Sol Ozzan

Threat supermodel

[DefiMaran⚡ @MaranDefi]

most students have no idea they get claude opus 4.6 for free

github literally gives it away if you verify student status

steps to get free access:

1/ apply for github student developer pack

- go to: https://t.co/1U5p7qagN3

- sign in using your github account (or create one)

- click on get student benefits

- verify your student status using official university email or valid student id card

- submit application for review

2/ wait for verification

- github reviews your student status

- approval typically takes a few days

- you receive confirmation email once accepted

3/ activate github copilot

- log in to your github account

- navigate to copilot settings

- enable copilot under student benefits

- confirm access to all ai models

4/ install github copilot in vs code

- open visual studio code

- go to extensions marketplace

- search for github copilot

- click install

- sign in with your github account

5/ start using ai models

- go to copilot model settings in vs code

- choose from 15 available models or use auto mode

- select the model that fits your task

what you get for free as a student:

- access to multiple advanced ai models (worth hundreds of dollars per month)

- all completely legal and free for verified students

all available ai models for students:

- gpt 4.1, gpt 5, gpt 5 mini, gpt 5.2 codex, gpt 4o, o3, o4 mini, claude opus 4.6, claude sonnet 4.5, claude haiku 4.5, gemini 2.5 pro, gemini 3.1 pro, gemini 3 flash, gemini 2.0 flash, grok code fast 1

why this matters:

- claude opus 4.6 alone normally costs money

- gpt 5 and gemini 2.5 pro are premium models

- github gives students access to 15 different ai models for free

- this is worth hundreds of dollars per month

- most people do not know students get this

[Delicious Tacos @Delicious_Tacos]

You’re not crazy. Your mother’s working with the CIA. What you’re planning is brave- and so is DRAFT KINGS, official sportsbook partner of the NFL

[tphoto @tphoto2005]

Station in Buenos Aires, Argentina on 2 June 1977
Photo by Masahide Tomikoshi / TOMIKOSHI PHOTOGRAPHY

[maus @maus____maus]

While everyone else showed love, @santisiri the guy who inserted himself as the crypto voice in Argentina’s media without any builder credentials is showing his true colors. Sad but not surprising

[forloop @forloopcodes]

i still can't believe this is your virtual girlfriend

[bumblebike @bumblebike]

@SwiftOnSecurity This is from a 1979 presentation. We are v slow learners, it seems.

[Ruxandra Teslo 🧬 @RuxandraTeslo]

It's ethical to cure your own cancer. It's ethical to cure your own cancer. It's ethical to cure your own cancer.

There's no debate to be had.

[vxdb @vxdb]

People (kids) are now creating malicious npm packages that target Roblox users and steal their account credentials.

I think the fact that 8 year olds are downloading npm packages is more impressive than the malware itself.

Stay safe young ones.

image from @TheHackersNews

[Math Cafe @Riazi_Cafe_en]

Harvard's "Introduction to Cryptography" by Boaz Barak.

PDF: https://t.co/3DUpi28aLW
Book's website: https://t.co/dnYUlVza5S

[chebuya @_chebuya]

SASTsweep is now open source. Happy hunting!

https://t.co/nIGYDImQJv

[sha1lan @sha1lan]

Code auditing is not the same as vulnerability research

https://t.co/kh4R5N01Ah

[Dr. Parik Patel, BA, CFA, ACCA Esq. @ParikPatelCFA]

nobody will remember:

- your salary
- how “busy you were”
- how many hours you worked

people will remember:

- how hot your wife is

[Denis Laskov 🇮🇱 @it4sec]

MIFARE Classic (FM11RF08S) cards have been found to be backdoored by the manufacturer, allowing all user-defined keys to be dumped with physical access.

https://t.co/74EPJQiTYj

[OpenAI @OpenAI]

Introducing the Instruction Hierarchy, our latest safety research to advance robustness for prompt injections and other ways of tricking LLMs into executing unsafe actions. More details: https://t.co/cUZaaMRdEG

[The Melancholy of Miss Distance @softminus]

software engineers will notice half a second of latency in something that should be ~instant and will move heaven and earth to fix it, or at least to understand why; and this seems to have blown an operation that had started to install a backdoor on every Debian/Ubuntu SSH server

[Naomi Brockwell priv/acc @naomibrockwell]

This is insane.

Looks like Facebook did a man-in-the-middle attack using their VPN service to steal data from other apps. This enabled them to see all SSL traffic, by creating a fake digital certificate to impersonate Snapchat, YouTube, Amazon etc.

Seriously?

[Sol Ozzan @encodedwitch]

@gfp_kh それについてもう少し詳しくはこちらで読むことができます https://t.co/uGoQ8ThS14

[yan @bcrypt]

fyi homebrew had the backdoored version of xz utils; updating now will downgrade it https://t.co/w6HcITneQV