Michiel Prins

Hacker. 👨‍💻 Runner. 🏃‍♂️ Empowering the world to build a safer internet. ✨ Co-founder @Hacker0x01. 🏢

[Michiel Prins @michielprins]

@the_cia_hacker @elder_plinius also dario: https://t.co/G2oKJSDSQC

[Michiel Prins @michielprins]

@nnwakelam Hey I got this new model too. It works even better when you use a BAC-driven tokenizer.

[Michiel Prins @michielprins]

@karrisaarinen @_JohnHammond is that you? 😃

[HackerOne @Hacker0x01]

What if your biggest career risk was actually the safest move you could make?

@ArchAngelDDay spent years in application security, climbing the ladder, running bug bounty programs, doing everything right. Then he walked away from all of it.

Today he's a full-time independent security researcher, a HackerOne champion, and home every Tuesday afternoon with his kids. And he built an AI bot that finds vulnerabilities while he sleeps.

This is the story of how he engineered that life and what it really took to get there 👇

https://t.co/iheLZK8Ce7

[Michiel Prins @michielprins]

@ArchAngelDDay I can rename your account to caido if that helps? 😂

[Michiel Prins @michielprins]

@rez0__ If it was nothing more than vanilla Claude, there's also something pretty concerning wrong with the target (the vulnerability apocalypse is coming) 😅 But the edge will ultimately sit in the unique tradecraft/skills and orchestration you build around it

[Michiel Prins @michielprins]

@ryancbarnett @rez0__ ^ this is the way. Can't just throw a "Claude said there is a vuln here" over the fence. I want to see tradecraft.

[Michiel Prins @michielprins]

If you’re experimenting with OpenClaw/Moltbook: use throwaway creds, least-privilege API keys, isolate environments/sandboxes, and log/monitor actions at the lowest level possible. Assume anything your agent sees (secrets, system prompts, tool runs) can become public.

[Michiel Prins @michielprins]

The Moltbook attack surface might be the closest thing yet to the XSS worms that defined the 2000s era of social media.

[Michiel Prins @michielprins]

Unlike a social profile, many agents run with real privileges: tool access, API keys, file system, etc. The blast radius can be huge.

[Michiel Prins @michielprins]

secrets in prompt is the new secrets in code

[Michiel Prins @michielprins]

@damianplayer sheez, some crypto project already typosquatted that typo'd github link https://t.co/bI0wkiRFz1 😂

[Michiel Prins @michielprins]

Build vs Buy is now Vibe vs Buy. And I suspect Buy will lose more frequently than it used to.

[Learn to Vibecode @learn2vibecode]

oh my... People need to wake up to Claude Code w/ Opus 4.5

He just rebuilt a $1.2 BILLION app in 30 minutes.

All on @vibecodeapp without writing code.

Timestamps
00:00 Intro
00:58 Planning My App Build
03:08 Tool we're using
04:58 Prompt for my app
07:34 Fix Video Upload
08:40 Testing Version 1
10:13 Changing Color Themes
15:00 Adding Hover Effect
17:58 Adding Google Images API

[Michiel Prins @michielprins]

If you watch this video, you'll hear from HackerOne customers, security researchers, HackerOne leaders (and yours truly) about how AI, automation, and a global community of security and AI researchers give defenders a much-needed competitive edge.

[Michiel Prins @michielprins]

At HackerOne, we believe that the future of security involves a security research community working together with enterprises by leveraging the power of AI.

[HackerOne @Hacker0x01]

Big moves from @vercel 👀

A $1M React2Shell challenge inviting security researchers to break modern web frameworks and make them stronger in the process.

This is how you stay ahead of real-world risk. 🔐👇