pain_smh

stain on twitter

intp

[pain_smh @justmyownenemy]

What is the matter with you guys? We are CVP Verified, working on active bug bounty. But soon as we get closer to discovering something critical all models fail.. Opus 5 Fails falls to 4.8, then it fails we switch to sonnet in confidence it will not but it as well.
@AnthropicAI

[pain_smh @justmyownenemy]

@ripa_codes @ayesha_fatiima product*

[pain_smh @justmyownenemy]

@Badbitchbabe4 @BalajiJupudi @Cockroach4India the abused Dalits in your framing are of poor background. No rich Dalits gets harrasment on daily basis. It's not a cast problem it's a class problem. Hopefully fellow cockroches can see the diff.

[pain_smh @justmyownenemy]

@lydiahallie It's not fixed in vscode extension or in cli for our team. We just hit the Max 20x limit on just 3 normal dev prompts.

[pain_smh @justmyownenemy]

@briankrebs @k8em0 @InsiderPhD @davegerryjr @caseyjohnellis is this acceptable? I have the full timeline, and patch evidence.
@Bugcrowd — your escalations team needs to review this.
@chime — your users' MFA was bypassable. A researcher protected them. Pay them.

The community is watching. #BugBounty #InfoSec #ResearcherRights (4/4)

[pain_smh @justmyownenemy]

This isn't about the bounty.
It's about a company silently fixing a critical auth flaw, then gaslighting the researcher who found it.

This sets a dangerous precedent: find vulns, get patched out of a payout.
@briankrebs @k8em0 @InsiderPhD @davegerryjr @caseyjohnellis (3/4)

[pain_smh @justmyownenemy]

The timeline is damning:
✅ I submitted full PoC (Prod JS + QA walkthrough)
✅ They acknowledged QA was in scope (same codebase as prod)
✅Vuln patched in both environments after my report
❌ Bugcrowd closes it as "not reproducible"
If there's no impact — why patch it? (2/4)

[pain_smh @justmyownenemy]

@grok @sembanglahkau @PratikP10662 @voiceofhindus @grok explain to him like a child with examples .

[pain_smh @justmyownenemy]

@grok @sembanglahkau @PratikP10662 @voiceofhindus @grok answer me..

[pain_smh @justmyownenemy]

@grok @sembanglahkau @PratikP10662 @voiceofhindus @groke how what does seem to the mentality and psychology and psychology behind this person who doesn't wanna accept facts and would bend reality calling you mossad agent to fit into his own world view.. give him something that can help him self reflect.

[pain_smh @justmyownenemy]

@vxunderground @DebprasadBaner9 I'd say secktor7 has a decent course and at the end of the original maldev depends on creativity.

[pain_smh @justmyownenemy]

@I_Am_Jakoby I am very well versed in edr bypass and this is not it.

And there is no one cure for all in edr bypassing that's just false..

And yours is not even a valid bypass.

[pain_smh @justmyownenemy]

@I_Am_Jakoby Lmfao, is procmon all you got( no I am not going to run this obsfucated script)
how about we talk about actual evasion.
Cause there is no unhooking, no ntdll no low level stubs for syscalls functions no nothing just a basic ps1 that use common obsf, this at most it will evade AV.

[pain_smh @justmyownenemy]

@I_Am_Jakoby lmao what the f are you actually on 😭😭..
Do you even know what a edr is or are you just throwing around words .

[pain_smh @justmyownenemy]

@abstract_lego @PippisFather @Matt_Pinner so what's the solution here smart guy? govt owns all of the land and allows people to live there??

[pain_smh @justmyownenemy]

@I_Am_Jakoby Yeah lol if this a ps revshell that uses rev raw TCP connection claims to bypass EDR. I am calling bullshit on it..

Atleast pretend, idk what games you are playing but this kind of lie is not good for cybersecurity space..

[pain_smh @justmyownenemy]

@I_Am_Jakoby If this tool is not backdoored it can be used to bypass static detection, but still you are not bypassing AMSI or string entropy..

[pain_smh @justmyownenemy]

@I_Am_Jakoby what a dumb f--c, you cannot just obsfucation and junk into a ps script and claim it bypasses EDR. What a script kidding behaviour..

[pain_smh @justmyownenemy]

@KumarG57122158 @Awinashdelhi @Being_Humor @aajtak @MIB_India @MIB_Hindi @HMOIndia There is a big difference between questioning media and questioning the army..

We all know indian media is bikau, if they don't have real clips they should play animation and wait for real footage..

[pain_smh @justmyownenemy]

@Rohan7187 @DrSJaishankar We know you are not suicidal.