Pentesting @discord, @GitHub, @ValveSoftware, @X prev. Quality Assurance @PlayPhasmo & @discord prev. Community Management @G2esports icon: @T_blence
21
Joined August 2018
- Tweets312
- Following1.9K
- Followers740
- Likes7.1K
Pinned Tweet
Redacted by Counsel:
A supply chain postmortem on CVE-2025-67842, CVE-2025-67843, CVE-2025-67844, CVE-2025-67845 and CVE-2025-67846
heartbreak.ing
hey, so this is false!
no one is 'traceable' or any of the sort, no ones IDs, verification details, or otherwise anything submitted to Persona or its customers has been leaked or is able to be viewed by unauthorized people.
discord’s age verification vendor Persona just got hacked.
openAI + US government + persona have been running identity surveillance since nov 2023
anyone who verified age on discord is now traceable.
nothing is private anymore.
vmfunc.re/blog/persona
MDL retweeted
portswigger.net/polls/top-10…
my blogpost with @hackermondev and @MDLcsgo is in the nomination for top 10 web hacking techniques!
MDL retweeted
we pwned x, vercel, cursor, and discord through a supply-chain attack
news.ycombinator.com/item?id…
MDL retweeted
how to hack discord, vercel and more with one easy trick
kibty.town/blog/mintlify/
December 18th, 2025
12:00 PST/15:00 EST/20:00 UTC
xyzeva (kibty.town/blog)
MDL (heartbreak.ing)
daniel (gist.github.com/hackermondev…)
CVE-2025-67842
CVE-2025-67843
CVE-2025-67844
CVE-2025-67845
CVE-2025-67846
w/ @hackermondev, @MDLcsgo
