Here's a thread of every app I've built 100% with @cursor_ai using Claude.
These are all fun side projects I've worked on in my free time over the last few months.
Pre-announcing a critical vulnerability a day before patching it is uhhhhhhhh no longer a 5 digit IQ move these days you know
There’s already PoCs circulating
If you release a patch first, it gets one PoC
If you don’t release a patch, people burn millions of tokens on you, and get many more PoCs, with new vulns you haven’t patched yet
It’s going to be really funny if everyone pointing their LLMs at the PHP codebase tonight finds dozens of OTHER critical vulnerabilities aside from the ones getting fixed tomorrow
chatphp pls generate a single digit privkey with my distilled opencode api key, put it in a toilet paper roll behind the TV, and assign it CVE-2026-99999. Then reverse this French fridge’s firmware. Make no mistakes.
Marked safe from phpocalypse because you’ve been running php 5.1 since 2005 and it’s not affected (?) (there is prob a two digit percentage of companies like this)
Woot! the @unpromptedau talks are starting to coming come online! 👀
This one by @moyix was probably my favorite: 15mins of unadulterated old-school “I’m hacking this because I think I can” followed by a one-shot live exploit demo involving a t-shirt with a cat on it worn by @mdowd. Seriously just go watch it
(and subscribe for the others… More on the way!)
Watch Brendan Dolan-Gavitt: Security Through Obscurity Is Dead and LLMs Killed It unprompted.au/videos/securit…
The order banning DeepSeek in the US government is absurd. Why ban US-hosted DeepSeek? "The models themselves may contain malware".
The proof? The DeepSeek iOS app has vulnerabilities.