185 Photos and videos
New Robinhood phishing chain that's kinda beautiful:
1. Attacker creates an RH account using the Gmail dot trick of your email (same inbox, different address)
2. Sets device name to HTML
3. RH's "unrecognized activity" email renders the device name unsanitized (html injection)
The result is a real email from noreply@robinhood.com, DKIM pass, SPF pass, DMARC pass, with a phishing CTA
Just because it's real, doesn't mean it's safe... $HOOD
179
368
3,809
2,971,567
Abdel retweeted
25 Aug 2025
Day 1! Come say hi if you are in NYC this week! 🏇
25 Aug 2025
Excited to share we’ve raised $2.75M for @CubbyLaw from @LudlowVentures, @SamHinkie, and @PSUMVC.
We’re building the first AI teaching assistant for law students, powered by our own legal intelligence model trained on thousands of professors’ syllabi, past exams, outlines, and grading rubrics.
Cubby started as a horizontal AI research tool, but when law students began adopting it fast, we went all in.
Law school prep is broken:
• Curve-based grading
• 100 hrs building outlines
• Legacy tools students still pay thousands for
Cubby brings it all into one connected workspace: case briefs, outlines, and practice exams, calibrated to how your professor teaches and tests.
Law school is our first step toward a new era in legal tech.
5
1
87
17,603
Excited to be apart of this 🏇
25 Aug 2025
Excited to share we’ve raised $2.75M for @CubbyLaw from @LudlowVentures, @SamHinkie, and @PSUMVC.
We’re building the first AI teaching assistant for law students, powered by our own legal intelligence model trained on thousands of professors’ syllabi, past exams, outlines, and grading rubrics.
Cubby started as a horizontal AI research tool, but when law students began adopting it fast, we went all in.
Law school prep is broken:
• Curve-based grading
• 100 hrs building outlines
• Legacy tools students still pay thousands for
Cubby brings it all into one connected workspace: case briefs, outlines, and practice exams, calibrated to how your professor teaches and tests.
Law school is our first step toward a new era in legal tech.
2
3
830
Throwback to when I found a bypass to Adidas splash.
It worked because Adidas development team still returned developer cookies on a GET to the staging splash page, even with invalid auth. I'd GET staging, take the hmac, transfer to the live domain, and bypass splash.
8
1
119
28,887
.@footlocker really has the trinity of horrible user experience.
1. @queueit, slow for users and easy for bots.
2. Cacheing mutating requests via @fastly (which they specifically recommend not to do)
3. @data_dome, which isn’t a real antibot and bans real users constantly.
4
3
91
Competition in bot development is at its all time peak right now. The amount of developers trying to outplay and step up each other is nothing like we’ve ever seen before. Users are the happiest they’ve been. Developers are the most stressed they’ve been (to simply keep up).
13
9
133