I just completed PHP2Shell room on TryHackMe! tryhackme.com/room/cvephp2sh… #tryhackme via @tryhackme
0
0
0
5
vu1nss🏴☠️☢️☠️🥷 retweeted
I keep telling this to every developer I know
if you run npm install on your bare macbook in 2026 you are waiting to be pwned
you need to develop inside a container
one bad vscode extension, one poisoned crate, and every credential on your machine is gone. that's not even paranoia anymore, it's just the baseline
apple/container spins up light linux vms on apple silicon
so I’ve updated my agent skill remote VMs setup and management to support local ones
use /remote-computer, create a local apple container for multi-language development
it sizes the VM to your CPU/RAM/disk, sets up key-only SSH on a host-only IP, no published ports, no home dir mount, and ports your git identity and commit signing. also works with AWS and GCP VMs
if you run npm install on your bare macbook in 2026 you are waiting to be pwned
you need to develop inside a container
one bad vscode extension, one poisoned crate, and every credential on your machine is gone. that's not even paranoia anymore, it's just the baseline
apple/container spins up light linux vms on apple silicon
so I’ve updated my agent skill remote VMs setup and management to support local ones
use /remote-computer, create a local apple container for multi-language development
it sizes the VM to your CPU/RAM/disk, sets up key-only SSH on a host-only IP, no published ports, no home dir mount, and ports your git identity and commit signing. also works with AWS and GCP VMs
22
40
605
52,828
vu1nss🏴☠️☢️☠️🥷 retweeted
many people aren’t aware that their agent sessions are being sold for money
there are literally companies whose business model is to help other companies sell people’s agent sessions (search for “magma ai” if ur curious)
be careful what you use and install
there are literally companies whose business model is to help other companies sell people’s agent sessions (search for “magma ai” if ur curious)
be careful what you use and install
47
21
474
32,598
vu1nss🏴☠️☢️☠️🥷 retweeted
Perhaps, in another universe, their story is about more than Reset, Bot, and Code.
229
151
3,074
346,409
vu1nss🏴☠️☢️☠️🥷 retweeted
CISO: We need to defend against agent swarms!
Meanwhile…Suzie in accounting, with admin on the finance server where a scheduled task is running as a Domain Admin, runs her 7th clickfix payload of the day.
Meanwhile…Suzie in accounting, with admin on the finance server where a scheduled task is running as a Domain Admin, runs her 7th clickfix payload of the day.
37
71
628
26,904
vu1nss🏴☠️☢️☠️🥷 retweeted
Dahil bagsak na ekonomiya, we should skip the traditional Christmas party this year.
Give cash bonuses directly to our employees instead.
Give cash bonuses directly to our employees instead.
39
1,142
7,704
144,703
vu1nss🏴☠️☢️☠️🥷 retweeted
As an ex Microsoft employee, I know at least 6 people taking this offer.
And another 2 who are don't want to but are terrified what will happen to them in the following year if they don't.
And another 2 who are don't want to but are terrified what will happen to them in the following year if they don't.
NEARLY 1 OUT OF 3 (60,000 EMPLOYEES) AT MICROSOFT BEING OFFERED VOLUNTARY TERMINATION
Emails should be going out any minute to those receiving the offer.
Absolutely insane.
92
116
2,283
128,059
I love to see how OpenAI and Anthropic is killing REA because people are starting to use it to discover stuff that they and big vendors don't want us to find out
What a gang of hypocrites ...
What a gang of hypocrites ...
0
0
0
33
vu1nss🏴☠️☢️☠️🥷 retweeted
There’s a reason I tell everyone to skip Tailscale and setup WireGaurd directly
Minimize the attacks surface areas, stop adding unnecessary links that are a supply chain disaster in the making
Minimize the attacks surface areas, stop adding unnecessary links that are a supply chain disaster in the making
‼️ Researcher Erica Windisch skipped coordinated vulnerability disclosure and published 11 unpatched Tailscale flaws.
In her lab, Tailscale SSH race conditions let one hacked device get root on other servers and add a rogue node.
87
55
931
96,777
vu1nss🏴☠️☢️☠️🥷 retweeted
Prediction: Commoditized agentic attack tooling (like ARTEX and Cairn and CyberStrikeAI) is going to make traditional cyber threat intelligence clustering/attribution very challenging
9
7
96
7,817
vu1nss🏴☠️☢️☠️🥷 retweeted
Do not reverse engineer anything using Codex or Claude because you could get banned so keep that in mind specially if you have an expensive Sub or a lot of credits.
81
25
736
38,588
vu1nss🏴☠️☢️☠️🥷 retweeted
want to know why anthropic employees suddenly started leaving?
because the 5h limit finally rolled out internally
because the 5h limit finally rolled out internally
78
31
1,310
130,676
as much as I love OpenAI's models, I truly dislike their gatekeeping
BREAKING: OpenAI just banned a man for fixing his own TV.
He was taking it apart on his own computer. OpenAI flagged it as “cyber abuse” and shut his account. He says he lost $500.
People say Claude stopped helping with this kind of work this week too.
You paid for the TV, paid for the AI and you still need their permission.
This is why I run open models.
Nobody can ban you from your own computer.
0
0
0
39
