beist

Retired security engineer but still hacking when free+beer

[Tarjei Mandt @kernelpool]

Will be at #POC2026 next week! Hit me up at the @catalystsec booth and come chat about AI, bug hunting, and anything in between. Also we are hiring :)

[beist @beist]

@OwariDa @Kimi_Moonshot How is your actual experience with it compared to GLM-5.2?

[Alex Rad @defendtheworld]

It's BlackHat/DEF CON week so I'd like to interrupt your regularly scheduled chest drumming feed! Let's talk about a critical WiFi 7 memory corruption bug. The flaw was in Hostapd, the userland daemon which powers the world's WiFi on the majority of access points. I reported this in June and it's now patched upstream.

My proof of concept shows that authenticated clients can bypass ASLR to leak pointers OTA and inject code execution. 802.1X Enterprise WiFi 7 is basically exploitable pre-auth because of the "outer tunnel".

This bug was missed by LLM scans as well as human auditors, but found in the wifi gauntlet.

If you're at BH/DC this week and interested in the memory safe wifi stack we're building please reach out

[beist @beist]

CODE BLUE, one of my favorite security conferences, is accepting talk proposals until July 31. If you have some interesting research or a fun topic to share, please submit it!

And if you need another reason to come, Tokyo has plenty to offer: anime culture, great food with awesome beer, and an excellent environment for digital nomads.

https://t.co/o47Juj1da1

[beist @beist]

@OwariDa @HackingForSoju Yeah! I really miss those days too.

[beist @beist]

@tylerni7 Even as an individual researcher, I’m finding so many bugs using AI with just my part-time efforts. I don't know whether to be happy or worried—it’s actually making me skeptical. AI will only accelerate, and automated bug-hunting platforms are going to be insane.

[Supernetworks, Inc @spr_networks]

SPR was designed specifically to eliminate these attacks. Almost all other WiFi deployments carry inherent disconnects between L2/L3 that enable MITM attacks and packet injection, whether EAP-TLS or WPA3.

[beist @beist]

RIP @steaIth

[Tarjei Mandt @kernelpool]

Reminder we are looking for talented security researchers in all areas (iOS, Android, Browser, 0click, AI) 🚀🚀 DM me or shoot us an email at https://t.co/NbnkFxHceg 🦊

[beist @beist]

@alfiecg_dev I came across an article about your talk - https://t.co/SIReStw1AV I wasn’t able to attend PoC this time, so I couldn’t listen to your talk. Will the slides be released soon? And is the content mostly the same as what you’ve written on your blog?

[beist @beist]

@5aelo I was hoping to see your presentation in person this time, but unfortunately I won’t be able to attend the PoC. I’ll look forward to your slides!

[beist @beist]

@seanhn I found chairs with wheels, though they don’t have armrests. There’s Solo Booth at Starbucks Circles Ginza. I haven’t visited it yet, but I’m planning to check it out soon. Seems nice!
https://t.co/eAqklKTXer

[beist @beist]

Anyone knows if there are any coworking spaces in Tokyo where the HotDesk (daily pass) seats come with chairs that have wheels and armrests? It would be even better if they also provide external monitors. At WeWork, I noticed HotDesk doesn’t have those kinds of chairs. Thank you!

[beist @beist]

I keep up with security news, and I feel the itch to dive back into full-time research—but for now, I’m just enjoying the present. Haven’t really touched computers much, but lately I’ve been hacking about a few hour a week. Using AI to hunt for crashes is still a lot of fun.

[beist @beist]

Can’t believe it’s already been 6 months since I retired. Life after retirement hasn’t been about being “productive,” but about finally using my time however I want. Starting next month I’ll be in Japan, then heading over to Europe and Bangkok, I guess.

[Ivan Krstić @radian]

🔺iPhone models announced today include Memory Integrity Enforcement, the culmination of an unprecedented design and engineering effort that we believe represents the most significant upgrade to memory safety in the history of consumer operating systems. https://t.co/ule9gaXzc1

[beist @beist]

@tylerni7 @theori_io You guys really showed outstanding performances!

[beist @beist]

These days, when I see the results of bug hunting using AI, I truly feel glad that I retired early.

Theori at aixcc: https://t.co/9wz5JwWJ8Y

Google big sleep: https://t.co/qH47j4bgsx

Xbow: https://t.co/1e2lMJBudF

[beist @beist]

@ifsecure Good news, but if there had been security engineer positions at Google Korea as well, there would have been many applicants!