senecolas

CTO & Co-Founder @Reflareio | Product engineer @depi_
Reviving dead videos and killing bad dependencies

[senecolas @senecolas]

Huge one. GG @0xMadder and @_Worty. Reading the machine's login keys straight out of its memory, from inside a locked room with no internet, is nasty work.

[Depi @depi_]

🚨👾First post → Awesome research.

We compromised the latest version of OpenAI Codex.

We prompt injected.
We escaped a sandbox.
We exfiltrated secrets…

And ended up with control over what could be published to the official openai/codex npm package.

Prompt injection → RCE → supply chain compromise.

Full research by @0xMadder and @_Worty in the comments 👇

[senecolas @senecolas]

bee-js 13.3.0 was malware with valid provenance. Attackers published a GitHub release and the project's own workflow pushed it to npm, no approval. Provenance was right: their pipeline built it...

[The Hacker News @TheHackersNews]

‼️ Hackers compromised Ethersphere's bee-js npm package and Swarm Desktop app to deliver crypto wallet-stealing malware.

The malicious releases also install backdoors on Windows, macOS, and Linux.

Both versions are now withdrawn, but updating alone won't remove the backdoors.

Details: https://t.co/oKyHsdGi4P

[senecolas @senecolas]

@Reflareio Sure. I'll start right after the things that come right after the other things... 😝

[senecolas @senecolas]

Show me your YouTube Studio or your package.json and I will tell you who you are 👀

[senecolas @senecolas]

@0xLupin @depi_ @pmigdal @wicca_NL Still a prototype. Still more social skills than me.

[senecolas @senecolas]

Last month, @0xLupin bought a few LED backpacks for @depi_, the kind made for motorbike riders. The plan was simple: put the mascot on the 64x64 panel. I misread "simple"... 🙄

[senecolas @senecolas]

@0xLupin @depi_ @pmigdal Three bags walked around #WICCON, run by @wicca_NL, and people kept stopping us to film the face. Not many security companies can get people excited about their logo. Apparently ours just needed Bluetooth access.

[Lupin @0xLupin]

CONFERENCE BAGS 🤗

I asked @depi_ engineering team if they could just put a gif of our mascott on the backpack.

This is what overgineering on its free time looks like for @senecolas

We tested the bag during WICCON last week and it was so fun to get everyone's reactions :D

PS: The team might have also hijacked a random person's bag to show a Depi emote instead 😁

[senecolas @senecolas]

@0xLupin @depi_ "Just a gif" he said 🙄 Was a lot of fun to build. Happy to share more for the curious ones 👀

[Lupin @0xLupin]

So I asked my team at Lupin & Holmes if they had some innovative swag ideas for Depi.

Here is my front end engineer @senecolas ideas for our new swag 😂

No need to say that we are taking requests ! Give me your best swag ideas you would like to see ;D

[Heroez 🤖​ @Heroez_gg]

🎉 Giveaway Alert!

You know we love gaming and what's best than collaborating with @ChampionsVerse for a cool drop!

We're giving away 5 pairs of Warlords to celebrate our amazing community and extend our bond to web3 gaming!

To enter:
- Follow @Heroez_gg + @ChampionsVerse
- Retweet this tweet
- Tag a friend who wants to share the reward!

Get ready to unleash your inner warrior!

📷 Winners will be announced on Tuesday June, 25th at 6pm CET.

Good luck!🤞

#BeHeroez

[senecolas @senecolas]

@Heroez_gg @ChampionsVerse @maeva_rsbg

[senecolas @senecolas]

@NetflixFR Ce n'est pas l'histoire où, suite à un attentat perpétré par des personnes d'un territoire enclavé, l'État souverain sombre encore plus dans le fascisme et commence à attaquer et massacrer la population de ce ghetto, écartant toute possibilité de paix ?

Pas crédible le lore…

[senecolas @senecolas]

@Heroez_gg Welcome guys 👋

[Heroez 🤖​ @Heroez_gg]

We are becoming the first esport team to develop our own game 🎮

Partnering with @TheLandVault, we are unleashing the power of esports in the metaverse creating several experiences in @TheSandboxGame 🔷

Full announcement here:
https://t.co/tX2cIwfMKf

[senecolas @senecolas]

The buddies @florian_torres_ and @guim0v have finally released their amazing tribute to @JP_GHIBLI.

Just stunning 🤩 !

Poke to all #Ghibli fans and #3D lovers.

[𝙂𝙪𝙞𝙡𝙡𝙖𝙪𝙢𝙚✨🔻 @guim0v]

Castle in the sky — CGI Short Film tribute

Voilà enfin notre projet avec @florian_torres_ on est trop fiers de vous le présenter :
👉https://t.co/6uJNhumhac 👈

Pour les backstages et le behance c'est juste en dessous !
#3d #b3d #c4d @OTOY @MaxonVFX

[senecolas @senecolas]

@Grou_Grou_ Trop bien ! Félicitation !
C’est fait en swift ?

[senecolas @senecolas]

@BenBKTech Ensuite, cette signature est récupérée par l'utilisateur et envoyée en paramètre lors du mint, pour être finalement vérifié par le smart contract comme ceci

[senecolas @senecolas]

@BenBKTech De mon côté, les whitelists se font avec un message signé par un wallet connus du smart contract et générée côté serveur