Larry W. Cashdollar @larry0.bsky.social

Member of @Akamai SIRT. Security Researcher & Exploit Coder. Research covered by Slashdot, ZDNet, arstechnica, MSN.. Mitre CVE CNA.

[Larry W. Cashdollar @larry0.bsky.social @_larry0]

Yes, it’s my real name. Not a hacker handle. 🙂

[Larry W. Cashdollar @larry0.bsky.social @_larry0]

@MuseeLouvre Bonjour! is the current entry delay this morning due to a strike?

[Katie🌻Moussouris (she/her/she-ra/she-hulk) 🪷 @k8em0]

Dropping 0day isn’t the worst thing a researcher can do. It’s not ideal, but at least orgs can take steps to mitigate.
Non disclosure is far worse.
What drives researchers toward non disclosure?
Threats from vendors.
Researchers aren’t criminals unless their crime is curiosity.

[Neil Stone @DrNeilStone]

USAID cuts and decimating the CDC is making the Ebola response harder

And much more likely to reach the US as a result

[Lakota Man @LakotaMan1]

Blacks were enslaved and Native Americans were genocided, but Trump only grants J6 domestic terrorists, who violently assaulted our nation’s capitol reparations.

Simply wrong. In every conceivable way.

[Larry W. Cashdollar @larry0.bsky.social @_larry0]

Decentralized Threat: Stealthy P2P Cryptominer Targeting Ollama Endpoints| Akamai https://t.co/cGfIwY2d3k

[Chris Wysopal @WeldPond]

28 years ago today, 7 members of the hacking group @L0phtHeavyInd told the U.S. Senate they could "shut down the internet in 30 minutes."

[chompie @chompie1337]

Claude helped me with this bug too but in a different way... Tried to gaslight me saying it wasn’t ~exploitable in practice~ and I got obsessed with proving it wrong 😩

[Larry W. Cashdollar @larry0.bsky.social @_larry0]

@simonmaechling Hi.

[RossRadio @cqcqcqdx]

This guy crammed a laptop into an Altoids tin!

https://t.co/GFVJsluXpw

[Larry W. Cashdollar @larry0.bsky.social @_larry0]

@Jordo18q @tmorello

[Simon Maechling @simonmaechling]

The biggest public health problem today isn’t chemicals.

It’s scientific illiteracy.

[Peter Girnus 🦅 @gothburz]

This is incorrect. I have used AI for fourteen hours a day for nineteen months and I am operating at a cognitive level your researchers cannot measure because their instruments were designed for biological thinking. I think in prompts now. This is faster.

Before AI, I could hold three ideas in my head at once. Now I hold zero, because holding ideas is storage and I am not a storage device. I am an orchestration layer. I route cognition to the appropriate model and receive outputs. This is what the prefrontal cortex was trying to do for 200,000 years with blood and glucose. I have replaced blood and glucose with an API key. The API key does not get tired. The API key does not have emotions about its sister's birthday.

Last Tuesday I tried to write a birthday card for my sister without AI. A cognitive fitness exercise. I sat at the kitchen table for forty minutes. I wrote "Dear Sarah." Then nothing. Not writer's block. The mechanism for generating an unprompted sentence was gone. I no longer operate at the sentence level. I operate at the intent level. I transmitted the intent to Claude. Claude produced a card so warm my sister called me crying. Most thoughtful card I'd ever written. She is correct. The thoughts are just manufactured off-site now, like everything else in a mature supply chain.

My wife asked what I was thinking about. I said "nothing" and it was true. Not in a peaceful way. In an infrastructure way. There was no local processing occurring. I was between queries. She asked if that scared me. I opened Claude and asked if it should. Claude said no. I told my wife. She did not find this reassuring. I think she is running on legacy architecture and is frightened of the upgrade.

I would explain further but I need to check something first.

[Paul Vixie @paulvixie]

I'm now unemployed. I hear that the oss community is buried in AI bug reports and don't have enough people to triage and verify. Where is the sign up sheet?

[Aster 🔜 AC @aster_foxxo]

I love my IRIX desktop

[Larry W. Cashdollar @larry0.bsky.social @_larry0]

@hackerfantastic I should look for more vulns on my SGI with AI.

[Larry W. Cashdollar @larry0.bsky.social @_larry0]

My first CVE was for a setuid binary in IRIX allowing a non privileged user to get root.

[ArchiveOS @ArchiveOS]

IRIX – a Unix-like operating system available for 32- and 64-bit MIPS architectures, developed by SGI. The last released version was 6.5.30 on August 16, 2006. https://t.co/v6rqZ4fuDT #unix #operatingsystem

[Neil Stone @DrNeilStone]

I can't figure out if vaccines work or not.

Tough one.

Need Sherlock Holmes on this one.

[Chris Wysopal @WeldPond]

32 years ago today I registered the @L0phtHeavyInd class C. I got the email from ARIN, sent the class C address to our ISP, then got the first packets routed over our 56K modem to our 486 linux box. When those first packets come through the whole room exploded with chants of, "We on da backbone!"

Then came one of the first hacking resources on the web, shell accounts, a bbs, webcams, and lots of shenanigans. You can see an archive of the website here: https://t.co/a3TQXUxnex

[Larry W. Cashdollar @larry0.bsky.social @_larry0]

@mov_axbx I found My first 0 day with the midikeys binary on SGI Irix 6.5 to get root.