Seb

ai, hacking, trading, living

[Seb @sebhacks]

@pdiscoveryio Love this!

[Orange Book 🍊📖 @orangebook]

Everyone has an opinion about how you should live your life, including many very smart people who can make anything sound very convincing, but if you hang out around enough people for long enough, it becomes obvious that everyone is just making educated guesses at best, they are not gonna live with the consequences of their advice; no one knows your core values better than yourself, and you will never feel confident and find peace of mind as long as you are living the life that someone else chose for you.

[Seb @sebhacks]

@AnthropicAI

[Seb @sebhacks]

@elder_plinius pliny the 🐐

[Seb @sebhacks]

@NousResearch @Bitwarden 👀🔥

[Seb @sebhacks]

@BSidesTampa @dafthack top talk of the day! ✊

[Microsoft Threat Intelligence @MsftSecIntel]

Microsoft is investigating mistralai PyPI package v2.4.6 compromise. Attackers injected code in mistralai/client/__init__.py that executes on import, downloads hxxps://83[.]142[.]209[.]194/transformers.pyz to /tmp/transformers.pyz, and launches a second-stage payload on Linux. The file name transformers.pyz appears deliberately chosen to mimic the widely used Hugging Face Transformers library and blend into ML/dev environments.

The main payload is a credential stealer, but it also includes country-aware logic; it avoids Russian-language environments and contains a geo fenced destructive branch that has 1-in-6 chance of executing rm -rf / when the system appears to be in Israel or Iran.

To mitigate this threat: isolate affected Linux hosts, block 83[.]142[.]209[.]194, hunt for /tmp/transformers.pyz, pgmonitor[.]py, and pgsql-monitor.service, and rotate exposed credentials.

[Seb @sebhacks]

@rekdt threat actors reading that post:

[vittorio @IterIntellectus]

imagine unmuting and replying "nothing on my end" from here

[Seb @sebhacks]

@princessakano based

[Seb @sebhacks]

@elder_plinius real

[gomi @parveen__tyagi]

He literally explained how to get unstuck in 30 seconds

[Seb @sebhacks]

@SpaceX @TheShortBear @cursor_ai Massive

[Seb @sebhacks]

@jesse_vermeulen bump house music

[Seb @sebhacks]

@elder_plinius @AnthropicAI Diabolical 😭

[GuidedHacking @GuidedHacking]

A shortcut is a promise of a result without the experience.

The result is temporary, but the lack of experience is permanent.

[Seb @sebhacks]

@HackingDave @rezoundous 💯

[Seb @sebhacks]

create an overview.txt file in the parent directory that tracks architecture and design considerations over time. any time you make a major update, have it update the overview.txt accordingly. this also serves a dual purpose, where as you switch between new sessions, you can prime the new context by having it review that file, as opposed to having to re-crawl the entire codebase.

[Seb @sebhacks]

@Jhaddix

[Seb @sebhacks]

@vxunderground 💯