Kyle 'esSOBi' Stone

Hyperlexic Polymath Savant
GenTech / AI Consultant
CTO @ T&S
Language Model Expert.
#TrillionaireTokenClub
#RunLocal

[Kyle 'esSOBi' Stone @essobi]

Autonomous Agentic Offensive Agent in Kali.

#buildinpubic

[vx-underground @vxunderground]

Microsoft introduces Microsoft Scout, also known as Autopilot.

Scout is always on and has file system and application access "based on your corporate policy".

Best news for Threat Actors in a long time

https://t.co/M3pyfcbTBm

[Abhishek B R @abhitwt]

Every company’s AI workflow rn be like 😭💀

[Ched "cheddar" Wiggins @cheddar420yolo]

The incessant drive by Microsoft--with schemes like default Opt-In Microsoft Recall--to achieve ubiquitous observability of knowledge workers doing their work becomes clearer when the leaks from another company are observed.

When they tell you what they want to achieve, LISTEN.

[International Cyber Digest @IntCyberDigest]

‼️🚨 BREAKING: Another researcher skipped coordinated disclosure entirely and dropped a critical 1-click GitHub token theft in public because he doesn't want to deal with MSRC. In his own words: "I really don't want to deal with MSRC on VSCode bugs."

The bug: just clicking a link can hand an attacker a GitHub token that reads AND writes to all your repos, including private ones. It lives in github[.]dev, GitHub's browser-based VSCode editor, which passes the browser an OAuth token that isn't scoped to a single repo. That token can touch everything you can.

Researcher Ammar Askar found that VSCode's sandboxed "webviews" leak keyboard events to the main editor. A malicious repo opened via one link can simulate keystrokes, install a local extension that skips VSCode's publisher-trust check, and exfiltrate your token. He published a working proof-of-concept.

He says when he reports github[.]dev bugs, GitHub tells him they're out of scope and to go report to MSRC, and a prior VSCode bug he reported was silently fixed with no credit. One commenter summed up the mood: "MSRC has turned into Feedback Hub."

[Mandy Lu @mandylu]

we still have no satisfying theory for why AI works

[Kyle 'esSOBi' Stone @essobi]

Oh shit they’re playing my jammmmmmmm

[Natural Language Processing Papers @HEI]

Structured Prompt Optimization Meets Reinforcement Learning for Global and Local Interpretability over Complex Text

Tianyang Zhou, Wenbo Chen, Pierre Jinghong Liang, Leman Akoglu
https://t.co/oMCrmxeHa0 [𝚌𝚜.𝙲𝙻 𝚌𝚜.𝙰𝙸 𝚌𝚜.𝙻𝙶]

[Peter Dedene @dedene]

POV: you're still using GitHub Copilot after June 1st, 2026

[dax @thdxr]

someone made a fork of opencode that routes through the unsecured ai endpoints from chipotle

[Kyle 'esSOBi' Stone @essobi]

@loftwah I have a pretty good idea. I started blackboxing LLM interfaces on DaVinci….. was a big OpenAI function caller beta developer, the one they didn’t release. Jumped off when the first wave of cease and desists came out.

[Kyle 'esSOBi' Stone @essobi]

WALL OF TOKENS GOES BRRRRRRRRRRR.

[PBS News @NewsHour]

The state of Florida filed a lawsuit against OpenAI and CEO Sam Altman on Monday, claiming the company knowingly released and aggressively marketed ChatGPT to the public while concealing serious risks. https://t.co/bAhcHJLM1L

[Lisa Forte @LisaForteUK]

Perfect for Instagram influencers

[Kyle 'esSOBi' Stone @essobi]

They’re bootlegging everything…

[roon @tszzl]

the frontier labs don’t have “comms problems”. reality right now has a comms problem. what is happening is a little scary and there’s no nice words anyone could say, especially not those profiting from it, that’ll make it feel that much better

[terminally onλine εngineer @tekbog]

mythos find all the laws that google, meta and openai break so we can fine them, make no mistakes

[Kyle 'esSOBi' Stone @essobi]

@loftwah Model vs System? Gpt-4 was a system.

[Kyle 'esSOBi' Stone @essobi]

Dream so big you make yourself uncomfortable.

[Logan Kilpatrick @OfficialLoganK]

you are a product of your actions, not your aspirations

[Kyle 'esSOBi' Stone @essobi]

@cyb3rops @zarchasmpgmr Best part is they can use one to solve the other but 😂😂😂

[Florian Roth ⚡️ @cyb3rops]

When people see Microsoft spending billions on AI while researchers keep sharing stories about rejected reports, bounty disputes and bugs that somehow don’t qualify, this is the kind of meme you get

[Kyle 'esSOBi' Stone @essobi]

Single card output. Shoving at home.