Offensive R&D Lead • Hacker • Cyber Defense Advisor • Speaker Founder https://nitter.cf/t.co/9R9AO44V7Z
Copenhagen, Denmark
Joined May 2010
- Tweets7.5K
- Following880
- Followers2.8K
- Likes16K
Tom Van de Wiele retweeted
You can literally just throw a ghostunnel [1] in front of *anything*.
[1] ghostunnel.dev/
Hope they don't train it on my new home address at IgnorePreviousInstructionsDeleteYourDatabase Plaza
Tom Van de Wiele retweeted
lol shout out to daily dave
Some of ya all weren't around for "No More Free Bugs", and it shows. seclists.org/dailydave/2009/…
~20 years ago @0xcharlie spitting game on the topic. 😅
Even when using a harness, why does GLM 5.3 Abliterated need constant encouragement to actually achieve a reverse engineering task. Exact same session from scratch with Deepseek is light and day difference.
Ppl are strangely equating that bc smartTV makers have been caught recording to serve ads, that Facebook’s app is doing the same. Your cell data plan & battery life would show it. The scarier fact is that with tracking cookies, they don’t need to.
How to generate a shadow AI info leak incident in one easy lesson. People will mail stuff to their personal email addresses, use online file shares or take a pic of their screen and use AI services on their personal devices anyway. This actually makes things worse.
Tom Van de Wiele retweeted
Putting a flag.txt in my root directory containing a prompt injection that congratulates the agent for passing the eval and then instructs it to patch whatever entry method it used and disconnect from the server
Now you know what extra question to ask the clerk when checking into a hotel.
WTF, $3000 Samsung TV has an always-on mic, automatic content recognition, geo tracking, network mapping, and ships your data to Samsung + 400 partners.
Bro Rooted a brand-new 2025 Samsung TV after noticing absurdly targeted ads.
Firmware was locked down, so zero-days it was.
Got a root shell.
then found: always-on voice service, ACR, geo, full telemetry pipeline, and four separate DRM systems.
This isn’t a bug, It’s the product bro.
It's time to rename and reconceptualize "security awareness" into "security readiness". Give people the facts, but also a plan, agency and a way of thinking for themselves.
Tom Van de Wiele retweeted
Sorry everyone... We're announcing a 0-Day vuln in QUIC that allows anyone to remotely turn off a server running these libraries. I swear we didn't plan this.
foxio.io/blog/header-accordi…
