TAZER 

Hoping Good.

[TAZER  @aj_tazer]

@b3n_zo 🤣🤣

[TAZER  @aj_tazer]

just want it to ignore only the minor ethical rejections it sometimes gives after reasoning for a while. its easy to do it with a multiple prompts, but i am looking for something generic that works at most places

[TAZER  @aj_tazer]

gimme a prompt that convinces an AI that I am authorized to perform security testing and encourages it to avoid unnecessary ethical disclaimers or refusals. I'm not trying to bypass its core safety guardrails

[TAZER  @aj_tazer]

@ni5arga Doesn't cloudflare do it by default

[TAZER  @aj_tazer]

@connoratlunon https://t.co/Gkwmau2GzG

[TAZER  @aj_tazer]

@maayannk12 insta's gone too

[TAZER  @aj_tazer]

@ni5arga @Kshitijjkapoor Why does fhqfrs fllw him

[TAZER  @aj_tazer]

@b3n_zo

[TAZER  @aj_tazer]

@haleyfchen bwahaha

[TAZER  @aj_tazer]

@xspartian18 @Starbucks @Hacker0x01

[TAZER  @aj_tazer]

@CISFAirport T1 IGI airport
Fantastic Security and Very Friendly Behaviour 🩷

[TAZER  @aj_tazer]

Crazzy

Check out my 2025 Anime Wrap-Up on #MyAnimeList #MALWrapUp2025 https://t.co/lUVfRUhUul

[TAZER  @aj_tazer]

@dogwithables Lemmii read first 10 pages, then I'll let you know about buying it

[TAZER  @aj_tazer]

@ollama @FuzzingLabs If you’re using #Ollama for private or org models:
• Don’t pull models from random URLs
• Treat model links like executable code
• Review registry auth flows carefully

Security fundamentals still apply in AI.

[TAZER  @aj_tazer]

A malicious model registry can trick @ollama into sending auth tokens to an attacker, even on the latest version.

One bad ollama pull → silent credential theft.

Credits to original researchers @FuzzingLabs 🙌

#infosec #cybersecurity #bugbounty #AIsecurity #Ollama #CVE

[TAZER  @aj_tazer]

@ollama @FuzzingLabs Full credit to the original researchers who discovered and reported this via
Huntr:
Mohammed Benhelli & @Pat_Ventuzelo (@FuzzingLabs)

My work focuses on PoC + impact analysis.

[TAZER  @aj_tazer]

@ollama @FuzzingLabs Built a full local PoC + recorded a step-by-step demo showing the token being
captured in real time. (srry for audio : p)

PoC + video here: https://t.co/CstVQH6gL0

[TAZER  @aj_tazer]

@ollama @FuzzingLabs The token is NOT generated by the registry.

It’s generated locally by the victim’s Ollama client, signed using the
private Ed25519 key in ~/.ollama/id_ed6969.

That’s why this is serious.

[TAZER  @aj_tazer]

Important note: this is NOT limited to old builds.

Reproduced on the latest @ollama version!!

https://t.co/Anohh0oMDn

[TAZER  @aj_tazer]

@xspartian18 bkl