we ACTUALLY got the oppressor mk2 before GTA 6.
Polish engineer Tomasz Patan built the Volonaut Airbike.
it hits 124 mph, runs on jet propulsion, has no propellers, and weighs less than your dog.
pretty fucking sick.
Critical vulnerabilities doesn't have to be complex or have a CVE - @deepseek_ai publicly exposed their internal ClickHouse database to the world, without any authentication at all, and leaked sensitive data.
No one is safe from security mistakes, follow along to learn more 🧵
Generalizing the process:
1. Discovering Subdomains
2. Probing for externally exposed services
3. Identifying anomalies and potential internal development services
4. Exploitation Validation (in a safe, none destructive manner)
5. Responsible Disclosure
This is what happened here - and is applicable for every company around the world, doesn't matter if its a new AI startup or a 50 years old bank, everyone are making the same mistakes!