prxcmn

tiap weekend kalo gak ngoding, PoC research, ya nimbrung di

[prxcmn @prxcmon]

Why bother? This country is becoming a (political party) cartel state, anyway

[suichiro🍉 @tabiaddict]

@bitxt @prabowo Kalo tembus 20k trus wowo kabur ke yordania apa yg terjadi ges?

[Agus Mulyadi @AgusMagelangan]

Sekitar dua tahun setelah lulus SMA, saya pernah nganggur berat, cari kerjaan susah betul. Tiap pekan sudah rutin beli koran KR sabtu khusus buat cari lowongan kerja, tetep ga dapet-dapet. Susah tembus. Sekalinya dapet ternyata kena tipu (Daftar jadi admin tapi tesnya disuruh jual tuxedo).

Ga enak sama orang tua, akhirnya saya ngekos di daerah Jalan Godean. Cari indekos yang paling murah. Sengaja ngekos biar nggak tinggal di rumah.

Saya terpaksa bohong sama orang tua, bilang kalau saya sudah kerja, padahal belum. Sekadar buat ngayem-ayemi bapak dan ibu.

Selama ngekos, ongkos hidup ditanggung dari hasil nge-dropship jualan kaos online yang hasilnya tidak tentu. Kadang sehari dapat pembeli satu, kadang nggak dapat sama sekali.

Nggak punya laptop, jualan full dari browsing di warnet deket kos, sengaja pilih happy hour pukul 01.00 sampai subuh biar murah.

Hidup harus ngirit setengah mati, sehari cuma makan dua bungkus nasi kucing dan dua potong tempe goreng, beli dari angkringan. Hidup benar-benar penuh dengan kepayahan.

Satu-satunya hiburan cuma nonton tayangan Upin-Ipin di tivi portabel hitam putih yang dulu saya bawa buat hiburan di kos.

Nangis? Tentu saja sering. Kelewat sering. Air mataku api.

Dan karena pengalaman itu, saya tak pernah berani ngecengin pengangguran, sebab saya tak tahu, ikhtiar apa saja yang sudah mereka lakukan agar tidak nganggur.

[Vivek @itsreallyvivek]

https://t.co/ZhOgyq7Vgn

[prxcmn @prxcmon]

Enak banget nih suaka

《Berasbun dengan nada Reza Auditore》

[Ardianto Satriawan @ardisatriawan]

Sudah waktunya... ⌚️

Ke luar negeri lagi. 😋🇷🇺

[0xdf @0xdf_]

I think this N-day research is potentially the biggest story of AI, vulnerability finding, and exploit development.

https://t.co/NLGTI5kcN6

1/6

[John Scott-Railton @jsrailton]

NEW: malware developers added nuclear & biological weapons text to to their spyware.

Goal? To trigger LLM safety refusals... so that their spyware wouldn't be analyzed by an AI security scanner.

Cleanest practical example I can think of for why over-indexing on first order safety alignment is risky.

When closed (and open) models ship with aggressive refusals, they will be sprinkled with second-order blindspots that attackers will discover...and exploit.

We are only in the earliest days of attackers leveraging these features, and it wouldn't surprise me if users systems that need to handle complex cybersecurity issues demand that models be less safety-blunted.

In the weeds: @SocketSecurity's post also shows why intention matters in how you design a malware analysis pipeline to avoid prompt manipulation.

H/T to colleagues that shared this with me https://t.co/f3Aj9TYxU4

[Smukx.E @5mukx]

So this model is waste for cybersecurity for now.

[Spencer Baggins @bigaiguy]

A French engineer who lives quietly in Paris has spent 30 years writing software that the entire internet now runs on without knowing his name.

He wrote the code that streams every YouTube video, every Netflix show, every TikTok clip. He wrote the code that runs the virtual servers underneath AWS, Google Cloud, and Microsoft Azure. He calculated more digits of pi than anyone in history. He has no Twitter. He has no marketing. He just keeps shipping.

His name is Fabrice Bellard.

Here is the story, because almost nobody outside the systems programming world knows what one man has built.

Fabrice was born in 1972 in Grenoble, France. He studied at École Polytechnique, the top French engineering school. He never went to Silicon Valley. He never built a startup empire. He just wrote code.

In 2000 he started a project called FFmpeg, an open-source multimedia framework for encoding, decoding, and streaming video. He was 28. The project did one thing nobody else had done well. It handled every video and audio format that existed, in one library, on every operating system. He led it himself for years.

Today FFmpeg is the invisible engine of the internet. YouTube uses it. Netflix uses it. VLC uses it. Chrome and Firefox use parts of it. Every Android phone, every iPhone, every smart TV, every video editing tool you have ever touched runs FFmpeg somewhere underneath. If you have watched a video on a screen in the last 20 years, Fabrice's code processed it.

He was not done.

In 2003 he started QEMU, a machine emulator and virtualizer. He wrote it solo until version 0.7.1 in 2005. QEMU lets you run any operating system on any other operating system. It became the foundation of modern virtualization. KVM, the Linux kernel hypervisor, runs on top of QEMU. Every major cloud provider, AWS, Google Cloud, Microsoft Azure, IBM Cloud, runs virtual machines on infrastructure built around it. The Quick Emulator is the most cited piece of cloud infrastructure code on Earth.

He kept going.

In 2001 he won the International Obfuscated C Code Contest with a small C compiler that grew into TCC, the Tiny C Compiler. TCC can compile and boot a Linux kernel from source in under 15 seconds. In 2004 he calculated the most digits of pi ever computed at the time, using a personal desktop computer and an algorithm he derived himself called Bellard's formula. In 2011 he wrote a complete PC emulator in pure JavaScript that runs Linux in your browser, a project called JSLinux that engineers still cannot believe is real.

