I chat to @brutecat sometimes and I’m always really sincerely impressed by how he puts together logic and the way he’s rationalising his way through problems. I didn’t have a deep grasp of Google, and just even being able to reference his blog posts to understand the Google stack was really invaluable.
All pharmacies should be legally mandated to have a seat with a PlayStation that you can use while your girlfriend canvasses the pharmacy like it’s a crime scene
I can't stress it enough when I say I would rather commit ritualistic japanese suicide and die a warriors death than sit around training bug bounty platforms to automate me out of the pipeline with my bug reports
honestly if you can't make money in an age where you can literally ask a computer to hack something and it just does it for you you don't deserve the money anyway
How the fuck does an account recovery flow make it onto Facebook where you can just ask an LLM to give you a password reset for someone else’s account?
Found a cool bug at Meta.
From misconfigured Grafana instance to R/W access on 507 private Meta repositories.
Wrote up the full chain here:
sectricity.com/blog/misconfi…
$157k bounty awarded by @metabugbounty
I’ve got an old edge wallet of mine I’m trying to crack that I know has like $80,000 in it, so I can promptly give that money to NVIDIA and buy more GPUs.
I managed to RCE Fortune 500 companies and made over $50,000 with this technique.
A new npm supply chain technique we just disclosed. The trick is dumb-simple.
We call it npx Confusion.
🧵