Tom Plant

(bre|m)aker. VP R&D @devicie

[Tom Plant @pl4nty]

@mikejulian @HubSpot looking at rolling our own HubSpot MCP server 😔

[Tom Plant @pl4nty]

@byteben @IntuneSuppTeam there's an unlisted doc for the Graph headers, but I can't find the MAA exclusion UI in canary or prod https://t.co/5XUaFTDijX

[Renwa @RenwaX23]

"Dad, what was it like playing CTFs before AI?"

[Harsh Jaiswal @rootxharsh]

Last year, on a vacation, @S1r1u5_ and I were discussing about the human need for validation and how most things we do can be tied to it, consciously or subconsciously.

Mohan asked, Would you still be doing what you do (hacking, publishing blogs, competing, etc.) if no one was there to see it? At that time, my answer was "yeah, probably?"

Today, the world has somewhat come to that. All the things you thought gave you validation are now norms. Things you once took pride in can be replicated in a few prompts. I mean, people are dropping 0days everyday now, and there's an unlikely chance of your blog getting reads so there goes that validation. So would you still do it on your own? For your own sake and sanity?

My answer is a confident yes now.

In the last couple of months, I've seen models find bugs autonomously or sometimes with just a bit of a hunch from me, but sharing these bugs publicly hasn't been rewarding. And not in the sense of likes or reach alone, I've just been less motivated overall. I have a few blogs sitting in my queue, and what I'm noticing is I keep procrastinating, because there's not much authenticity to my own work in them, and I don't have the enthusiasm to share the same story again, how the model found this and that. I think if you really love the game, sooner or later, you have to come to terms with the fact that to stay sane, you need to go back to that problem-solving phase, otherwise it gets pretty depressing. As much as I love watching LLMs find bugs, it feels soulless at times.. all this is a signal to me that I can't function like this in the long run. It makes me feel dopamine-deprived, and I need to be hacking shit on my own..

Now, when I say "on my own", I don't mean no AI, AI bad. No, not at all.. There's a big difference between using an LLM as an accelerator in your work vs delegating your understanding to it. From a long-term pov, the former is the only path imo, and even then, the mind map you build on your own is very different from the one you'd end up with leaning on LLMs. The dopamine hit isn't even close to figuring shit out on your own.

Seeing how AI is making 0days the norm and CTFs no longer the same.. The question is more real now than ever. Would you still sit down and hack stuff even when no one's watching, knowing people might be on top of the leaderboard via AI, just for the love for the game?

[Yibo Liu @34r7hm4n]

Rust reverse engineering is about to get a lot easier. 🦀

I'm thrilled to announce that Oxidizer, the first Rust decompiler, has been officially merged into angr!

Try it out: https://t.co/D9ILIgVH1K

You can also find the paper here: https://t.co/k97qZRvEAm

[Tom Plant @pl4nty]

@0xfluxsec np, I think it mostly uses .ame.gbl which should be resolvable from Azure VMs etc. but the root and crl are public https://t.co/G5Crg7PVr2

[Tom Plant @pl4nty]

@0xfluxsec AME is prod PKI, and used for signing - I think danonit posted a leaked Windows binary signature chained to an AME root. maybe the deadbeef part is just for testing though?

[Bien 🇻🇳 @bienpnn]

People saying that Linux is doomed by LLM are either trolling or don't know about Linux vulnerability research at all. Before we have good LLM, kernelCTF was still really competitive, and LPE got patched all the time, silently. Not on the news != not important.

[Tom Plant @pl4nty]

@merill congrats mate! excited to see what you do next 😊

[Tom Plant @pl4nty]

@awakecoding @_h0x0d_ @unixterminal coming soon 🙏
https://t.co/TeqtpuRLql

[Demitrius Nelon @DenelonMs]

There's been lots of confusion around MSIX. In particular how it works with WinGet and even more so around system context. This is the first blog in a series of weekly posts coming about how MSIX actually works. Hopefully this will help provide more clarity for everyone.

https://t.co/4uODWCTiSz

[Tom Plant @pl4nty]

@XenoPanther ty 🙏

[Team Oceania @TeamOceaniaICC]

🏅Sponsorship Announcement🏅

Thanks to our GOLD sponsor @JaneStreetGroup for supporting our team this year!

[Tom Plant @pl4nty]

@awakecoding nice work! you might like https://t.co/hqbmK52kSG too, has helpful commands like a fast `show` reading direct from winget-pkgs

[Tom Plant @pl4nty]

@awakecoding I've only seen one in the wild, for supporting winget-pkgs in Intune. never shipped 🥲
built a few non-enterprise servers myself - a local proxy to access Intune apps, and https://t.co/Ijfccd3hQM (preindexed)

[toasterpwn @toasterpwn]

Team Oceania is seeking sponsors for the 2026 International Cybersecurity Challenge!

Support top 🇦🇺🇳🇿 cyber talent and showcase your brand on the world stage.
Learn more: https://t.co/Bmc5FjuPEF or send me a message.

#cybersecurity #infosec #hacker

[Sylvie @_sy1vi3]

some reflections of mine on the CTF i just helped run and AI in CTFs generally

https://t.co/RlfhYLjOah

[Tom Plant @pl4nty]

@modaly_it @SSkotheimsvik @NickolajA @sandy_tsang @JankeSkanke oh sorry, replied to the wrong post. I mean these links on the blog post

[Tom Plant @pl4nty]

finally, gpt-5.4-mini and nano are coming soon