Ta-Lun Yen

uncertified unethical hacker (Vulnerability Researcher, employed): breaking everything running on 0 and 1's.

[Eduardo Vela @sirdarckcat]

We are hiring for vulnerability research in Singapore!!

Ping me on DM if you wanna apply (or your application will get auto rejected because idk why).

I'm also in Singapore this week if you wanna chat about the role!!

[impulsive @weezerOSINT]

reversed close to 100 windows kernel drivers over 2 months. more than a dozen vulnerable. burned 11 this month

advantech runs factory floors. beckhoff TwinCAT runs manufacturing.
qihoo 360 + kingsoft ship on hundreds of millions of chinese PCs.
GPU-Z ships on tens of millions of gaming PCs. argus monitor + SIV + ASTRA run on enthusiast rigs worldwide

all signed. all have kernel physical memory R/W. no admin needed

[Jeremy Lu @cat88tw]

美國：老闆狂買 claude $200 鎂方案甚至無限 API quota 跪求員工拼命用~💪🏻

台灣：員工自掏腰包買 $20 鎂方案上班或苦哈哈在幾家免費方案間輪替~🥹

( 這就是 mindset 與競爭力最大差別之處吧？🤷🏻‍♂️

#以後面試一律先問貴司提供哪些AI工具嚕

[Ta-Lun Yen @logonfail]

Moreover, as "Have-Disk installation" is not very friendly and have its quirks, I do not recommend anyone to use AQC NICs on Windows.

X520-based NICs may require you to use older OS so it is out. I have not used a Realtek-based card on Windows, but it'll worth a try.

[Ta-Lun Yen @logonfail]

For people having problems with Aquantia/Marvell AQC drivers on Windows:
1. Try using driver 3.2.1 by "Have-disk Installation".
2. Request your device vendor to fix the driver.
3. Switch to @CalDigit - they are the only vendor with 3.2.1 signed right now.

This NIC is used in many implementations of 10Gbit Ethernet and is known for its instability.

After analysis, it seemed clear: whoever wrote this driver is incompetent. Leaks everywhere. Every sleep-wake or a surprise removal (Windows speak of device removal) cycle is a Russian roulette. If you lose, either the entire PCIe subsystem hangs and loses functionality, or you get timed out and therefore, BSOD.

While 3.2.1 do fix the roulette, but NIC will sometimes fail to re-initialize on wake. It is, however, not deadly.

This won't be an issue if you never sleep the system (@PoweredbyOWC's recommendation - despite marketing the dock specifically for laptops).

[GCU Tense Correction @tensecorrection]

https://t.co/7cSB0XjQdT

[solst/ICE of Astarte @IceSolst]

- XZ utils backdoor: found by guy debugging 200ms latency

- LiteLLM hack: found by guy debugging oom issue

These could have been the most impactful compromises ever.

Forget security vendors, weaponize your engineers’ autism.

[Stephen Sims @Steph3nSims]

I want to share a quick thought for people in cyber security. This will be my longest tweet ever.

I’ve spoken to many lately who are having an existential crisis from the constant posts about “the end of cybersecurity jobs.”

Yes, things are changing quickly. This is a significant moment for the tech industry. Change can be uncomfortable. But we’ve seen cycles like this before.

• When GitHub and open source took off, people said software engineers would disappear because code was free.
• When AWS and cloud computing emerged, people said infrastructure jobs would vanish.
• When fuzzing and SAST tools improved, people said vulnerability research would disappear.
• Virtualization would eliminate infrastructure jobs.
• Mobile computing was going to end desktop dev.
• Exploit mitigations would end exploitability. It didn't.

Each time automation improved, the amount of software grew faster than the automation. It does feel "different" this time as it's explosive.
Some roles will shrink:
• repetitive pentesting
• basic vulnerability scanning
• tier-1 SOC monitoring

But other areas are expanding rapidly:

• AI system security
• supply chain security
• identity architecture
• autonomous agent security
• critical infrastructure protection

Historically, every time we eliminate one class of bugs, new classes emerge. Right now people are vibe-coding entire systems, giving AI access to their machines, crossing trust boundaries, and deploying autonomous agents with excessive permissions. The legal and regulatory world is nowhere close to ready.

There will absolutely be new failure modes. Humans are amazing and always adapt, finding new ways to do things.

