Our business model is this:
- Attract the very best vulnerability researchers and exploit developers in the world to join our company. This mostly revolves around junior engineers with raw talent/extremely high IQ. We don’t care if they have a college degree/industry experience or if they are total recluse-types who never want to attend some stupid “team building event” or whatever.
This is largely an individual sport. And we want the Roger Federer(s) and Novak Djokavic(s) to work for us. We will hone their skills beyond what would be otherwise possible and polish them into absolutely deadly weapons.
- Pay them so well (including serious equity), and task them with working on things so cool, that they would never even want to take an interview for a job at another firm (think Renaissance Technologies in the hedge fund world, but for computer network exploitation). We want to make these people very rich—which almost never happens to people with these skills in this industry. The only tradeoff is that they will have zero fame or public recognition, and they have to be okay with that (fame is overrated anyway)
- Build the resulting primitives into the most sophisticated and powerful offensive cyber capabilities and platforms imaginable, in order to monitor, degrade and defeat the enemies of Western Civilization
—
If this sounds like what you’re after, reach out. Careers@IRISC2[.]com
13
1
99
17,200
Was iPhone security broken just with Bluetooth?
iPhone was always known for its high security, second only to GrapheneOS. But a leaked Cellebrite document might show they found a way to break their protection.
The device is more vulnerable in AFU (After First Unlock) than in BFU (Before First Unlock).
Cellebrite's "Advanced Unlock" allegedly has the capability to unlock devices in the AFU state. As a response to rising USB port protection, they answered with a method capable of bypassing encryption over the Bluetooth radio.
No pairing, no user interaction. The Bluetooth attack sends an L2CAP packet to the target that hijacks the Bluetooth daemon and gains kernel-level control.
What is interesting is that Apple patched this with the iPhone 17 and TOLD NO ONE. They implemented MIE (Memory Integrity Enforcement), which might also be proof that these alleged capabilities are real, and that devices older than the iPhone 17 are vulnerable to these attacks.
GrapheneOS documentation states that this attack vector is known and won't work on up-to-date GrapheneOS devices.
GrapheneOS will always be the safest option.
Made with AI
2
26
386
19,092
Also interesting that the Codex app becomes a memory leak/IO disaster that grinds your entire machine to a hault
I thought they solved coding?
Given the acceleration Anthropic is reporting in coding, it is amazing that you still cannot change your email address in Claude and the official advice is that if you need to change your email the only way to do that is delete your account.
12
1,123
Makes total sense.
I know a number of OpenAI employees who don't have LinkedIn
Crazy how Anthropic started to hide the full names of engineers on its engineering blogs... never seen this happen in tech before.
After the OpenAI espionage story I have empathy why they do it, but strange to see none the less
Clearly shows eng at an AI lab is high stakes?
1
19
1,066
Another total BOMB from Google DeepMind
The worst part is that all the Google executives (and paid oversees shill bots) on this website will come out and just lie to our faces and claim that it's actually awesome and totally SOTA
Gemini 4 Argon has proven to be outright unusable for real code work in my codebases. It aggressively hallucinates about how systems work.
1
1
9
1,145
