ouɐɹɔs ʞɹɐɯ

Ethical Hacking, Social Engineering, Forensics, Hackerspaces, Cryptography, InfoSec, Locksport, Pentesting, OSint, Ham Radio - @[email protected]

[DANΞ @cryps1s]

Lockdown mode is now available in ChatGPT.

We rolled this out for organizations a few months ago, and now it's available for all users on all plans.

Lockdown Mode is designed to help prevent the final stage of data exfiltration from a prompt injection attack by limiting outbound network requests that could transfer sensitive data to an attacker.

Lockdown mode is not meant for everyone. However, for folks who have an elevated risk profile - due to who they are, what they work on, or the types of data they work with - it's an excellent tool for further securing themselves. This has some tradeoffs on functionality and utility, but for these users, the tradeoff is worthwhile.

Proud to see the team ship another wonderful feature as we continue our journey building the most secure, useful, and safest AI capabilities on the planet.

https://t.co/FPOlXI4YoV

[Nav Toor @heynavtoor]

You think torrenting is illegal.

The U.S. Library of Congress disagrees.

So does NASA.

So did Twitter's own engineering team back in 2010.

qBittorrent is the free, open-source, ad-free, no-cloud, no-subscription torrent client that the rest of the internet has been quietly using for 14 years.

37,661 stars. GPL-2.0+. Pushed today.

Here is the wildest part:

You: "Isn't BitTorrent a crime?"
Hollywood: "Yes. We spent 25 years and billions of dollars proving it."

You: "So who actually uses it?"
Internet Archive: "We do. Millions of files. Ubuntu, Debian, Fedora, Blender and LibreOffice all ship through us via BitTorrent."
NASA: "We host our Ultra High Definition footage on the Internet Archive as torrents."
Twitter Engineering, 2010: "We deploy code to our entire datacenter over BitTorrent. We named the system Murder. Nothing else is faster."
Facebook Engineering, 2010: "Same."

You: "So what is illegal?"
Hollywood: "Downloading our movie. Not the protocol. Not the app. Not the seeding. Just our movie."

You: "What does qBittorrent cost?"
qBittorrent: "Nothing. No ads. No premium tier. No telemetry. Forever."

Netflix Standard is $19.99 a month.
Disney+ no-ads is $15.99 a month.
HBO Max Standard is $16.99 a month.
Spotify Premium is $12.99 a month.
Google One 2TB is $9.99 a month.
Dropbox Plus 2TB is $11.99 a month.

That is over $1,000 a year to rent files that disappear when the contract ends.

qBittorrent is $0 a year to move any file you legally own, between any two computers you legally own, at the speed of every seed on Earth.

100% Opensource.
100% Legal.
100% Yours.

Hollywood spent a quarter century calling this a crime.

NASA uses it to ship Mars.

[ouɐɹɔs ʞɹɐɯ @SkillfulHacking]

@hakluke As a triager I always added dupes to the original report so they can see the details.

[Yunus Emre Öztaş @ynsmroztas]

UPDATE !!

🚧 WAFs blocking your payloads? Not anymore.

🚀 NextRce v2.2 is out! Now featuring a specialized UTF-16LE Encoding Engine to bypass WAF signatures while exploiting CVE-2025-55182.

👻 The "Ghost Mode" encodes malicious JSON payloads to evade filters, but the Next.js server decodes and executes them perfectly.

github ; https://t.co/6OXSyNH1dl

#DevTools #python #bugbountytip #bugbountytips #InfoSec #recon #nextjs #React2Shell

[ouɐɹɔs ʞɹɐɯ @SkillfulHacking]

@UK_Daniel_Card @shodanhq Shodan searches for furrycatgirl are through the roof after this post. 🤣

[ouɐɹɔs ʞɹɐɯ @SkillfulHacking]

@octal Maybe make it more generic like public WiFi test then big hotel isn't being targeted exclusively. Plus could help folks find the local public hotspot nearest to them. 😎

[HD Moore @hdmoore]

Thank you to everyone who made it out for my DEF CON 33 presentation, "Shaking Out Shells With SSHamble", you can find the materials online at https://t.co/9H1kdVEMHA

This deck includes some lightly-censored zero-day (more decks @ https://t.co/na7CwZlNlI)

[sysxplore @sysxplore]

🤣😅

[ouɐɹɔs ʞɹɐɯ @SkillfulHacking]

Mikko Hypponen explains floppy disks to gen Z at blackhat

[ouɐɹɔs ʞɹɐɯ @SkillfulHacking]

@elonmusk

[ouɐɹɔs ʞɹɐɯ @SkillfulHacking]

The smoke is rising at the Vatican @yunggravy is that you?

[ouɐɹɔs ʞɹɐɯ @SkillfulHacking]

The countdown to Black Hat USA 2025 has begun! Join me and the rest of the #cybersecurity community, in Las Vegas from August 2-7.
Register Today: https://t.co/fDopMxKnUv
#BHUSA

[ouɐɹɔs ʞɹɐɯ @SkillfulHacking]

@RealRossU

[ouɐɹɔs ʞɹɐɯ @SkillfulHacking]

.@ezpassgroup phishing site domain: https://t.co/4M1w1ejAe9 p;osing as ezpass group collecting fake fees. https://t.co/TtfHbQIJmZ has been reported to @Cloudflare and @alibaba_cloud registrar.

[Ross Ulbricht @RealRossU]

I am not involved or associated with any memecoin bearing my name. There is no official Ross coin.

[Free_Ross @Free_Ross]

Ross was just granted a FULL AND UNCONDITIONAL PARDON by @realDonaldTrump. Words cannot express how grateful we are.

President Trump is a man of his word and he just saved Ross's life. ROSS IS A FREE MAN!!!!!

[Florian Roth ⚡️ @cyb3rops]

I think the strong tendency toward imposter syndrome in cyber security stems from how many of us learned: through trial and error, self-study, and curiosity. Unlike structured learning from professors, we often taught ourselves with books, tools and weekends of experimentation.

This way of learning can sometimes feel like we’re missing something - like we didn’t do it the “right” way. But in IT (and especially in cybersecurity), this is completely normal. It’s how most of us grow, and it’s what makes this field so unique. Don’t doubt it. Embrace it.

[Rob Fuller @mubix]

Thank you #shmoocon.

[ShmooCon @shmoocon]

Thanks for joining us at ShmooCon 2025. Lead with kindness and continue achieving great things.

[ouɐɹɔs ʞɹɐɯ @SkillfulHacking]

@shmoocon Sad to be missing the last one but the pandemic has ended masks on the conference space only is stupid IMO.