In 2019 he released QuickJS, a small but complete JavaScript engine that fits where V8 cannot. In 2021 he released NNCP, a neural network based lossless data compressor that immediately took the lead on the Large Text Compression Benchmark.

Then he turned his attention to large language models. He built TextSynth Server, a web server with a REST API for running LLMs locally. He released ts_zip and ts_sms, compression utilities that use language models to compress text and short messages at ratios traditional algorithms cannot reach. He released TSAC, a very low bitrate audio compression system. In December 2025 he released Micro QuickJS, a new JavaScript engine for microcontrollers, separate from QuickJS, designed for environments with almost no memory.

Fabrice co-founded a telecom company called Amarisoft in 2012, where he serves as CTO. Amarisoft builds 4G and 5G base station software used by carriers and labs around the world. He has been running it for over a decade while continuing to ship personal projects from his own home page at bellard dot org

He has no Twitter. He has no Instagram. He gives almost no interviews. His personal website is a flat list of projects with no styling, no fonts, no marketing copy. Just titles and links.

A quiet French engineer who never moved to Silicon Valley wrote the code that quietly runs the internet.

He is still shipping.

[Calif @calif_io]

Arbitrary code execution in objdump -g

We have a thing for finding bugs in bug finding tools. IDA Pro, Ghidra, Binja Sidekick, or radare2. You name it we hacked it. Our friends were saying we should try objdump. So here we go.

Blog post: https://t.co/C8BgkW5KoE

AI-generated PoC and writeup: https://t.co/kWJnryHAtn

[Ajie @ajiehatadji]

Kalangan akademisi sudah LAMA sekali menyuarakan pendidikan Indonesia yg belum maksimal mendorong pemikiran kritis. Tapi pemerintah & masyarakat kita kan masih berorientasi nilai & ijazah.

Ya gausah heran kenapa yg terdidik akan terjebak menjadi dogmatik, alih2 berpikir "kenapa"

[prxcmn @prxcmon]

@naolovesindo Blame the grayzone and kitklarenberg, mas

[Bobby Cooke @0xBoku]

Coding assembly == CRIME
@AnthropicAI @claudeai

[prxcmn @prxcmon]

@AmmarGill Enter the "ngaku2 bukan voter 02" tapi dukung kebijakan okegas":

[Vivek | Cybersecurity @VivekIntel]

Anthropic just open-sourced a reference framework for AI-powered vulnerability discovery and remediation 🤖💀

The workflow:

Recon → Find → Verify → Triage → Report → Patch

Features:
• Threat modeling
• Autonomous vulnerability hunting
• Crash verification
• Finding deduplication
• Exploitability analysis
• AI-generated patches with validation

Built around Claude Code and sandboxed agents using gVisor.

🔗 https://t.co/ZFOtXZPEn8

Interesting signal: AI is moving beyond code generation into autonomous security research and vulnerability management.

#CyberSecurity #AppSec #AI #LLM #VulnerabilityManagement #DevSecOps #ClaudeAI

[_SiCk @encrypted_past]

I got asked how to learn exploitation;

Start with XP and work up.

@corelanc0d3r made really good tutorials:

https://t.co/wESnnzhc0q

Basic ASM primer for x86:

https://t.co/sMFZwczRDL
every ISO on the planet for VMs:

https://t.co/zAXH5lspmI

this fucking book:

https://t.co/1CxRjzoqOQ

These:

https://t.co/Owh4396NLr

[nanda @karphrodite]

alah telek aku nganggur sambil belajar, upgrade skill, nambah porto, freelance, bahkan kerja yg ga nyambung sm bidang itu buat nyari uang sambil ttp upgrade juga semua recruiter pada skeptis. org mau cari makan aja dicurigain macem2 heran gw

[JURU BICARA GEN Z @JubirGenZ]

Dear HR Recruitment / Talent Acquisition, PLIS JANGAN LANGSUNG MENUTUP PINTU BAGI ORG YG UDAH LAMA NGANGGUR.

Gak semua gap CV itu red flag. Ada yg kena layoff, merawat org tua yg sakit & ada jg yg udh berkali2 ditolak tp mereka tetap berusaha. Mereka datang dgn doa & harapan dari orang tua mereka.

Sering kali orang yg udah lama nganggur justru adalah orang yang paling menghargai kesempatan kerja yang diberikan. Mereka butuh kesempatan itu ada.

Semoga yg saat ini masih berjuang mencari pekerjaan, segera mendapatkan kabar baik yaa 🤍

[cr3ghost @cr3ghost]

Most people learn security research by reading finished writeups. This one shows the actual process.

The messy, organic, step-by-step reality of reversing an unknown Windows mitigation from scratch. WinDbg. IDA. Hex Rays. Guard page violations. Trap flags. Zero prior knowledge of the target.

If you want to learn how to actually approach unknown Windows internals, start here.

https://t.co/Xq8xbSnG75

Author: @yarden_shafir

#ReverseEngineering #WindowsInternals #InfoSec

[prxcmn @prxcmon]

@sugondese6666 Dudun Abdurahmanović? Wkwkw

[prxcmn @prxcmon]

@sugondese6666 Croatian theater pindah ke indo, jadinya bakal gini

Spoiler alert, yg kalah ya rakyat (termasuk aktivis dan warga sipil non-elit partai)