Benjamin Caudill

Hacker. Builder. Founder of @RhinoSecurity

[Benjamin Caudill @rhinobenjamin]

A good deep-dive into a common (and sensitive!) webapp feature that doesn’t get much security attention (by @un1tycyb3r )

[Rhino Security Labs @RhinoSecurity]

New Rhino Blog Post: Referral Beware, Your Rewards are Mine (Part 1)
https://t.co/gYJO1dxuRd

[Rhino Security Labs @RhinoSecurity]

We’re growing the assessment team!
Rhino Security Labs is hiring an Associate Pentester who has webapp pentest skills and a strong desire to learn more.

Sound like you (or someone you know)?

More info here: https://t.co/p3hcU2uyUn

[Rhino Security Labs @RhinoSecurity]

New Rhino Blog Post: CVE-2024-55963: Unauthenticated RCE in Default-Install of Appsmith
https://t.co/TYMCIrXYUY

[Benjamin Caudill @rhinobenjamin]

In hindsight this was a purchase where I shouldn’t have bought the cheapest one on Amazon

[Benjamin Caudill @rhinobenjamin]

Anyone doing logging specific to protecting LLM APIs?
(Or looking at LLM attack signatures pre-exploit?)

Looks like a big, unserved market as everyone rushes to roll out LLM features (and no idea how to monitor abuse)

[vx-underground @vxunderground]

We have never heard of this until yesterday.

RhinoSecurity wrote a paper on AWS S3 extortion, the methodology in which it's deployed, and wrote a simple AWS CLI script to accomplish the task.

It's 25 lines of Python code.

[Benjamin Caudill @rhinobenjamin]

Good opportunity for those B2B sales folks looking to get into a more technical AM role

[Rhino Security Labs @RhinoSecurity]

We're hiring for an Account Manager!
Looking to grow in your sales career and build technical expertise on the way?
We might be a fit - lets chat!

Details and application:
https://t.co/zW0JZTyf0X

[Benjamin Caudill @rhinobenjamin]

@Tesla @elonmusk for MX, can we get the geolocation for *lower* suspension too?

Huge for those of us with pets and limited-mobility passengers!

[Nick Frichette @Frichette_n]

It took them 2 and a half years, but it looks like AWS has finally defeated the GuardDuty bypass using VPC Endpoints. Hats off to the team, but I’m going to miss this technique.
https://t.co/x2s35MQih2

[Rohan Paul @rohanpaul_ai]

WOW. @Microsoft just open-sourced the code for one of "THE MOST" influential Paper of 2024 🔥

1-bit LLMs (e.g., BitNet b1.58).

Now you can run a 100B param models on local devices quantized with BitNet b1.58 on single CPU at 5-7 tokens/sec 🤯

The dream we have all been waiting for.

📊 Performance Improvements:

- Achieves speedups of 1.37x to 5.07x on ARM CPUs

- Larger models see greater performance gains

- Reduces energy consumption by 55.4% to 70.0% on ARM

- On x86 CPUs, speedups range from 2.37x to 6.17x

[Rhino Security Labs @RhinoSecurity]

New Blog Post: CloudGoat: New Scenario and Walkthrough (sns_secrets)
https://t.co/opL603txlU

[Benjamin Caudill @rhinobenjamin]

Protip: Sessions always expired every time you restart Chrome? Check your browser "on startup" settings.

Options 1 and 3 silently expire your session cookies when you close the browser (wtf @googlechrome?)

[Benjamin Caudill @rhinobenjamin]

OSS projects are like children:
- The most fun is the initial creation
- The headache grows as they do
- Lots of people will tell you what you ‘should’ be doing
(and very few will offer to help)

[Beff (e/acc) @beffjezos]

We need to accelerate American drone manufacturing and algorithms.

[Benjamin Caudill @rhinobenjamin]

Those struggling with social anxiety or trust issues - consider AI as an alternative to therapy.

I provided a few pages of my background, priorities, beliefs, etc and asked what “candid insights” I should know about myself.

Learned more in 2 minutes than 10 years of therapy.

[Alec Stapp @AlecStapp]

People who try to romanticize the past should be forced to stare at this chart for a while

[Aubrey Strobel @aubreystrobel]

Caroline Ellison gets 24 months

Ross Ulbright double life sentence

Make it make sense

[ᴺᴼᵀ Jony Ive @JonyIveParody]

FREE orange wallpaper

• HD quality
• No subscription required
• Ad-free

[bharat @that_anokha_boy]

that one guy in class who lectures everyone but scores 0 in exam