kek

Security @Google
God of Slop, Terror of TPUs, Guzzler of Tokens

DMs always open
HCI 2017-2023, UIUC 2026 - (dropped out)

prev
- @scryonlabs
- @pragnition

[kek @JoeyTang]

@_sy1vi3 Cool! See ya tmr!

[kek @JoeyTang]

If this works for codex like they claim, epic! Makes me wonder how big their caches are to be storing all of that on disk lol

[Tibo @thsottiaux]

Day 16/

You can now cache for 12h in the API and for logged in users across Codex & Work we keep cache forever and you don’t have any penalty for coming back to an old conversation or resuming after a few hours and are now guaranteed to hit the cache.

[kek @JoeyTang]

WTF LOL

[Ian Carroll @iangcarroll]

For the next few days or weeks, anyone now has a root CA thanks to eMudhra. Time to have some fun with MiTMing unwilling devices!

[Kirill Firsov @k_firsov]

php2shell

Tomorrow is a helluva day.

[kek @JoeyTang]

YO NOW I NEED THIS WTF

[Mandy Lu @mandylu]

the sequel: jump trading poker set tower

[kek @JoeyTang]

Holy shit I want this lol

[Mandy Lu @mandylu]

behold the citadel bento box. cutest merch ever

[kek @JoeyTang]

@Hacker0x01 your ai agent blocks my submission for "not specifying severity" when there's an option to "submit without severity"
is this intended?

[kek @JoeyTang]

Maybe we will finally stop using java :D

[Adam Holter @AdamHoltererer]

What programming language does AI know worst?

According to AA Omniscience: Java

[Graham Helton (too much for zblock) @GrahamHelton3]

This is the first HIGH severity curl vulnerability in years. It is cool, but take note of the report format. This is the level of detail you should aim for when disclosing vulns https://t.co/k1wrTMNf6D

[kek @JoeyTang]

@moyix Oh + I'm sure your intelligent enough + have enough background to make a year of looking at chrome enough to give you a significant edge/knowledge base to steer too xD

[kek @JoeyTang]

By vibes I mean how good are you at telling whether <a vague idea> sounds better than <another vague idea>. I suck at pwn as well, only knowledge I have is playing intermediate pwn challs + reading blog posts I definitely don't understand. But there's this intuition of what sounds right and what doesn't that makes steering productive if I'm making any sense?

[Joseph Thacker @rez0__]

louder for those in the back:
IT'S NOT SLOP IF ITS MY AGENT'S SLOP!

[kek @JoeyTang]

This is lowk alpha, why study &lt;cs/math&gt; and struggle to land a hft job when you could study weather

[seb @hiiinternet]

Big mix up today in the world of quant weather trading

[kek @JoeyTang]

Congrats! Feel like the bounty should've been higher though...

[SuperBeetleGamer @Cayden_Liao]

Our AI found a bug that let anyone mint infinite XRP, with $94B at risk. It had been hiding in one of the most audited codebases in crypto for nearly a decade, and earned us the maximum $250K bounty.

Here's how it went unnoticed, and how we found it. https://t.co/m7rSD8mKS5

[lauren @poteto]

i feel like swe interviews could probably collapse into just 2 technical rounds:

• system design (how well can you articulate your ideas, do you actually know how to engineer something)
• onsite project to build a real thing with agents (can you translate your intent into high quality outcomes)

everything else we used to ask is no longer necessary

[kek @JoeyTang]

@__nav1n_ @Google Waiting for your report :)

[kek @JoeyTang]

Gudtek

[Sundar Pichai @sundarpichai]

Introducing EmbeddingGemma 2, a new open multimodal model that sets the standard for on-device efficiency.

- our first open, natively multimodal embedding model
- handles text, code, image, video, and audio tasks within a lightweight, modular 740M parameter form factor
- ideal for offline, privacy-first RAG when paired with Gemma 4
- outperforms some specialist models more than twice its size

Weights available now on Hugging Face.