Ignis

Ata Hakcil
Mad Scientist | ML/AI researcher | Vulnerability Researcher
|| 🐒 ||

[Ignis @ahakcil]

As promised, here it is - All the useful data i collected from 1.000.000.000 leaked credentials on the internet.

And yes, it includes a wordlist of most common ones too, and it has a %80 mismatch rate with rockyou.txt.

https://t.co/AoXNSydFS1

#infosec #bugbounty

[Ignis @ahakcil]

After a first look through the contents looks like it's likely a false alarm and they just rolled nat 1 on every decision about the release instead

[Ignis @ahakcil]

Krea AI compromised, using watering-hole .zip for filename in a watering hole attack is crazy levels of uninspired💀

[Krea @krea_ai]

magnet:?xt=urn:btih:2a644d0279182a022d08dd395ea593cfcc218e12&dn=https://t.co/qJoz3m67n0

[Ignis @ahakcil]

@Dani__oros @senb0n22a @One1S33175 @krea_ai Looks clean. No deserialization fuckery to sidestep safetensors and no CVE-2026-4372 even though its transformers==4.57.1

Haven't scrutinized every dependency in uv.lock but I probably won't. We are comfortably in the Hanlon's Razor area about the release.

[Ignis @ahakcil]

@Dani__oros @senb0n22a @One1S33175 @krea_ai Sorry, missing https://t.co/kK6VguhRnx as well

[Ignis @ahakcil]

@Dani__oros @senb0n22a @One1S33175 @krea_ai Can you send me the https://t.co/3hBi6mmRFU to audit? It's the only file I'm missing outside of the tensors right now

[Ignis @ahakcil]

@senb0n22a @One1S33175 @krea_ai Not to mention other hints of incompetence in the launch that make people question if a serious company would do this such as:
* Releasing both models as zip so you can't selectively download/audit files
* Naming it watering hole
* everything else explained above

[Ignis @ahakcil]

@senb0n22a @One1S33175 @krea_ai And worse yet, no comms through their website.
When people are concerned your social accounts might be compromised, the solution IS NOT more social accounts backing it up. It's a post on your website, or having people you know in the industry outside your org back you up.

[Ignis @ahakcil]

@One1S33175 @krea_ai Would be a terrible move because it teaches the community that this is a ok to do and setting up a precedent for future ML SC attacks because they are telling people this is something they might do. If they get compromised in the future less ppl will question it's legitimacy.

[Ignis @ahakcil]

@krea_ai Too many red flags for my taste. Nothing on Krea website/blog, shared as a zip file so files can't be selectively downloaded, a lot of people claiming to be working in Krea posting sha checksum of the file as "proof" that it is safe. Will be investigating the file contents.

[Nicolas Krassas @Dinosn]

Gaslighting LLM's with special token injection for a bit of mischief or to make them ignore malicious code in code reviews https://t.co/eNFcr0DUmH

[Ignis @ahakcil]

@ODTUKuzeyKibris ODTÜ KKK bilgisayar mühendisliği mezunu ve şuan yine burada yüksek lisans yapan, siber güvenlik alanında da kendisini sektörde göstermiş birisi olarak tercih etmeyi düşünen arkadaşlar görüşlerim için bana DM atabilir

[Ignis @ahakcil]

@UK_Daniel_Card @GCHQ Hahah, "Look mom, I'm on TV" moment for me, one of those is probably mine

[Ignis @ahakcil]

@bmmaloney97 @vxunderground Like what else, any examples?

[Ignis @ahakcil]

@bmmaloney97 @vxunderground That depends, do the sqlite files have same permissions as the corresponding image file, or are they accessible to every user?

If it is the same permission as the image file I don't see the need to have the ocr data encrypted

[Ignis @ahakcil]

@bmmaloney97 @vxunderground Also, have you checked if the sqlite file is removed if you delete the image file? If it is retained after the image is deleted (maybe even until next time device is online and directory is synced) it could be cause for concern

[Ignis @ahakcil]

@bmmaloney97 @vxunderground Idk, I don't use windows but makes sense in a sync scenario where you want to keep a directory synced across devices, or you don't want to lose files if something happens to the device.

About it being easier, I guess so but I still don't think this is a security/privacy concern