hexamine

ctfs with @ARESxCTF, @ProjectSEKAIctf, @malta_ctf. sec @v12sec @zellic_io

[hexamine @hexamine22]

a bit late, but I finished 11th this year in flareon :p #flareon12

[Rick de Jager @rdjgr]

Greetz to everyone clanking telegram pocs right now 👋

At least the "forwarding widgets to group chats" feature is still restricted to the test server: https://t.co/68JAK3o8GL

[hexamine @hexamine22]

@Nyaaaaa_ovo 🛐

[hexamine @hexamine22]

>Telegram releases a widget "sandbox" for untrusted js
>ask durov if there is actual process isolation
>he doesn't understand
>explain that a sandbox should be its own process
>he laughs and says "it's a good sandbox sir"
>write javascript exploit
>zero isolation

[V12 @v12sec]

Any telegram message can now become RCE

6630b003766baed1fa86cea880d22e41dc416f63d800de3246941ede2396ad48

[lambda @pwnlambda]

@rez0__ Very spicy take but Quality > quantity when it comes to bug reports and spamming bounty programs with incomplete findings makes finding actually critical issues slower for the vendors

[Faith 🇧🇩🇦🇺 @farazsth98]

Don't worry @orange_8361, there are still people reading blog posts and articles from start to finish 😄 that was a beautiful exploit chain!

https://t.co/yLJSpf2lYF

[MRKHF @mirkhoff]

SAS will stay with me for a long time

For too many reasons, this was my favorite conference by far

@TheSAScon, thank you for having me, I hope to see everyone again in future!

[aaron @arinerron]

saw this goated license plate today

[James @jwm_fishinggod]

I think it is important for people to acknowledge that posting complete slop like this is doing more harm than good for AI narrative. Yes, AI is very useful, but this is embarrassing for @HexRaysSA

https://t.co/jpQOcakoCl

[hexamine @hexamine22]

@marspiterr @osec_io

[OtterSec @osec_io]

In 2026, no program is closed source.

We decompiled a propAMM into Rust that recompiles to the exact on-chain binary, then used it to find a critical bug that put $6.1M at risk.

[ripatel ✠ @fd_ripatel]

I love you @intel.

16x Intel Gaudi2 HL-225 bedroom setup. Totaling 1.5TB HBM2e with 38.4TB/s memory bandwidth. Perfect for GLM and Qwen. 38.4Tbps bisection bandwidth on UBB, 2.4Tbps QSFP-DD scaleout.

Total cost less than 2x RTX PRO 6000.

[hexamine @hexamine22]

@FazeCT1512 🐐stronk

[zoverin @z0v3r1n]

👀

[MRKHF @mirkhoff]

took me some time to finish this post:

"Breaking SSA Phi destruction in SYSyVM", could this be a #0day?! ඞ

https://t.co/EW3NrXkhfu

[hexamine @hexamine22]

@0x4r35 @ni5arga real recognize real

[hexamine @hexamine22]

@ni5arga @heyyitsMeenal > playing ctfs since 2015
> shows the ranking from 2026 to prove his point, completely dismissing the ranking from the previous years.

sure...

[hexamine @hexamine22]

@ni5arga @heyyitsMeenal Its' the slop era now, just look at the international ctftime top 10. you won’t find any of the good teams from previous years on it. that aside, it’s pretty obvious from your blog post that you have never seriously competed in ctfs, so who am I kidding? lol

[hexamine @hexamine22]

@ni5arga @heyyitsMeenal Calling infosecIITR a shitty team is insane, why are you even looking at the 2026 rankings? They were consistently top 2 behind bi0s for the past several years