Travis

[Pesky_Avs @Avs__Fan__]

🤣 🤣 🤣

[Sam Altman @sama]

we're starting rollout of GPT-5.5-Cyber, a frontier cybersecurity model, to critical cyber defenders in the next few days.

we will work with the entire ecosystem and the government to figure out trusted access for cyber; we want to rapidly help secure companies/infrastructure.

[Travis @MinnySec]

@ctbbpodcast @rez0__ Have you had Claude Code mark your bug bounty prompts as violations and then make you use sonnet? Then if they don’t have context it looks like you’re hacking and then ban your account.

[Travis @MinnySec]

@HackingDave I knew that’d trigger 😂😂

[Travis @MinnySec]

@burakeregar Good framework. Biggest one, in my opinion, is logging. You should be notified when someone is dumping your Supabase database. Are there good logging systems with Supabase? Every time I’ve reported Supabase issues the devs had no idea.

[Travis @MinnySec]

@burakeregar Great demo

[Travis @MinnySec]

@_bileet @SoraiaDev Blasting this publicly is in pretty bad taste. You should responsibly disclose privately and this isn't the flex you think it is.

[Travis @MinnySec]

@ChinuaNwasogwa @burakeregar Anon key with RLS disabled is one of the main problems.

[Travis @MinnySec]

@burakeregar I’ve been reporting as many as I can and I can’t keep up. Some real crazy stuff out there right now it’s a big problem.

[Travis @MinnySec]

@jmontgomery1965 @APompliano @cfosilvia Shain can help/review - he’s awesome @shaincodes

[Travis @MinnySec]

@h4x0r_dz Supabase is awesome but I’ve found sites with service_role keys exposed, RLS disabled, PATCH/PUT requests to make myself admin, exposed RPC functions on the execute_queries end point. Lots of fun stuff. I wish there a was a tool to do a full check but I have a pretty good system.

[Travis @MinnySec]

@samharrisnot @APompliano @cfosilvia Their data is encrypted at rest, even if someone was to get access you wouldn’t be able to read it.

[Travis @MinnySec]

@ericparker I did not expect that ending

[NHL @NHL]

Jesper Wallstedt's last two games:

64 shots faced
64 saves made

Perfection for another @pepsi shutout. 👌

[Travis @MinnySec]

@gamedayhky @wellymammoth wondering how I can learn these crazy skills

[Anthropic @AnthropicAI]

We disrupted a highly sophisticated AI-led espionage campaign.

The attack targeted large tech companies, financial institutions, chemical manufacturing companies, and government agencies. We assess with high confidence that the threat actor was a Chinese state-sponsored group.

[Travis @MinnySec]

@wellymammoth Hey can you do more hockey posts not feeling all this non hockey content. Thanks.

[Travis @MinnySec]

@wellymammoth You’re telling me you can double it? 👀