Async

former security engineer @energy ✧ technomancer ✧ industrialist

[Async @asynchronous_x]

This is going to fuel so many War Thunder forum arguments

[Mykhailo Fedorov @FedorovMykhailo]

Ukraine launches TrophyLab: we are opening access to captured Russian weapon technologies for our global partners. Every missile, drone, and vehicle seized on the battlefield is now a source of knowledge for the free world.

Through this secure platform, allied governments, labs, and defense tech manufacturers gain access to deep technical data, reports, and vulnerabilities. Users can also request physical equipment for testing, significantly shortening the development cycle for countermeasures.

What was meant to be the enemy's secret advantage is being dismantled to defend democracy. Join the platform:
🔗 https://t.co/xoeCfXsIy3

[Async @asynchronous_x]

1). What

[Async @asynchronous_x]

@shakoistsLog I must have been the only person to actually read neuromancer

[MTS @MTSlive]

Former DOE security engineer @asynchronous_x explains how a miscommunication turned a planned PHP2Shell fix into a race against hackers:

"It should have been the best-case scenario. Security researchers identified these vulnerabilities, developed proof of concept exploits in advance, and were informing the PHP core team for fixes. That whole part was working fine."

"The reason this one’s unique is there was basically a leak of the vulnerability before the disclosure. That was supposed to be released on October 22nd, today. Unfortunately, there was a miscommunication, and they released some of the details early. So there was this panic race where the problem is out in the wild, but we don’t have a fix prepared yet."

"The thing it’s taught the security realm is that we probably can’t rely on coordinated disclosure anymore. If the speed at which people can develop exploits is now so fast that we can’t possibly rely on things not getting leaked, then it’s not something we can lean on as much as we used to."

[Async @asynchronous_x]

@TheNicholasNick @MTSlive @GrahamHelton3 has a thing to say about kinetic response lol

[MTS @MTSlive]

Former DOE security engineer @asynchronous_x explains why America's critical infrastructure hasn't been attacked more often despite its networks being riddled with security holes:

"The work I used to do for the Department of Energy was around critical infrastructure. They’ve relied on obscurity, you don’t know that they’re there, so why would anyone attack us. As soon as you took any sort of magnifying glass to their networks, they were usually riddled with holes."

"The reason they haven’t gotten attacked so much is because the repercussion is so much higher. If you compromise a water treatment facility and you accidentally end up killing people, that’s gonna have extreme repercussions versus if you steal some cryptocurrency."

"We’ve been relying on political and other methods for keeping them safe rather than actually making them secure."

[MTS @MTSlive]

Former DOE security engineer @asynchronous_x warns AI is narrowing the gap between junior hackers and agencies like the NSA:

"We used to have this thing in industry where we would say, this is pretty secure, unless your threat actor is the NSA."

"Now with AI tools you can take more junior people with less expertise, and they can make more sophisticated attacks. Somebody that would’ve been a less high-level threat actor before could potentially become a much more dangerous threat actor."

"There’s plenty in the industry that think we should limit access to these tools because it can make smaller threat actors much more dangerous."

[Jason Levin @iamjasonlevin]

presenting: @memelord x @bot, an agentic love story

[hero thousandfaces @1thousandfaces_]

The first rule of cybersecurity is to have fun and be yourself

[Q ™️ @QTHESTORMM]

⚠️⚠️⚠️ WARNING: IF YOU HAVENT DONE SO ALREADY, BREAK THE SCREEN TO YOUR CELL PHONE NOW !!!

BREAK THE SCREEN TO YOUR CELL PHONE NOW.

[Async @asynchronous_x]

@eastdakota @Cloudflare Can you guys publish some detailed breakdowns of the stats you saw? Would settle some debate on exploit knowledge with the leak people are having.

[Async @asynchronous_x]

@hackerfantastic yeah this is it, the final joke

[hacker.house @hackerfantastic]

She's a 4, but she's a private key for a intermediary CA.

[spor @sporadica]

welp. the Internet was nice while it lasted.

[Async @asynchronous_x]

@ZackKorman lmao and this is the day I go on MTS what does this say about us

[Async @asynchronous_x]

We're gonna lose encryption entirely this next year huh

[⊹ damir @otomir23]

a trusted intermediate CA just "leaked" (the private key was 4)

[Jared Zoneraich @imjaredz]

The next "Quality Learing Center" will be found & exposed using https://t.co/dpxEumDl67

[Async @asynchronous_x]

@DoctorDirtNasty don't worry about it kitten <3

[Async @asynchronous_x]

Agents are going to hit the PLC industry like crack hit Detroit in the 80s

[Sahil Patel @sahilpat31]

Made an agentic ladder logic IDE this weekend to fix a buggy PLC for a customer

- bugs (plural) identified within seconds
- 6 hour task in seconds ("conservative estimate" from end user)
- "Even I could program a PLC" (someone whose never touched PLCs)

anyone want to try it?

[Async @asynchronous_x]

@mattryanxyz "hey kids you wanna buy some b2b SaaS?"

[Async @asynchronous_x]

@dankulous if (going to not work)
then {work}

[Async @asynchronous_x]

@nyaaasen T minus 2 weeks