Seif-Allah

i barely know how to use burp

[0xSero @0xSero]

https://t.co/7w4kMK88sE

[ITSCOMINGFONE @chimpfone]

I still re-read this weekly. Such a powerful article

[Seif-Allah @seifallah__]

From: Do The Work!

[Seif-Allah @seifallah__]

start before you're ready

[Seif-Allah @seifallah__]

I was just awarded the HTB Certified Penetration Testing Specialist badge on HTB Academy! https://t.co/bUjJwfmDfI #hackthebox #htbacademy #cybersecurity

[Seif-Allah @seifallah__]

CPTS done

[✶ @echoesofworld]

Capri, Italy

[𝑝𝑢𝑟𝑒 @purelivn]

Lake Como, Italy

[Divya Kukreti @div_yahan]

My top Substack reads from last week

[Chrome @0xchromium]

Andrej Karpathy spent 2h showing how he actually uses AI day to day

he's a co-founder of OpenAI and led AI at Tesla, so when he shows how he works, it’s worth watching

and the whole session is just him telling the machine what he wants in simple terms, like he's briefing a coworker

watch what's actually happening the entire time:

> he describes the task in normal words
> it goes off and does the work
> he glances at the result and nudges it with one more sentence

that's the whole skill, and you've had it since you learned to talk

the only gap between that and a worker that runs on its own is handing that sentence a schedule and the tools to act

check his work, then build the version that keeps working when you stop

[an @ll00bj]

المقطع يجنن

[Gabbar @Gabbar0099]

It’s crazy how fast everyone forgot 'Epstein Files'

Here are some of the shocking videos and photos from Epstein files. Thread 🧵

1.

[primordial intelligence @primal_brainer]

don’t let a job stop you from reading like ur unemployed

[Ryan @forbiddenmerch]

Never forget when X updated the platform and showed the DHS is based in Israel

[dreadnode @dreadnode]

We red teamed a frontier model in 3 hours. Zero code.

674 attacks, 573 findings, ~85% success rate. The agent picked the attacks, we just described the objective.

📄 Paper + blog: https://t.co/sNKXNr3PSc

We're going live in <4 hours, walking through the research and how we're redefining AI red teaming in the agentic era.

Tune in at 11 AM PT / 2 PM ET, right here on X!

[iShowPoo @iShowPooo]

So creative! To prove that India is really safe, a Korean guy disguises himself as a pregnant woman to travel in India, and the result is...

[Y Combinator @ycombinator]

RASPIRE (@raspire_) is building app security at AI speed.

As AI accelerates mobile attacks, their platform protects Android and iOS apps from fraud, reverse engineering, and API abuse with zero code changes. They're already securing apps used by 20M+ people across banking, fintech, and healthcare.

Congrats on the launch, @EzV01d & @hsanmost!

https://t.co/0J7Sw3GOHe

[Moonty @mo_onty2015]

القطو: خلاص انتم ارسلولي الـCV وانا اتصرف

[vx-underground @vxunderground]

Yeah, so pretty much this guy is releasing an exploit in solidarity with Nightmare Eclipse guy. He said he notified GitHub about the exploit 60 minutes before releasing this paper.

I don't do web stuff, and I'm not a VSCode nerd, so I'm confused by the underlying technologies.

If you're a stinky GitHub and VSCode nerd maybe you'll understand.

tl;dr click github dev, github dev opens editor, in github dev editor have javascript, javascript does shortcuts automatically. github treats javascript shortcuts as real human input, or something. use javascript shortcut stuff to automatically install vscode extension. the vscode extension steals your data

tl;dr tl;dr user clicks 1 link, 1 click steals all data from your github

https://t.co/uh17usZeEH