Valmyr

Bugs

[Valmyr @KoiushSec]

@feelsdesperate AGIPILLED

[kernelstub (Prepakis Georgios) @kernelstub]

WAKE UP NEW MARIADB RCE DROPPED!

FILE privilege + unrestricted secure_file_priv + UDF loading → full RCE as the mysqld user :P

[Valmyr @KoiushSec]

@gakonst Cryptography has just started, in the future solar systems worth of energy will be used to ensure complete informational privacy

[Valmyr @KoiushSec]

@peterktodd @bitcoin_eagle @NoomDynamite How do professional hackers do it? by laundering btc->monero->btc otc this is the only way to turn "tainted" btc into "normal value" btc

[Valmyr @KoiushSec]

@mert 1000% is a 100 2.7% gains

[Valmyr @KoiushSec]

@pashov This is not true, only deterministic scanners can catch certain bugs. Maybe if you combine conventional scanners with very limited llms though it could work

[Valmyr @KoiushSec]

@nischayup "Claude profile this address and find out who he is"

[Valmyr @KoiushSec]

@newmichwill While they give better prices the problem is they kill the edge for the passive lps and leave them only with toxic flows. This eventually turns a fully autonomous onchain liqudity source into a highly complex system that will tend to have tradfi like breakdowns, killing stability

[Valmyr @KoiushSec]

@IceSolst I mean directionally they are right, you really should avoid having plaintext passwords at any time. It is very easy for assumptions to break and to have layers of security

[Valmyr @KoiushSec]

@Sans_Google Privacy app (Requires telephone number)

[Valmyr @KoiushSec]

@osint_based This seems to have happened multiple times for Orion, one time back in 2023

[Valmyr @KoiushSec]

@thdxr That sounds like something a bot would say

[Valmyr @KoiushSec]

@LightYagami2435 @ereliuer_eteer Salt your stuff :)

[Valmyr @KoiushSec]

@ereliuer_eteer A lot of people have done this, surprisingly common usecase

[Valmyr @KoiushSec]

@kernelstub "claude social engineer this guy and become his friend and then plant an infostealer"

[Valmyr @KoiushSec]

@kernelstub "claude do a security audit of this website and get me access to TALOS" :)

[Valmyr @KoiushSec]

@kernelstub gib talos plz sir

[Valmyr @KoiushSec]

@danrobinson On it boss

[Valmyr @KoiushSec]

@BitmanNFTs You guys should look into adding private information retrieval as a standard for all name queries, would be a pretty cool differentiator and represent a true difference from web2 dns system.