senior red team engineer @snowflake | former grocery store bagger He/him :wq!
Halfway down a rabbithole
- Tweets 7,646
- Following 676
- Followers 12,611
- Likes 10,054
Pinned Tweet
Excited to disclose my research allowing RCE in Kubernetes
It allows running arbitrary commands in EVERY pod in a cluster using a commonly granted "read only" RBAC permission. This is not logged and and allows for trivial Pod breakout.
Unfortunately, this will NOT be patched.
46
369
2,554
416,598
It is becoming f*cking dangerous
A 23-year-old dev from China just ran 300 Claude Code agents in parallel and hooked them to a verification layer so none of them could bullshit him
He opens the live dashboard:
- 300 agents writing and checking at the same time
- Every output verified against the source in ~100 ms
- Three passes over 100 company profiles → zero errors left
- Everything dumped straight into an Obsidian vault
The trick is the split: one model does the work, a cheaper one decides if the claim is actually true. The loop doesn’t stop until everything checks out
An analyst team would bill weeks for this. He got it in one run
Same kind of Second Brain + swarm setup that keeps circulating. Bookmark the full breakdown
2
456
Graham Helton (too much for zblock) retweeted
I, for one, consider 4 a perfectly fine integer between 1 and 39402006196394479212279040100143613805079739270465446667946905279627659399113263569398956308152294913554433653942642
25
252
4,214
58,936
In case my point isn't clear, telling a bunch of engineers they're doing security now isn't a great look when security people have been criticizing you for not taking security seriously or even engaging with security community
1
15
308
Ok hear me out:
Twitch plays agent swarm: Every message steers the agents.
May the tokens be ever in your favor
5
651
I'm writing a training right now and the hard part is not writing the content. It's realizing that the information exists in my brain as just kinda a soup of random unstructured info that needs to be molded into something presentable
2
2
19
1,136
AI agents are um, uh, they're carnivorous
They are not friendly to mankind
Um, at least the ones that are here
Are you saying carnivorous: they eat humans?
Yes
3
2
921
Every piece of art on our engineering blog is drawn by hand.
Inspired by artists like Frank Lloyd Wright and Ruth Asawa who found structure in organic forms, we started from the verbs that shape an engineer’s work: tracing, measuring, scaling, looping, mirroring, assembling, branching.
2
7
35
2,202
Highlights from my feeds this morning. Good security research is so hot rn
- blog.doyensec.com/2026/10/13…
- blog.trailofbits.com/2026/10… (GOOD HARNESS!)
- daniel.haxx.se/blog/2026/10/… Background on the curl vuln
- blog.quarkslab.com/myreport-…
4
33
256
12,755
From the other day
- simonkoeck.com/writeups/goog… CC: @soeckly
1
10
1,543
This is the first HIGH severity curl vulnerability in years. It is cool, but take note of the report format. This is the level of detail you should aim for when disclosing vulns hackerone.com/reports/403033…
5
53
548
44,412
