Helios Mier

Cyber security engineer. #blueteam
This account is for kittens, memes, paintins and rants about my country politics.
follow me on hmier bsky & cara.

[Helios Mier @hmier]

#watercolor #art #watercolorpainting #umamusume Fuji

[Umamusume: Pretty Derby @umamusume_eng]

🎊 Here's your first look at the new 3★ character!

Introducing [Succès Étoilé] Fuji Kiseki!

For details, please check the Featured Trainees section on the top right of the Scout screen, available from Apr 5 (UTC).

#Umamusume

[Max Kaiser @MaxKaiser75]

Me hace muy feliz imaginar a lópez sintiendo terror por lo que le puede pasar a él y a su familia, y frustración por ver que su sexenio será recordado siempre como un régimen criminal

[Helios Mier @hmier]

La idea de que dentro del ejercito mexicano haya un grupo organizado de leales patriotas listos para meterle un balazo en la cabeza de los narco zurdos da un poquito de esperanza.
Solo necesitan el empujon del dep de justicia USA descabezando la estructura corrupta que AMLO creo.

[Helios Mier @hmier]

Uyy! Esto se va a poner bueno!

Que tremendo error intentar decirle a Trump y a MAGA que esta mal en sus intenciones 🤣

Ellos ven el riesgo del narco y el caballo de troya comunista de morena en su territorio.

Y el peje tratandl de darles atole? #passthepopcorn

[Andrés Manuel @lopezobrador_]

Por el bien de todos, que regrese el otro Trump.

https://t.co/BHQVEInscT

[Helios Mier @hmier]

hackerone pulling the same move as deviantart.

absolutely disgusting. this project is dead on the spot.

[International Cyber Digest @IntCyberDigest]

‼️ HackerOne disclosed it was training its AI with "12+ years of real-world vulnerability data," and now is in damage control after backlash over how it marketed its new AI product.

That line set researchers off. Bug bounty hunters accused HackerOne of using researchers' reports and prior bounty findings to train its Hai agentic AI system, framing it as theft.

HackerOne answered the next day. It admitted the messaging "created confusion" and stated that researcher submissions are not used to train, fine-tune, or improve generative AI models. The company said this applies across H1 Continuous Testing, H1 Agentic PTaaS, and Hai, and that third-party model providers are barred from retaining or using researcher data for their own training. It said it updated its website language.

This week the platform launched H1 Continuous Testing, pitched as "continuous assurance built for how attacks actually work." Its own page says the product uses specialized AI agents to find, validate, and prove exploitable risk across applications.

The gap that remains: the marketing still credits "12+ years of real-world vulnerability data," while the denial is scoped tightly to training generative models. HackerOne has not said what that data set actually is, or how it differs from the submissions hunters spent more than a decade filing.

[Fer GP @lamusitapg]

¿Compatriotas si entienden o se los explico con 🍐 y 🍎?

[Helios Mier @hmier]

si fuera el CEO de la compañia cuyo valor es superior a la de la mitad de los paises del planeta, tomaria cerveza hasta en la banqueta de la casa blanca 🤣

[stuntech @stuntech]

El director general de NVIDIA, Jensen Huang, prefirió beber cerveza en el suelo de COMPUTEX 2026 y firmar servidores de inteligencia artificial antes que encerrarse en frías salas de juntas.

[Helios Mier @hmier]

2.7 millones de peje pesos para un rig de AI

[elhacker.NET @elhackernet]

Un servidor de IA con 6 tarjetas A100 y 1,5 TB de RAM
https://t.co/PQS4rfcCDA

[Helios Mier @hmier]

booooo! only works on apple hardware.

[ollama @ollama]

.@GoogleDeepMind's Gemma 4 - 12B is available on Ollama!

Chat:
ollama run gemma4:12b-mlx

Hermes Agent:
ollama launch hermes --model gemma4:12b-mlx

Claude Code:
ollama launch claude --model gemma4:12b-mlx

and more 👇👇👇

(Note, this currently works via MLX)

[Aikido Security @AikidoSecurity]

⚠️ New "IronWorm" supply-chain attack: 30+ npm packages from @ asteroiddao shipped a malicious Rust binary firing on preinstall.

It sweeps 86 env vars + 20 credential files (AWS, GCP, Vault, npm, plus AI keys like Anthropic & OpenAI), hits Exodus wallets, hides behind an eBPF rootkit, and beacons over Tor. Self-propagates via npm Trusted Publishing OIDC, with backdated commits faked as claude/dependabot/renovate.

[Helios Mier @hmier]

and probably security started drinking and crying.

[Mark Ajzenstadt @mardehaym]

BREAKING: Engineering team ships 50,000 lines of AI-generated code in one sprint. QA team files resignation in the next.

[Helios Mier @hmier]

me faltan exactamente 4 gb de vram para correr modelos de 27b.... 🥺

[Nicolas Krassas @Dinosn]

Over 116,000 Mincraft systems infected in WeedHack malware campaign https://t.co/Etym0ymh7L

[Helios Mier @hmier]

🤨 ok.. i kinda need to know why? @ollama

[Prince Canuma @Prince_Canuma]

🚀 Gemma 4 12B is here!

We partnered with @GoogleDeepMind to bring and optimize their new dense and unifed multimodal model for Apple Silicon.

◈ 12B dense · 256K context
◈ Thinking mode (built-in reasoning)
◈ Vision: dynamic res, OCR, UI + charts
◈ Native audio: ASR + speech translation
◈ Function calling for agents
◈ Text + image + audio, interleaved

Runs local. Get started now ⚡

> uv pip install -U mlx-vlm

https://t.co/7BvnEuzKvj

[LM Studio @lmstudio]

Gemma 4 12B is here!

Dense, mid-sized Gemma that fits right on your laptop - released by @google under Apache 2.0

Available now in LM Studio https://t.co/EgqHVOj2bY

[Helios Mier @hmier]

@learning_yohei

[Helios Mier @hmier]

@vhramosa

[Helios Mier @hmier]

el super poder en ciberseguridad de encontrar anomalias dentro de las anomalias... y ahora tengo a todos en un bridge de incidente :V

[Helios Mier @hmier]

@vhramosa yo de grande solo quería ser maestro pokemon... y heme aquí, tratando de localizar a un wy del otro lado del mundo para que me deje inspeccionar su PC a ver que rayos se le metió 🥺

[Jamieson O'Reilly @theonejvo]

As someone who:

> Hacked basically every component of openclaw's ecosystem (harness, skills ecosystem etc)
> Helped lead security, trust & threat modelling
> Found 15 CVE's in the software

Absolutely do not run OpenClaw on your enterprise device.

[Helios Mier @hmier]

Los principales lideres del WWW han estado anunciando que adelantaran fechas para cumplir con ser compatibles con cifrado post cuantico.

En vez de esperar a los tiempos establecidos por NIST para el 2030-35, anuncian que tendran todo listo para el 2029.... y nos arrastra a todos

[Frank @jedisct1]

A Post-Quantum Future for Let's Encrypt https://t.co/RtOI9ZDopo

[Helios Mier @hmier]

new NPM worm... IRONWORM *rolls eyes*