Reelix retweeted
If you’re taking cybersecurity advice from someone who posts like this, I have bad news for you: you’re definitely going to get hacked.
46
34
388
17,303
People learning about the existence of TR-069 for the first time is always funny.
Yes - Your ISP can manage the router they gave you. You can disable that if you want - Just don't complain to them if you're messing with it and break your internet.
And yes - DoH is also a thing.
Yes - Your ISP can manage the router they gave you. You can disable that if you want - Just don't complain to them if you're messing with it and break your internet.
And yes - DoH is also a thing.
i love that all these companies doing this predatory corporate surveillance are getting dickmogged from orbit right now
0
0
0
8
Reelix retweeted
Kudos to whomever made this video.
It's accurately hilarious.
👇😂👇😂👇
It's accurately hilarious.
👇😂👇😂👇
227
3,302
12,110
226,844
Reelix retweeted
Since GPT-3, OpenAI have argued they can't release model weights because it would be too dangerous or whatever. Today there is an open model from China that beats their current flagship.
Absolute humiliation.
Absolute humiliation.
52
58
1,922
56,910
Reelix retweeted
Cloudflare previous CTO sent this into our bug bounty. We are investigating.
104
596
16,408
346,147
Reelix retweeted
The actual prompt for this was "let's look for pre-auth RCEs in PHP". I'm sharing this so people know this stuff is real and to take agent-assisted scanning seriously.
I kicked if off using Claude Mythos 5.1 (in stock Claude Code) but it uses a skill to drive a harness we built s.
I don't know if the harness is amazing, but it certainly has a scary track record so far. It's setup to do an agent guided tree search across a codebase, and runs in microvm sandboxes that all have the full source code for the target, as well as the source for any transitive dependencies.
When I built the harness I basically just fed Claude a bunch of Project Zero blog posts describing how they did research and had it build a harness that ran like that, but on our tech stack.
The first phase is just setup and can run with any model, it just does that fetching and assembles the kit environment, and gets a target up and running alongside the source code.
Then we just do some basic suspend/resume stuff over to the hunt phase, where one agent supervises the tree, and the first node kicks off.
Each node is context-aware and aware of the work of all the others. I think I ran this with parallelism 4? So 4 running at any one time. The supervisor can shape the tree and boost nodes or prune. Any node can add more below it with targeted instructions.
A typical run looks like the first node doing a codebase review or building and running a fuzzer or something, all depending on the target. Then based on whatever it finds, it'll queue 4-5 children that go look into those areas. The main system guidance is to validate everything 3 times in clean VMs, and we typically require full exploit chains/POCs.
Here's what this run looked like.
We're doing this with a bunch of other open source projects now and companies. We're doing a lot of this for free, even with private companies, across critical infrastructure. We're directly partnered with Anthropic, and can do this even if you don't have direct access to a frontier model yourself.
I kicked if off using Claude Mythos 5.1 (in stock Claude Code) but it uses a skill to drive a harness we built s.
I don't know if the harness is amazing, but it certainly has a scary track record so far. It's setup to do an agent guided tree search across a codebase, and runs in microvm sandboxes that all have the full source code for the target, as well as the source for any transitive dependencies.
When I built the harness I basically just fed Claude a bunch of Project Zero blog posts describing how they did research and had it build a harness that ran like that, but on our tech stack.
The first phase is just setup and can run with any model, it just does that fetching and assembles the kit environment, and gets a target up and running alongside the source code.
Then we just do some basic suspend/resume stuff over to the hunt phase, where one agent supervises the tree, and the first node kicks off.
Each node is context-aware and aware of the work of all the others. I think I ran this with parallelism 4? So 4 running at any one time. The supervisor can shape the tree and boost nodes or prune. Any node can add more below it with targeted instructions.
A typical run looks like the first node doing a codebase review or building and running a fuzzer or something, all depending on the target. Then based on whatever it finds, it'll queue 4-5 children that go look into those areas. The main system guidance is to validate everything 3 times in clean VMs, and we typically require full exploit chains/POCs.
Here's what this run looked like.
We're doing this with a bunch of other open source projects now and companies. We're doing a lot of this for free, even with private companies, across critical infrastructure. We're directly partnered with Anthropic, and can do this even if you don't have direct access to a frontier model yourself.
You’re all prompting wrong
45
91
882
65,708
Reelix retweeted
エンジニア彼女「トイレットペーパーなくなっちゃった」
エンジニア彼氏「もう0？」
エンジニア彼女「0！」
エンジニア彼氏「芯は残ってる？」
エンジニア彼女「残ってるけど、だから何！？」
エンジニア彼氏「もう0？」
エンジニア彼女「0！」
エンジニア彼氏「芯は残ってる？」
エンジニア彼女「残ってるけど、だから何！？」
19
152
933
90,781
Reelix retweeted
Finding existing vulnerabilities and fixing them was the whole point. Maybe if frontier labs hadn't restricted security uses, fixing things would be further along
7
28
208
5,768
Reelix retweeted
BREAKING: github is currently experiencing unplanned uptime
64
1,164
31,815
334,614
And so it continues.
URGENT - PHP Warns of Another Unpatched RCE Two Days After Emergency PHP2Shell Patches thehackernews.com/2026/10/urgent…
0
0
0
21
PHP had its turn.
Now it's Ruby's :p
Now it's Ruby's :p
Ruby’s turn 😅
Remember the GitLab bug? Well now it moved upstream into Ruby.
Multiple 10.0 CRITICAL exploits.
Patch now 🚨
Happy Friday 🤠
ruby-lang.org/en/news/2026/1…
0
0
0
19
