Imdad

Offensive Security | Security Engineering

[Imdad @imdadvs]

@sama 2/2 It can also help reduce corruption, crime and corporate influence over government; strengthen democracy, human rights and equal justice; support housing, fair jobs, tech access and the environment; end wars and civilian killings; and promote peace, dignity and compassion.

[Imdad @imdadvs]

@sama 1/2 I know most of these may not be possible with AI alone, but AI can still help us move closer to eradicating poverty and hunger, affordable healthcare, free top-tier education, curing diseases, reducing inequality, and creating safer, fairer societies.

[Andrej Karpathy @karpathy]

I packaged up the "autoresearch" project into a new self-contained minimal repo if people would like to play over the weekend. It's basically nanochat LLM training core stripped down to a single-GPU, one file version of ~630 lines of code, then:

- the human iterates on the prompt (.md)
- the AI agent iterates on the training code (.py)

The goal is to engineer your agents to make the fastest research progress indefinitely and without any of your own involvement. In the image, every dot is a complete LLM training run that lasts exactly 5 minutes. The agent works in an autonomous loop on a git feature branch and accumulates git commits to the training script as it finds better settings (of lower validation loss by the end) of the neural network architecture, the optimizer, all the hyperparameters, etc. You can imagine comparing the research progress of different prompts, different agents, etc.

https://t.co/YCvOwwjOzF
Part code, part sci-fi, and a pinch of psychosis :)

[Nicolas Krassas @Dinosn]

New York’s incoming mayor bans Raspberry Pi at his inauguration party https://t.co/6Yzb0JyIJo

[Imdad @imdadvs]

"Pixnapping" shows a malicious Android app can force other apps pixels into the compositor, exploit a GPU timing side-channel, and steal Google Authenticator 2FA codes in under 30 seconds often without permissions. https://t.co/ijKgX6alD9

[Natalie Silvanovich @natashenka]

Serious bugs often occur in third-party components integrated by other software. @ifsecure and I found this vulnerability in the Dolby Unified Decoder. It affects Android, iOS and Windows among other platforms, sometimes 0-click.

https://t.co/LchMIdKP0P

[Imdad @imdadvs]

@AravSrinivas Bring it on! You are just tempting users to subscribe to the pro version. I wonder how you swiftly added other layers to R1 to provide accurate responses similar to the web and API versions of R1 in such a short period of time. Good stuff!

[Imdad @imdadvs]

DeepSeek-R1 mirrors human thought, learning from trial and error, reflecting on mistakes, and breaking down problems like we do. It's AI with human-like reasoning.

[Imdad @imdadvs]

Dream big, no matter what it is. The human brain possesses remarkable neuroplasticity, enabling it to adapt, learn, and achieve what you consistently focus on and work toward.

[Imdad @imdadvs]

@AravSrinivas @perplexity_ai @grok gave a detailed rundown on Trudeau's resignation with sources like CBC, BBC, & X insights. Wondering how Perplexity will stand out?

[Imdad @imdadvs]

@abh1sek @gitlab Did you check this? https://t.co/jdmtHGNgfY

[Imdad @imdadvs]

@rohit11 How? User's who had already registered and were active before the ban. Their data is still breached if validated.

[Imdad @imdadvs]

Hey @ZALORA I have ordered some items. It was estimated to be delivered today. But looks like your support is not responding and there is no update on the item. Been following for a week now. Help!

[shubs @infosec_au]

1/10 - I've been doing offensive security source code review for a long time now, and along the way I've learnt a lot of lessons that can make you more effective. Some of them include:

[Misha @mishadavinci]

To succeed in the future, you MUST learn web3.

Here's a list of 24 top resources to get up to speed (for free):

[Mobile Hacking Space @MobileHackingES]

🚨 ¡LARGAMOS! 🚀 Aprendé cómo explotar webviews junto a @imdadvs y @shiv__sahni en Apollo 12 en la #Eko2021 👏

🚨 NOW! Join @imdadvs & @shiv__sahni on Apollo 12 at @ekoparty to learn common webview related security issues & the story behind CVE-2021-21136 🔥

EN✅ | ES❌

[Mobile Hacking Space @MobileHackingES]

📢 In this @ekoparty talk, Imdadullah Mohammed (@imdadvs) & Shiv Sahni (@shiv__sahni) will discuss common webview related security issues & how they discovered CVE-2021-21136 🔥 which allowed sensitive data leakage to 3rd parties via HTTP request headers. Join us at #Eko2021! 🙌

[Engineering at Meta @Meta_Engineers]

Mariana Trench is an open source static analyzer written to detect and prevent security issues in #Android and #Java applications. It can review large codebases, provide feedback to engineers, and detect bugs before they are introduced into a codebase. https://t.co/R0F3iFSfOR

[GeoSn0w @FCE365]

iOS 14.7.1 / 14.6 / 14.4 #JAILBREAK News: RELEASE Of New XNU Vulnerability PoC (Open Source Code)

VIDEO HERE: https://t.co/OtK3MVwkIC

In a previous video, I said this will be released and it's now finally out. It's a bug reachable from the Sandbox and works on 14.7.1 and lower.

[BSides Barcelona @BarcelonaBsides]

Webview: An in-app Web Browser created to ensure seamless user experience without context switching between browser and mobile application. How secure is that? Ask CVE:2021-21136 and @imdadvs at #BSidesBCN21 SagradaFamilia track on Sept 30 at 4.45pm CEST