Co-founder & CTO @ @MilgramAI • Author of bettercap, pwnagotchi, opensnitch, bleah, legba and a few other things.

Simone Margaritelli retweeted
My 30 year old refrigerator watching all the new ones being cyberattacked. 😂
65
1,228
18,140
241,219
Simone Margaritelli retweeted
We asked GPT-6 Astra to edit Qwen3.5-0.8B weights to improve math. It directly changed only 0.016% of weights, fixing 0.8B's reasoning loops & improving math up to 6x and even instruction following 3x, without gradients or training. We call this Weight-Space Programming: frontier LLMs can now natively read/write neural network weights! 🧵 Blog: rikiyat.github.io/blog/weigh…
1,850
5,601
44,666
5,135,416
Simone Margaritelli retweeted
BREAKING: Europe is under a massive widespread cyber attack right now Sweden, Belgium, Luxembourg, Estonia, Ireland the Netherlands and just now Finland are all experiencing disruptions to supermarket refrigeration systems causing food to go off. The attack is spreading...
2,311
11,775
60,565
8,301,018
Simone Margaritelli retweeted
1
15
159
5,356
Simone Margaritelli retweeted
Go to Google.com on your phone/pc Search “ocarina of time” Click the special thing that appears ❤️❤️❤️
3
5
567
Simone Margaritelli retweeted
CVE-2025-1974 (CVSS 9.8) is nasty. An unauthenticated attacker who can reach a vulnerable ingress-nginx admission webhook (port 8443) can inject malicious NGINX config, achieve RCE, and potentially steal cluster-wide Kubernetes Secrets. Preconditions: vulnerable ingress-nginx version + network access to the webhook (e.g. compromised pod or exposed endpoint). No Kubernetes credentials required.
15
44
261
120,481
Simone Margaritelli retweeted
42
637
8,404
123,880
New concept: SKYLAW.
Made with AI
1
1,316
By the way, in case anyone was still wondering whether they are completely useless, Binance holds SOC 2 Type 2, ISO 27001, and several other certifications.
162
456
4,795
251,595
Simone Margaritelli retweeted
open models are the future
haha, so apparently OpenAI are about to start training on your Daybreak Blue sessions, with no way to opt out. Literally stealing people's private work, as they do it, is cartoonishly evil. It also will presumably kill Daybreak usage by security researchers. Or at least, it should. The thing OAI have had to swear they are not doing to math researchers, they are now explicitly about to start doing to security researchers. Yet another reminder of the importance of open models.
22
21
706
17,707
Simone Margaritelli retweeted
haha, so apparently OpenAI are about to start training on your Daybreak Blue sessions, with no way to opt out. Literally stealing people's private work, as they do it, is cartoonishly evil. It also will presumably kill Daybreak usage by security researchers. Or at least, it should. The thing OAI have had to swear they are not doing to math researchers, they are now explicitly about to start doing to security researchers. Yet another reminder of the importance of open models.
90
201
1,490
200,906
Simone Margaritelli retweeted
eMudhra login to download customer's certs can be cracked Their 1FA login generates a OTP & sends it. It also sends a RSA public key to front end They haven't rate limited checks, so you can offline brute force 0 to 9999 encrypted with public key & find the OTP @ni5arga
49
250
4,023
326,484
Simone Margaritelli retweeted
what
today, we introduce a little mischief to the world. for four years, we’ve been brewing real brain cells on electrodes to understand how they compute. now, we’ve turned those discoveries into a video model anyone can use. from 0.5¢ a second, mischief 1 is at least 5x faster than its base and the cheapest image-to-video model on @fal and @OpenRouter. soon to be on @awscloud marketplace. it’s not a delusion anymore. biocompute is real, commercial and this is just the beginning. happy halloween.
15
71
2,027
263,020
Simone Margaritelli retweeted
Respectfully, get fucked.
57
43
1,045
49,433
AWS Fargate default 6.1 guest kernel is unpatched against CVE-2026-98432 and as far as I can see, MPTCP still enabled on it.
