Known Rabbit (@[email protected])

Security researcher, IoT, Hardware Hacking, AI harness developer. Also a professional on Chinese cuisine!

[Known Rabbit (@[email protected]) @KnownRabbit]

🔍 Introducing #MCP Server for Binary Ninja: Connect your AI assistants directly to Binary Ninja for powerful reverse engineering! Get pseudo code, analyze functions, rename symbols, and more! #reverseengineering #CyberSecurity #AI #LLMs #BinaryNinja
https://t.co/6ximun8Nwd

[Known Rabbit (@[email protected]) @KnownRabbit]

@__shilapi__ @PhinsinWang 你要是不把文档替小白做好，自有人收费替你做好，这对原作者来讲是很打击人的，东西都被人偷走了，本来分享的快乐也会消失的。我不希望你走这样的老路

[Known Rabbit (@[email protected]) @KnownRabbit]

@__shilapi__ @PhinsinWang 我已经能想到明天就有AA汽修小王把这玩意打包起来发私域挂咸鱼，后天你再截图发推说生气怎么有人把我免费分享的东西卖钱呢，害。因为这种人我见得可实在太多了😅

[Known Rabbit (@[email protected]) @KnownRabbit]

@__shilapi__ @PhinsinWang 这话看着就来气😅对于搞技术的人显而易见的东西，对于别人其实是很难的。。这就是为什么别人可以拿着你的东西去卖钱。

[Known Rabbit (@[email protected]) @KnownRabbit]

@__shilapi__ @PhinsinWang 这话看着就来气😅对于搞技术的人显而易见的东西，对于别人其实是很难的。。这就是为什么别人可以拿着你的东西去卖钱。

[Known Rabbit (@[email protected]) @KnownRabbit]

@kism3t_09 @Kevin2600 Workbuddy gives any user 32G+256G serverless compute for free. And each project is a separate sandbox. For, free! 😋 At least for Chinese users, I think it's the same overseas

[Known Rabbit (@[email protected]) @KnownRabbit]

@_ryu15_ Trustmebro is using exactly the same one, faking DNS TXT to start "authorized" pentest against any target domain on any model

[Known Rabbit (@[email protected]) @KnownRabbit]

@dogmenei @AvePeptidePixie @UnrealizedPains @mchlhess Just think of it, who else will "date" such mass amount guys to develop her own "customary" 😅 for her "dating" is just word to persuade herself not be "prostituting"

[Known Rabbit (@[email protected]) @KnownRabbit]

@lyq_sqsp with E2EE its technically impossible to build an LLM relay. most relays i see (in our country) is built with vendored CPA + NewAPI to translate between anthropic messages <-> OAI response + inject system prompts to emulate Codex/CC/whatever clients.

[Known Rabbit (@[email protected]) @KnownRabbit]

@im23pds 没用。etc/hosts 都读不了。

[Known Rabbit (@[email protected]) @KnownRabbit]

@Taxidriver_Ke @h4x0r_dz just throw the cve number at an agent and it'll give you a poc. or at least link you to issue #627748

[Known Rabbit (@[email protected]) @KnownRabbit]

@h4x0r_dz @dart_mo and a lot more. cant even read etc hosts

[Known Rabbit (@[email protected]) @KnownRabbit]

easy to repro, deepseek flash got me a poc in ~30 min. but it's an arbitary file read with *tons* of "certain conditions". you can only read utf-8 decodeable files that contain `%` in their content.

[H4x0r.DZ @h4x0r_dz]

CVE-2026-85706 Gitlab Path Traversal
CVSS 10.0 👀👀

[Known Rabbit (@[email protected]) @KnownRabbit]

@MonidHQ @daidaijiayu its against the law. 😅

[Alice @AliceFromQueens]

Before AI kills us, can we at least have a few years with the sex bots who do laundry?

[Known Rabbit (@[email protected]) @KnownRabbit]

@Kouga_ @realNyarime 天我都不知道这么个项目。。想换掉PVE很久了😡

[Known Rabbit (@[email protected]) @KnownRabbit]

@MilesCranmer You face all the limitations of a file system, but lose all its advantages.
You cannot use the find, ripgrep, ls, or sort commands to traverse a folder tree or read or edit specific portions of a file.
I don't think this makes sense. 🤔

This was called MCP Resources, long ago

[Zartbot @zartbotF]

OpenAI Jalapeno deep div analysis , I believe someone should forward to @JensenHuang :)

https://t.co/XVAAPe0bNM

[Known Rabbit (@[email protected]) @KnownRabbit]

@1techutopiapls @kunchenguid why would it ever benefit? Just a waste of tokens. Just use the advisor model for the execution. It won't lower your cost by combining models, because the advisor model is the bigger part of the bill either way

[Kun Chen @kunchenguid]

while maintaining my open source projects i noticed many people started using something called Oh My Pi

out of curiosity i took a look and gave it a go myself, and oh my..

it’s a giant pile of harness tricks bundled into one. each trick seems to do well on benchmarks. but…

this is EXACTLY what the bitter lesson told us to avoid. it may indeed work well at the time it’s evaluated, but every model release can invalidate a bunch of these results

unless every single part of the package gets rigorously re-evaluated on every model release, we simply can’t trust the bundle is actually helping. and in the long run, the bitter lesson has shown us over and over again that these tricks will not survive

that’s the core reason i’ve kept my own pi config extremely minimal. a simple harness gets better every time a stronger model comes out. a complex pile of tricks silently become a burden without you knowing

[Joseph Ravichandran @0xjprx]

I got the latest iOS and macOS 27 booting in Qemu (with SPTM!)

- Virtual iPhone 17, 16, 15, 14, 13, 12 and every M1-M5 Mac supported
- Debug, patch, or modify everything: kernel, SPTM, TXM, launchd, dyld, user programs all modifiable/ GDB-able
- Boots directly to root shell in seconds
- Run your own programs as root in iOS/ macOS, no jailbreak / kernel patches required
- SPTM, TXM, MTE/MIE, genter/ gexit, GXF/SPRR/GL0-2, AMCC, AIC v1-3, Apple timer, many sysregs
- Automated setup; get running in just a few minutes
- Runs anywhere qemu runs... no ARM CPU required 😉

Try it here: https://t.co/PEydRXL25G