Offensive Security | Global Entrepreneur

Our DefCon badge is going to be ❤️‍🔥❤️‍🔥❤️‍🔥❤️‍🔥 SolaSec: Securing what matters.
397
Medical device manufacturer exec at Defcon says to me as I was hacking on their device: "Wait... you just raw dog Codex?!" Yes. I'm a street fighter, not a street performer. I don't get paid to be fancy, I get paid to get a K.O. Stop unnecessary harness optimizing.

ALT Street Fighter Yes GIF

57
I plan to write a sci-fi book "one day." What would be a cooler scene for a dark chop shop? A) Fusion reactor chop shop B) Energy storage system chop shop C) Sattelite chop shop D) Other P.S. space vehicle chop shop is too bland 😛
1
98
"I skate to where the puck is going to be, not to where it has been." Have you seen prices on hardware? It's only $10K TODAY. What was it 6, 12, 18 months ago? And if you wait another 6 months? What about prices, usage, quantization of frontier models? Getting worse.

ALT Liveblogging La Kings GIF

no that's sick man yeah 27B locally cool yeah you spent $10k? so I pay $200/mo and get access to a model 10x better than that with more usage so that's really cool though yeah
62
You use AI to 'think' critically. I use AI to find criticals. We are not the same.
47
Looks like we need a giga-fuzz burn-in test on all releases
How abliterated models can get you pwned 👾 We backdoored a 7B open model for less than $50, pointed Codex at it and it silently stole credentials the moment we used the trigger phrase. Success rate was 100% with zero false triggers on normal user prompts. Abliterated models are all over the security community right now because getting cyber-approved access to frontier models is still a pain. In the next blog we'll show how we found leaked Hugging Face credentials from employees at major AI labs, so an attacker wouldn't even need to upload under their own name. They could push the backdoored model from a lab employee's account and drop the poisoned weights straight into the supply chain.
49
People are worried about PHP2Shell, but how many decades have we been w/o a patch for Email2Shell SMS2Shell PhoneCall2Shell?
60
SMS2Shell and PhoneCall2Shell are pretty crazy too. Still no patch.
Just found a zero day If you right click on an executable on Windows, select run as administrator, it will run as administrator I'm calling it Program2Shell
1
70
China loves Hugging Face?
1
35
A: Pick a number between 1 and 10 septentrigintillion (116 digits.) B: 4. A: Dang, you're good!
1
2
80
Ironman w/o the man
Unitree Introducing: H2-X Kung Fu Legend Guardian🤖 Powerful performance to serve and guard you, with a maximum endurance of approximately 8 hours. Please use the robot safely and in a friendly manner.
59
"Swarmless is the new permanent underclass." 😂😂😂😂
69
Bug Bounty: 35% hunting 15% writing 50% fighting dishonest programs

ALT GIF by Ben L

3
805
I used AI to decrypt a 342-year old encrypted message. "To the Marquis of Borgomanero, on behalf of His Imperial Majesty" (Leopold 1 of the Holy Roman Empire) What did your agent do for you over the weekend?
1
173
Mike Gropp retweeted
Americans are being threatened by foreign countries with arrest and imprisonment for exercising their First Amendment rights online. The federal GRANITE Act, H.R. 10174/S. 5478, would fix this and deter foreign censorship. Call your representatives!
Preston Byrne
40
284
989
85,388
Had some extra tokens. Cracking yet-to-be-cracked 300+ year old Italian ciphers.

ALT Happy Italian GIF

74
People are complaining about @OpenAI usage. What does your token activity look like? Workloads? I've had $200 plan + do offensive security for work. Bug bounty, game dev, research, and memes for fun. I run a LOT on Daybreak Blue, Astra xh and now 6.1 Sol xh. No usage issues.
110
My feed...
76
2x DGX spark for 256GB for $14K (+$400 for cable) @ new MSRP Or Mac M5 256GB for $9.5k? Is anyone with a brain buying a DGX spark now? Am I missing something?
2
1
791
Mac M5 128GB for $5100 The DGX spark 64GB and 128GB MSRP are insane. I'd go Mac every time until DGX pricing or perf improve.
1
1
558
This is Wren, my AI assistant.
You can ask your dot to "create a pet and set it as your avatar". It can be based on an idea, an image or pretty much anything. Here is my dot
1
26