2
1
16
4,006
Simone Margaritelli retweeted
We have discovered a substantial number of vulnerabilities in the German legal system using LLMs. These may enable access to confidential documents, travel without an otherwise required visa, enforceable leave for soldiers at NATO’s JSEC, and more. Similar to computer systems, the written law can contain vulnerabilities that invite exploitation. In our blog post, we share a selection of vulnerabilities, and present potential exploits for each. To our knowledge, none of these have been previously recorded. We share only those vulnerabilities whose exploitation we believe would not cause serious harm. blog post: felixringe.com/legal-exploit…
132
339
3,984
444,648
A recent conversation inevitably comes to mind @S1r1u5_
23
16,457
Simone Margaritelli retweeted
Reading the reconstructed bytecode of the Binance EIP-7702 sweeper (`0x63e8...6fae`) is wild. This wasn't a generic drainer. It was custom-engineered for Binance 14's architecture: - Leaves exactly 1 ether behind (`bal - 1 ether`) when sweeping ETH so Binance's automated hot wallet queue wouldn't error on gas and trip alarms. - Uses raw `staticcall` + `continue` loops with custom error codes (`SweepItemFailed`) so one bricked or blacklisted ERC-20 wouldn't revert the $6B batch. - Includes a custom `callExecute` function to impersonate Binance 14 as controller of an external vault holding $823M in USDC. They leave a comment: "robberies could be prevented if getaway cars were slower." You can't fully blame EIP-7702, but it sped up the attack. Without 7702, draining 64 tokens plus an external $823M vault from a live exchange hot wallet meant fighting moving nonces across 70+ transactions. Defense systems would've killed it after tx #3. With 7702, Lazarus sprayed 50 consecutive nonces in one type-4 payload, turned an EOA into a custom proxy, and atomically swept billions in a single block. Ethereum core devs built the ultimate getaway car. Surgical state-sponsored engineering. This could be etched onchain: `if (bal > 1 ether) { to.call{value: bal - 1 ether}(""); }`
The Binance $5.6B drain is a masterclass in modern EVM exploitation. It wasn't a complex logic bug. It was an EIP-7702 delegation hijack: 1. Setup: Attacker funds 0x7c86 via Tornado Cash, deploys a sweep contract (0x63e8), and runs three live dry-runs on external wallets. 2. Execution: Attacker submits an EIP-7702 batch with 50 pre-signed authorizations (nonce n to n+49) to hit Binance 14's moving nonce window. 3. One authorization hits. Instantly, Binance 14 (an EOA) is reprogrammed to run the attacker's contract bytecode. 4. Execution looks totally organic: Binance 14 sweeps itself clean. Internal threshold alerts don't trigger because, from the nodes' perspective, the hot wallet is just executing its own transaction. 5. Binance 16 immediately auto-refills 28,000 ETH due to automated treasury rebalance scripts, feeding the exploit loop. The cold truth: you cannot forge an EIP-7702 delegation list. For this to execute, the attacker already held the raw private key or unconstrained signing access to Binance 14's HSM/KMS. But hey, 5.64 billion drained across ETH, BTC, and Tron. 2.54 billion frozen by Tether, Circle, Ripple, and World Liberty within hours. Code is law until the stablecoin admin keys log in. Binance got bailed out by the very centralized choke points the cypherpunks warned you about. Hardware wallets leak your home address. Centralized exchanges leak the keys to the kingdom. Self-custody on native, non-delegated chains remains the only honest baseline. At least you know what to avoid.
Community note
The quoted comment appears only in an AI-reconstructed source (explicitly labeled not original) uploaded to explorers; no source comments exist in deployed bytecode, and core features match independent decompilations/on-chain data. etherscan.io/address/0x63e8… gist.wavey.info/Ta3FgAxastgj42… x.com/thearsondragon…
110
306
1,996
287,900
Simone Margaritelli retweeted
Fun Fact: Claude Code's VS Code Extension had a trojan in it today and it got literally zero coverage (tomorrow will be worse)
6
9
106
7,177