New rule you can only bolivate and soap box about cyber security only if you have at least 5 years in the sysadmin trenches.
Getting tired of takes from people who have no idea how Computers or networks work
Getting tired of takes from people who have no idea how Computers or networks work
7
3
34
941
Hensen Juang retweeted
Of course that's your contention. You’re a first time cybersecurity poster. You just got finished reading Dario’s blog. You're gonna be convinced of that til next month when you learn what patching is, then you’ll still say ban open models as this was never about security for you
15
20
180
3,708
Fucking Claud now kicks me to opus if I ask medical question or genetics related question.
Ffs ant bro's I am not trying to make a bio terror weapon by asking Claude who my genetic ancestors were
Ffs ant bro's I am not trying to make a bio terror weapon by asking Claude who my genetic ancestors were
6
0
52
1,321
Hensen Juang retweeted
Person who is reverse engineering his tv gets banned from OpenAI
You aren't allowed to stop your tv from spying on your family. You have to ask for permission
Or, maybe, maybe we accelerate
You aren't allowed to stop your tv from spying on your family. You have to ask for permission
Or, maybe, maybe we accelerate
banned for reverse engineering work? that’s wild
oh well, -$500, and a bunch of banked resets) but gained motivation to get 3 more machines and finish my cluster.
i have never used openai to exploit or find vulnerabilities, only local reverse engineering which tripped daybreak.
211
1,415
19,004
569,679
Not a good look oai bro's /Sama
banned for reverse engineering work? that’s wild
oh well, -$500, and a bunch of banked resets) but gained motivation to get 3 more machines and finish my cluster.
i have never used openai to exploit or find vulnerabilities, only local reverse engineering which tripped daybreak.
5
4
103
2,781
Hensen Juang retweeted
The last 10 unpatchable hardware vulnerabilities. 9 requires physical access. Hooking up cables, interposers etc for voltage glitching or EM fault injection. PACMAN can only be triggered from software with a preexisting memory bug. Arm compiler patches mitigate
AI models are now able to hack processors directly. Good luck to patch this. Everythiny is compromised, every system can be hacked by AI.
1
4
36
4,360
Hensen Juang retweeted
in less technical terms: a method for permanently taking back control of your TV, so long as your tv is arm64-based is looking promising as a free and open tool we can release.
if you want know some of what i discovered on my 2024 era samsung tv read my latest tweets.
if you want know some of what i discovered on my 2024 era samsung tv read my latest tweets.
after posting privacy gore & several people reporting unplugging their samsung TVs i can finally share good news.
a candidate vulnerability not specific to samsung TVs has been discovered to persistently defeat uep style enforcement.
this would work for all smart TVs with root.
29
61
1,204
24,346
Lol no this is not how dns works lot local mirriors nearly impossible to shut them all down
@RokoMijic @basedjensen @grok Technically, all you need to do is shut down the DNS systems. Of course, nothing is stopping people from just using the phone lines to connect directly.
To fully stop the internet, you'd have to disable all phone and satellite connections.
4
0
20
1,146
Hensen Juang retweeted
The people complaining about AI finding security vulnerabilities apparently prefer a world in which APTs and intelligence agencies continue freely infiltrating all of the world's companies, as they have been doing for decades.
Notably, those don't usually result in CVEs.
Notably, those don't usually result in CVEs.
9
26
248
5,442
Hensen Juang retweeted
after posting privacy gore & several people reporting unplugging their samsung TVs i can finally share good news.
a candidate vulnerability not specific to samsung TVs has been discovered to persistently defeat uep style enforcement.
this would work for all smart TVs with root.
a candidate vulnerability not specific to samsung TVs has been discovered to persistently defeat uep style enforcement.
this would work for all smart TVs with root.
30
103
2,271
66,108
Hensen Juang retweeted
PILLOW HAS FALLEN
🛑 A filename is enough to trigger OS command execution in Python's widely used Pillow image library.
CVE-2026-112900 abuses how Pillow passes EPS filenames to Ghostscript.
What you need to know ↓ thehackernews.com/2026/10/critic…
10
41
1,281
53,076
Hensen Juang retweeted
turns out it classifies what audio it hears, before reporting back to samsung.
sensor preferences, dog-barking and baby-crying event counters, and camera streaming duration are built into telemetry paths.
sensor preferences, dog-barking and baby-crying event counters, and camera streaming duration are built into telemetry paths.
this is pretty evil and clever.
so if your samsung TV model doesnt have a microphone, it will look for connected devices with one, such as a soundbar or a connected bluetooth device.
this gets shipped off to bixby.
145
1,103
9,473
494,792
Hensen Juang retweeted
Here's why the eMudhra screwup is of colossal proportions..
Any embedded/IoT device that trusts their compromised roots and never checks revocation accepts forged signatures forever.
A permanent hole in every device.
Any embedded/IoT device that trusts their compromised roots and never checks revocation accepts forged signatures forever.
A permanent hole in every device.
Everyone who owns hardware with abominable software (like Sonos players) owes a debt of gratitude to Venkatraman Srinivasan and the rest of the eMudhra gang in Bengaluru, Karnataka. Without their gross negligence, it'd be a lot harder to counterfeit certificates and fix the sw🙏
13
73
753
27,675
Hensen Juang retweeted
"Sorry we didn't get back to you yet, we've been too busy on Twitter and trying to keep our investors happy"
Unbelievable statement from eMudhra!
bugzilla.mozilla.org/show_bug.cgi?i…
Unbelievable statement from eMudhra!
bugzilla.mozilla.org/show_bug.cgi?i…
16
57
830
21,470
