Paul Seekamp

I spend a significant amount of time reading security stuff.

Co-Founder/Partner @CoastlineCyber

[Paul Seekamp @nullenc0de]

Big news! I started @CoastlineCyber, a boutique cyber security consulting firm dedicated to strengthening your organization's security posture. 💪

[Paul Seekamp @nullenc0de]

@0xcharlie You could probably connect the Claude to your Jeep 🫠

[Paul Seekamp @nullenc0de]

I keep reading the state of triage blogs. I will tell you this, I'm sitting on now two 0click rce vulns for two separate phone vendors.

One more phone vendor and I have RCE on like 99% of the telco market.

[Paul Seekamp @nullenc0de]

Am I the only one that makes hilarious names on Peleton and try to get in the leaderboards so the instructors say it?

"You killed it today Stu Pidas"
"Harry Balsonya did work today"

[Paul Seekamp @nullenc0de]

@HackingDave She doesn't know she's in a room with the guy that created the social engineering toolkit.

[Paul Seekamp @nullenc0de]

@xnl_h4ck3r Almost daily, I use it.

[Paul Seekamp @nullenc0de]

Anthropic, how many likes do I need to bring back the day-one public release of Claude 4.6? @AnthropicAI

[Paul Seekamp @nullenc0de]

@evilsocket I have noticed that I have to tell it to plan.

[Paul Seekamp @nullenc0de]

@evilsocket I think i will. I just like claude channels so much. Dont want to give it up. But I might have to.

[Paul Seekamp @nullenc0de]

@evilsocket Oh I totally agree. I have been using Sonnet now. I can't use Opus anymore. It's like I traveled back in time to a dumber, less usable model.

[Paul Seekamp @nullenc0de]

Lol, spent 4 weeks deciding to migrate my Critical to a medium risk because the PII wasnt "sensitive enough". But they patched the vuln in less than 1 hour...

Money must be tight. The $50k bounty was too much to pay. I understand 👍

Shareholders don't want to see that stuff.

[Paul Seekamp @nullenc0de]

@thedawgyg They patched like 30 critical findings last week and judging by the amount of reports I have sitting in triage for a month they probably have so many.

[Paul Seekamp @nullenc0de]

@__sethJenkins it wont let me DM you.

[Paul Seekamp @nullenc0de]

I'm gonna rant for a second:

I found a Zero-Click RCE in the latest Samsung phones in February.

Samsung says it's "Out of Scope" because "AOSP Source."

So I go to Google, they say it’s High, not Critical, because "AOSP Baseline."

My RCE still sitting in the wild, no patch😬

[Paul Seekamp @nullenc0de]

@ibay770 No, just rce in the context of the sandbox

[Paul Seekamp @nullenc0de]

@te3co I have a second one but its the same fix. So im waiting until I see how they fix it and then if they dont fix it the way i think they will. I'll just drop it here 🤣

[Paul Seekamp @nullenc0de]

@Dave_Maynor And certainly going to be interesting soon. It's already getting interesting.

[Paul Seekamp @nullenc0de]

@roddux LOL well I was already in the queue to get patched. I just have no idea when...

[Paul Seekamp @nullenc0de]

@jeremie_strand I'm not sure how full-time bug bounty hunters are doing it.

[Paul Seekamp @nullenc0de]

@imftxyz Lol well. They are already in the queue to get patched it just might take 6 months...

[Paul Seekamp @nullenc0de]

@D0rkerDevil You sitting on them? Seems like it's better to at least right now.