect from a company that tries to pay you lower than what you deserve? They already know you can do the job, what do you think is going to happen when asking for a raise?

[Zetha (Javier R.) @Javi_InfoSec]

@NahamSec I think this is a must read

[Jay Phelps @jayphelps]

git productivity booster life hack

[vx-underground @vxunderground]

tl;dr don't read TikTok dms ¯\_(ツ)_/¯

Today is was announced an unknown Threat Actor(s) had discovered an exploit in TikTok which allows users to hijack accounts.

Details are scarce – however it has been noted that the payload (as it is being described) is delivered through TikTok direct messages. The payload is executed when the direct message is read. However, it does not require any external files be executed, the user does not need to respond to the message, etc.

No details have been unveiled on whether or not this is platform specific (i.e. Android or iOS).

The unknown Threat Actor(s) have compromised Paris Hilton, CNN, and Sony. It is claimed other high-profile and/or celebrity accounts have been compromised, but no other 'high-profile' accounts have been disclosed other than the ones previously noted. The TikTok security team is aware of the issue and has confirmed the legitimacy of the exploit with Forbes.

TikTok representatives stated to Forbes that a small number of users were compromised. No exact numbers were given. TikTok representatives have not stated if the exploit is still valid, how users can protect themselves, or what the attackers have done with the compromised accounts.

[Primavera 🌼 @Lostinmind22]

Chicas programadoras de mi TL (y chicos programadores que me podais RT para ponerme en contacto con chicas programadoras). Estoy interesada en videos, articulos y conferencias de la poca representación dela mujer en el ámbito de la informatica ¿Me echais una mano?

[Zetha (Javier R.) @Javi_InfoSec]

Madre mía, 15 años y todavía no me entero de nada.

----
¿Recuerdas cuándo te uniste a X? ¡Yo sí! #MiAniversarioDeX

[Dark Web Informer @DarkWebInformer]

⚠️X SETTINGS⚠️Do you hate spam on X/Twitter? Make sure you update your notification settings to something more strict. On X: More -> Settings and privacy -> Notifications -> Filters -> Muted notifications

#DarkWebInformer #DarkWeb #Cybersecurity #X #Twitter #Privacy #Spam #Infosec #CTI

[thaddeus e. grugq @thegrugq]

Briefly, I want to address the issue of who is to blame. Easy — the people behind the attack. Lasse, the maintainer of xz, was the target of a patient intelligence campaign that invested more resources into subverting him than anyone invested into his project.

[LiveOverflow 🔴 hextree.io @LiveOverflow]

Andreas might not be a "security researcher", but he is an amazing engineer!
And it shows that a great engineering is also a great hacker.