Sean McRae

I break things occasionally
#infosec #cybersecurity #Privacy
Views & opinions expressed here are my own.

[Sean McRae @SeanMcRae_]

Finally! after months of analysis I can talk about our Cyber team's recent work and Project Glasswing! After observing frontier models perform vulnerability research.
https://t.co/mJbgjcKats

#CyberSecurity #ArtificialIntelligence #AppSec

[stacksmashing @ghidraninja]

Breaking Bitlocker: Bypassing the Windows Disk Encryption - using less than $10 of equipment

https://t.co/KOL9grIGHi

[LiveOverflow 🔴 @LiveOverflow]

How is it 2024, and Google still has not implemented a fix for the spoofed domains in "Sponsored" search results.

[LaurieWired @lauriewired]

Can you believe we've reached a point in tech where a package named "is-even" has millions of downloads?

hey guys, there is this thing called the modulus operator, and it works JUST FINE

[LiveOverflow 🔴 @LiveOverflow]

Known as CVE-2023-4863 and CVE-2023-41064, an issue in WebP's BuildHuffmanTable function was found, leading to a heap buffer overflow.

This vulnerability is fascinating and I'm excited to share with you what I learned!

https://t.co/uygdynyqLq

[Nicolas Krassas @Dinosn]

Introducing SMTP Smuggling: A novel technique for spoofing e-mails https://t.co/CvDWD8jSU6

[Sean McRae @SeanMcRae_]

Not to name names but I find pattern-based vulnerability detection to be a bit lazy. With all of the LLMs out there that can create semi-complex scripts, I think the SAST community is due for an overhaul. Agree? #infosec #bugbounty #AI #Coding

[Sean McRae @SeanMcRae_]

@0xor0ne @sensepost Cool article just based on the technology but physical SIMS are fazing out, anyone have any cool articles on eSIMs?

[Sean McRae @SeanMcRae_]

@albinowax Congrats man!

[Sean McRae @SeanMcRae_]

Has anyone else fully adopted ChatGPT into their workflow? This is the fastest I've seen a new meta get adopted, but hey, nothing wrong with having a readily available encyclopedia #ChatGPT #AI

[Sean McRae @SeanMcRae_]

@nixcraft Technically, yes 🙂

[Sean McRae @SeanMcRae_]

With 24% of patches introducing new bugs, I wonder how common it is for security researchers to perform a diff against the old/new codebase. 🤔 #infosecurity #BugBounty

[vx-underground @vxunderground]

MongoDB compromised

[Sean McRae @SeanMcRae_]

@BleepinComputer @serghei Now?

[Sean McRae @SeanMcRae_]

@DThompsonDev It's all the same now that recommendations are just spam and misinformation. Using AI is my preferred method of getting exactly what I need

[Sean McRae @SeanMcRae_]

@scaredmonad Please no

[Sean McRae @SeanMcRae_]

@LiveStrong_IC The willingness to try, fail and try again

[Sean McRae @SeanMcRae_]

@tsoding Sublime isn't too bad

[Sean McRae @SeanMcRae_]

@itsHesamSheikh Always try and seize opportunities

[Sean McRae @SeanMcRae_]

@_mormaid Congrats! learning the basics is crucial, now he can go and fine-tune his skills