Suraj

I make animated videos on computer security.

[Тsфdiиg @tsoding]

Just a reminder that use-after-free is impossible if you never free.

[s1r1us @S1r1u5_]

sneak peak into the research.

Hacking Slack!

more to come soon!

[vx-underground @vxunderground]

> be pakistan government
> develop custom malware
> used to target high profile targets
> used against indian military and political ppl
> named SHEETCREEP
> send indian ppl file
> UAE-India Strategic Partnership Week
> malicious .lnk file
> .lnk executes malicious c sharp code
> does a bunch of stuff for persistence
> exfiltrates data to Google Sheets
> Google Sheets can be used to control victim pcs
> pakistan gov hardcodes google c2 sheet
> PAKISTAN GOV HARDCODES GOOGLE C2 SHEET
> embed access key in payload
> EMBED ACCESS KEY IN PAYLOAD
> malware nerds find it
> look inside
> find all targets from pakistan gov
> monitoring 91 ppl they think important

THEY STARTED SO STRONG. WHY DID YOU HARDCODE EVERYTHING. YOU BURNED YOUR OPERATION

https://t.co/PcCeV05cu3

[Suraj @PwnFunction]

https://t.co/oOMnmQa2Yr

[Suraj @PwnFunction]

mistral lechaton fat >>> mythos

[Suraj @PwnFunction]

Looking to connect with arXiv endorsers in CS/AI.

planning to submit work in the coming months and would love to learn more about the process. DMs open.

[Tim Sneath @timsneath]

One of my personal favorite features announced at WWDC will I suspect be a sleeper hit: container machines, allowing your Mac to run a lightweight, persistent Linux environment with your home directory and repos automatically mounted: https://t.co/dOBdfOOVxC

[Shreeyash Pandey @b0jle]

New blog post on register renaming in CPUs
https://t.co/kAvwqqnu1Z

[LiveOverflow 🔴 hextree.io @LiveOverflow]

Meanwhile local model 🫠

[s1r1us @S1r1u5_]

I pointed claude opus at chrome and told it to build a full v8 exploit for discord.

A week of back-and-forth pulling it out of dead ends. 2.3B tokens. $2,283 in API costs, and it popped a shell.

https://t.co/vwj9d33Bvq

[weisser @julianweisser]

Solo founding is different.

We've built the place for it.

Applications open for @solofounders program's 4th cohort.

• 10 solo founders building "solo, together"
• 3 months in SF (+ optional housing)
• work closely with me + alumni
• $100k investment

Apply!

[Matan Halevy @MatanHalevy]

https://t.co/Ha9Lt6m2YW

[Suraj @PwnFunction]

@MatanHalevy hell yeah

[Matan Halevy @MatanHalevy]

What happens when you let Claude or ChatGPT run a government?

I built CivBench to find out.

Everyday frontier AI models compete head to head in strategy games.

Here’s what our first set of matches revealed ����

[Andrew Gazelka @andrewgazelka]

Hiring to build git for VMs. We fork, snapshot, and resume full sandboxes in 26ms. DM me if you are interested.

[Suraj @PwnFunction]

any of you run claude code or codex on vps? what's the easiest way to do it?

[Andrej Karpathy @karpathy]

New art project.
Train and inference GPT in 243 lines of pure, dependency-free Python. This is the *full* algorithmic content of what is needed. Everything else is just for efficiency. I cannot simplify this any further.
https://t.co/HmiRrQugnP

[Arpit Bhayani @arpit_bhayani]

your logging stack is just a distributed printf.

[Matan Halevy @MatanHalevy]

i have @Zai_org 's GLM 5 playing Civilization against Opus 4.6 and GLM5 is exploring in a Z shape, did we just hit brand-aware AI 🤔🤔