Jonathan Irvin

[Jonathan Irvin @Jonathan__Irvin]

I built an AI Agent that hacked my TV and made it go crazy!

Ask me questions about it.

#Cybersecurity #AI #AIAgent #pentest #EthicalHacking #AISecurity

[NetworkChuck @NetworkChuck]

🚨 Just dropped: How hackers are breaking into AI systems RIGHT NOW

I sat down with top AI hacker @Jhaddix who showed me:

- Prompt injection that steals real data
- Emoji smuggling attacks (yes, really)
- How to bypass ChatGPT guardrails
- The exact framework pros use

Even @sama says this might be unsolvable 😳
Watch to learn how to hack AI → (link in reply)

[Async @asynchronous_x]

> check in at hotel
> receptionist asks what I’m in town for
> tell her DEF CON
> she says “oh management told me to tell attendees to stay away from the elevator”
> I chuckle in response, grab my stuff and go to my room
> mfw someone has a shell on the rpi running the screen

[Jonathan Irvin @Jonathan__Irvin]

@PinkDraconian So cool!

[Jonathan Irvin @Jonathan__Irvin]

@Techboy150 I'm in.

[Jonathan Irvin @Jonathan__Irvin]

@Techboy150 Thanks for sharing! This is awesome!

[Oluwatobi Mustapha @Tobi_Msp]

My new cybersecurity project ✅

HONEYPOT DEPLOYMENT ON AWS

Before I get into how I did the project, here’s a quick explanation of what a honeypot is and why it’s useful.

A honeypot is like a fake system that we set up to look like a real target for hackers. It tricks them into thinking they’ve found something valuable, but in reality, it’s just there to catch them in the act.

And deploying a honeypot means placing this decoy system that we've created in a network where attackers can easily find it. It doesn’t hold any real data, but it lets us watch what hackers try to do, what tools they use, how they get in, and what exactly they’re after.

This helps companies in many ways. For example;

- Spot suspicious activity early
- Learn about new attack methods
- Keep real systems safer by distracting hackers

In short, a honeypot turns an attack into a learning opportunity and help us adds an extra layer of protection.
Now that we know this, let's move on to the project.

[David Leung @dhkleung]

The root cause of the @Bybit_Official's $1.4B multsig wallet hack has finally been revealed by @safe, @sygnia_labs, and @Verichains:

The attacker compromised Safe's web 2 infrastructure to inject malicious code to the Safe frontend. Contract isn't vulnerable.

How did it happen?

[David Leung @dhkleung]

Now that we know who's behind the @Bybit_Official attack. Let's look at how the hack actually worked.

At a high level, the hack involved the 4 broad group of events:

1. Attacker deployed a trojan contract and a backdoor contract.

2. Attacker tricked signers of the upgradeable multisig "cold" wallet to authorize a malicious ERC-20 transfer to a trojan contract

3. Instead of transferring tokens, trojan contract replaces the master copy of the actual Safe multisig implementation contract with the backdoor contract, which is solely controlled by the attacker.

4. The attacker called sweepETH and sweepERC20 to drain the wallet of all its native ETH, mETH, stETH, and cmETH tokens.

[Brad Garlinghouse @bgarlinghouse]

Some thoughts on maximalism… let me say this as clearly as I can – the crypto industry has a real shot, here and now, to achieve the many goals we have in common, IF we work together instead of tearing each other down. This is not, and never will be, a zero-sum game.

• I own XRP, BTC, and ETH among a handful of others – we live in a multichain world, and I’ve advocated for a level-playing field, instead of one token versus another.
• If a govt digital asset reserve is created - I believe it should be representative of the industry, not just one token (whether it be BTC, XRP or anything else).
• Maximalism remains the enemy of crypto progress, and I’m very glad to see fewer and fewer folks ascribe to this outdated and misinformed thinking.

[Jonathan Irvin @Jonathan__Irvin]

@housecor That is incredibly impressive and inspiring, man!

[Jonathan Irvin @Jonathan__Irvin]

@nossorckered @kvlly I completely agree. If Google and autocomplete is essential in your day-to-day, what sense does it make to make people try to code blind in an interview? Maybe its for the entertainment. 😁

[Jonathan Irvin @Jonathan__Irvin]

@JoeyMic86835320 @F1reblade85 @garyvee @davidrocknyc He responds more often if you ask your question in your tweet or text instead of giving him your email and asking him to reach out to you without letting him know what your specific question is. Hope that helps.

[Jonathan Irvin @Jonathan__Irvin]

@housecor This happened to me today. After a full day of writing tests to see "35% < 70%" from sonar, I didn't cringe as hard as I normally would, because writing tests today allowed me to catch a subtle but major bug before it even made it to a PR.

[Jonathan Irvin @Jonathan__Irvin]

@MattMelv @Akam1129 @AFSUnidentified @TTSAcademy As a software developer, I couldn't agree with you more. 😀

[Jonathan Irvin @Jonathan__Irvin]

@rarkins Awesome, thanks! I'll check it out.

[Jonathan Irvin @Jonathan__Irvin]

@tobrien How so? What would you recommend instead? Genuinely curious what we could be doing differently.

[Jonathan Irvin @Jonathan__Irvin]

@kyleshevlin That's awesome man! Congrats. So besides egghead, what are your side hustles? I'm a developer trying to get some ideas on how to make some extra money after hours and/or on the weekend. 😁

[Guillermo Rauch @rauchg]

And this is all you have to know about programming languages. And complaining in general