The worst thing you can do right now is fall into a doom loop.

...and I’ll be honest, I too have felt the "psychological paralysis" a few times thinking, “Is this time different?” It's especially impactful when it comes from someone I respect in the community. There are certainly unknowns, in an industry where we've become accustomed to predictability.

But... the majority of those reactions are usually driven by social media, not reality. Platforms like X reward engagement, and sensational doom posts spread faster than measured thinking.
If you see something like:
“Holy #$%^! Opus 66.6 just found every bug in Chrome and replaced 50 startups!”

…mute it and move on.

Instead:

Stay curious.
Learn the new technology.
Adapt your skillsets.
Build things.

We’ll get through this transition the same way we always have. If I'm wrong then Sam Altman better be right about UBI! :) I'm sure that if this tweet gets any engagement that I'll get some heat for it, but a good friend of mine reminds me often to focus on what you have control over. I'll revisit this tweet at DEF CON 40!

[OtterSec @osec_io]

We recently achieved guest-to-host escape by exploiting a QEMU 0day.

We’ll share details on a new technique leveraging the latest glibc allocator behavior and what we believe is a novel QEMU-specific heap spray/RIP-control primitive.

Writeup coming next week.

[Viking @vikingmute]

这个项目笑死我了
https://t.co/kCsXVKN2M8
给 ClaudeCode 添加上魔兽争霸3 兽族苦工的声音，它的音效也是魔兽3中我最喜欢最喜感的音效，可以提醒当前 CC 的运行状态，还是很实用的。

Session 开始 "Ready to work?", "Yes?", "What you want?"

任务完成 "Work, work.", "I can do that.", "Okie dokie."

需要权限 "Something need doing?", "Hmm?", "What you want?"

太亲切了

这里可以看 demo：https://t.co/9a8iKmUdHz

[Haakon Wibe @HaakonWibe]

Look.. it's a Conditional Access policy simulator built by an infra architect guy who got tired of squinting at What If results 🫠 Shiny graphs yay! 🔗https://t.co/hqKKVDnBFV No sign-in needed, click Sample Data and play around. Or connect to your own data - all's in browser.

[Ta-Lun Yen @logonfail]

Other analysis:

1. The back cover may fail in long term. It seems to be fixed in place only using plastic clips.
2. Battery seems to be not shared among popular phones

[Ta-Lun Yen @logonfail]

Questions Mudi 7 by @GLiNetWiFi as the only "unboxing reviews" were videos of people going to their CES booth.

1. Will reviewers release their review before pre-order opens?

1/2

[Ta-Lun Yen @logonfail]

2. How long does the battery really last?
Looks like the platform is IPQ9574+X72. I think it will not last 8 hours under light-moderate use.

3. What is the expected use case for charging a 2nd battery overnight?

[Ta-Lun Yen @logonfail]

Looking at Moltbook, it feels like bork souls: agents now wielding API keys and perhaps your wallet, your kitchen, your car and your house keys (but humans gave access to it in the first place)

[Ks7 @ks7X01]

when i take a look at such write-up and understand nothing ,
i know that im years away from being a security researcher
it takes time , really good amount of time

[Ta-Lun Yen @logonfail]

@saoto28 Ask this man to perform stress testing?
https://t.co/YOTbTI7qi3

[ナリハラ | スペースマーケット @feel_sooo_baaad]

日本の握力王 新沼大樹さんも分割キーボードは体にいいとの話されていたのを思い出しました
https://t.co/3TvnuODKOU

#自作キーボード沼

[Lukasz Olejnik @lukOlejnik]

China ordered domestic firms to stop using cybersecurity software from about a dozen US and Israeli vendors (including VMware, Palo Alto, Fortinet, Check Point). Effects: faster switch to other, maybe Chinese alternatives, reduced Western sales in China, immediate share-price drops for affected firms, and costly, disruptive IT migrations for customers.

[hacker.house @hackerfantastic]

Quake III Arena Directory Traversal & Arbitrary File Read Vulnerabilities (0day) https://t.co/WRzUfzhNuJ

[🥝🏳️‍🌈 Benjamin Delpy @gentilkiwi]

Wanted to silence some Bluetooth speakers?
I did - and had spare Raspberry Pi Picos in my inventory, so…
> https://t.co/bFmHMouxX8