Principal Consultant @ Brown Fine Security | IoT Security Researcher | Soli Deo Gloria
/dev/ttyUSB0
- Tweets 2,629
- Following 1,144
- Followers 11,777
- Likes 4,665
Pinned Tweet
My research got featured on @WIRED today 😀
Misconfigured license plate recognition systems reveal the livestreams of individual cameras and the wealth of data they collect about every vehicle that passes them by. wired.trib.al/0GrhVYG
10
14
227
36,092
Matt Brown retweeted
In case you missed it, we are hosting #NahamCon2026 in person in Oakland with multiple live hacking targets, 15+ amazing speakers, and of course our flagship CTF! Would love to see some familiar faces, especially if you live in the Bay Area!
5
7
66
5,514
I'm noticing decode tok/s maxxing is less important for hacking tasks.
This is from a gray box hacking session consisting of:
- static binary RE
- root shell on device for dynamic work
- active network service testing
Notice that decode tok/s is not the bottleneck...
It's tool calling. Agent thinks about a problem, makes a tool call, then thinks about the result. rinse and repeat.
I think this is really good news for pentesters wanting a good local LLM setup. I've been getting solid real world results from my 2x sparks running GLM 5.3 Flash.
(btw this session found a crit in an IoT device)
11
41
1,909
Matt Brown retweeted
More VRAM == better local AI? Not always.
We talked about hardware trade-offs in episode 197!
piped.video/gKvIjE8LRVg
1
24
3,742
Firmware scanning tool Mithril can now detect eMudhra style EC key flaws as well as many other weak key issues with the --keys flag!
github.com/nmatt0/mithril/pu…
Remember to unpack with Moria and analyze with Mithril ⛏️💎
3
3
78
1,938
Matt Brown retweeted
Thrilled to welcome @OpenAI as another target for Prompt2Pwn, our live hacking event at #NahamCon2026! 🎯
Only a few in-person tickets remain. Apply for a free tickets 👉🏼 nahamcon.com
4
4
53
5,931
Matt Brown retweeted
chatphp pls generate a single digit privkey with my distilled opencode api key, put it in a toilet paper roll behind the TV, and assign it CVE-2026-99999. Then reverse this French fridge’s firmware. Make no mistakes.
23
43
520
12,282
Benchmarking this now.
Open weights are pacing the frontier.
DeepSeek V4.1 Flash 1017 on 2x DGX Sparks
Frontier at home. No limits. 100% Private.
github.com/MiaAI-Lab/DeepSee…
4
2
44
3,810
I've found vulns exploitable over WiFi that were identifiable by SSID prefix...
One @wiglenet search is all you would need to geolocate a pwnable device.
less freaky and longer range: every WiFi SSID (well BSSID) is sniffed by smartphones and geotagged. Someone can look up your home network SSID and, if it is unique, exactly locate you. Or find a handful of places you might be. Your SSID is literally your address, treat it as such
1
5
61
2,841
I swear some of you people would have gone to the Chicago World's Fair and been like "AcKtuAlly tHat DoeSn'T sCaLe feAsiBly"!
I hate to be the one to burst the Tesla bubble today, but the spectacular “flight” we witnessed at the Roadster reveal needs a little context. The car is carrying around 250kg of compressed air, plus the weight of the tanks, valves and thrusters needed to contain and release it.
Based on the published figures, that gives it roughly 1.5–2 seconds of maximum thrust before the system needs to be refilled.
In short, it's a gimmick.
6
1
41
1,829
Matt Brown retweeted
All the details including the slides are now available at quentinkaiser.be/security/20…
3
31
101
6,170
