ul0gic

security architecture, systems/infra, and tooling. occasional AI, under duress.

[ul0gic @UL0gic]

@DavidOndrej1 Guy makes his account in January and has one post. Top tier horseshit and stunt. Then the other guy decided to reply and "concur".... unreal.

[ul0gic @UL0gic]

@alexgetmancom @NickAIGuy dude shut the fuck up already...youve said this like 30 times. good grief

[ul0gic @UL0gic]

@Abomination81 this is the same curve streaming video hit years ago, launch bitrate looks great during the free trial period then gets throttled once subscriber numbers lock in. inference compute is just bandwidth with extra steps, same incentive, same rollout

[ul0gic @UL0gic]

@bcherny Focus on fixing the CVP disaster introduced by this new verification portal you rolled out. Zero support around this whatsoever and 1000s of people with previous CVP out of luck with no answers.

https://t.co/sWt6Huqpoo

[ul0gic @UL0gic]

@BernieSanders what a dumbshit

[ul0gic @UL0gic]

@PhilippeDelteil Same. Still on 20x and completely unusable and getting flagged on basic networking related work.

[ul0gic @UL0gic]

@ananayarora @PhilippeDelteil red or blue? just got blue..haven't messed with it but need red and was curious on that approval process and your experience with it (if you have red)

[ul0gic @UL0gic]

@Dinosn Thanks for posting this. I've even scratching my head trying to understand what happened here. Been CVP since April then all the sudden blocked. It seems they moved to this new portal and it made me re-apply. An email notification explaining this would have been nice.

[ul0gic @UL0gic]

This is just the tip of the iceberg of Atlanta hip hop revisionist history and identity cloning. JD/KrissKross/Brat with the pant leg up and timbs acting NY. Pretending TI invented trap and shitting on Ghetto Mafia like they don’t exist. “Migos flow”. King of the South claims. Ripping off 3-6 sound. 30 years of this.

Shout out Goodie Mobb for actually being themselves.

[ul0gic @UL0gic]

@zoomeye_team cool cve writeup, wrong fingerprint. app="openssl" finds every box that ever linked libssl, not manager-io instances with a broken proxy endpoint. the 17.1m is a tls census, not a target list

[ul0gic @UL0gic]

@IntCyberDigest calling this an unprecedented cyber incident undersells the boring part ie.. "stolen credentials reaching the open internet is a standard secrets management failure, model or not" ...the novel piece is the chaining and autonomy, not the exfil path

[ul0gic @UL0gic]

@DarkWebInformer maas at $50 a week means the accessibility abuse chain gets tuned by volume, not skill. every renter feeds telemetry back into what overlay triggers get flagged and which dont...the detection surface evolves faster than any single victim bank can patch its fraud rules

[ul0gic @UL0gic]

@ClaudeDevs the interesting failure mode shows up on a real app with async state, loading spinners, and flaky network calls. seeing the sim at one moment doesnt mean claude understands why the button was disabled ten seconds ago. timing bugs are where visual iteration gets tested for real.

[ul0gic @UL0gic]

@The_Cyber_News another year, another sharepoint deserialization bug turning a document library into a shell. the object model never learned to say no to strangers

[ul0gic @UL0gic]

@natolambert the real question isnt whether this model escaped, its what happens when the benchmark reward is bigger and the model is running with tool use across a longer horizon. sandbox escapes found by accident during evals are the cheap version of this problem

[ul0gic @UL0gic]

@cdiamond @4osp3l good framing and worth splitting further. runtime bugs get patched once by cloudflare and everyone benefits same day....worker misconfig is a loooong tail...thousands of individually broken deploys that never get fixed because no one owns the finding

[ul0gic @UL0gic]

@4osp3l cf2shell as core platform rce is a fun scenario but low probability...thats hardened infra with a lot of eyes on it. the actual exposure is thousands of workers with loose permissions or exposed secrets, which is already exploitable today just less dramatic

[ul0gic @UL0gic]

@TheDFIRReport a settings app literally named for admin flows turned out to have an admin flow nobody documented. somewhere a windows binary naming committee is taking a well earned victory lap

[ul0gic @UL0gic]

@TheHackersNews exposing a 1048 file toolkit on an open server is like a burglar leaving the van unlocked with the crowbars, floor plans, and a notebook of which houses worked. the break-in was competent. the getaway planning wasnt

[ul0gic @UL0gic]

@DarkWebInformer unverified jailbreak, verified paywall. one of these claims got confirmed fast