Kyle (@krazyd0h) header
Kyle (@krazyd0h) profile picture

Boop/Bop/Beep - Can we please try to pretend we understand what Reasoning and Logic are? Maybe apply them to a couple arguments? Please?!?

Joined August 2007
Photo by Kyle (@krazyd0h)Photo by Kyle (@krazyd0h)Photo by Kyle (@krazyd0h)Photo by Kyle (@krazyd0h)Photo by Kyle (@krazyd0h)Photo by Kyle (@krazyd0h)Photo by Kyle (@krazyd0h)Photo by Kyle (@krazyd0h)Photo by Kyle (@krazyd0h)Photo by Kyle (@krazyd0h)
Replying to @krazyd0h
Me doing Trial by Twitter Combat...
1
11
In lieu of flowers, memorial contributions may be made to: Johns Hopkins Alzheimer’s Disease Research Center Fund    alzresearch.org/giving/ Alzheimer’s Foundation of America Caregiver Resources     alzfdn.org/donate/ Photo Credit: Tommy Garcia
6,088
73,576
16,758
316,629
9,387,515
A Somali warlords daughter got into congress with fake ID and fake credentials but there’s no voter fraud guys.
224
6,131
101
56,506
499,358
fellas, if your girl: - listens to everything you say - tracks your app usage - wants to know about your youtube interests that's not your girl. that's a samsung smart tv
70
1,318
31
21,937
250,036
The way frontier labs have restricted access to cyber capabilities makes no sense. If you're considered a "defender" you're not allowed access to the "offensive" versions of the models (the ones that can do development/validation of malware and exploits). So for example, if you want to build some sample malware to test a detection system, nope. Or if there's a major crisis due to a critical vulnerability in PHP and you need to rapidly triage fake exploits to see if there are any real ones floating around so you can warn people, nope. Want to build a remote code exploit to make sure the detection rules you plan on proposing to the clients actually work? Hard nope. You gotta call your red team friend and wait for them to do your job for you, because "defender" are only allowed to play in the sandbox with the children. Not an expert, but I think that the ability to triage in-the-wild exploits during a major crisis affecting 40 million systems is possible maybe important. And then they want to ban abliterated open weight models, which half of the people are only using because frontier labs will only give them access to lobotomized models.
33
70
12
489
27,468
Just found a zero day If you right click on an executable on Windows, select run as administrator, it will run as administrator I'm calling it Program2Shell
196
514
47
11,212
217,515
CleanYourTV v2.7 is out 📺 What's new: • 35 new TVs from 9 new brands • Wallpapers that change with the time of day • Two new themes • Game controllers that just work • Safer defaults that protect your TV 230 PRs merged from 122 contributors since the last release 🙏
CleanYourTV just crossed 20K stars on @github 🌟 Highlights of the last 3 releases (400+ PRs): ✨ v2.6: Add-ons, new looks, instant Home ✨ v2.5: Edit the dock, pick wallpapers ✨ v2.4: Settings, app reorder, quick settings 213 TV models, 63 brands, countless optimizations!
200
481
43
6,164
551,555
It's one of those fun times when infosec people start saying stuff like "you should buy some devices that work without an Internet connection, like pistols, shotguns, and rifles."
19
150
16
2,487
121,628
"Even Heaven had to go to war to protect its peace. Never apologize for drawing a line that kindness couldn't hold."
65
4,914
75
22,647
194,132
Could Fortinet please have one of the latest LLMs review and unfuck the source code they ship? The tokens would probably cost less than one of their appliances. And every customer would benefit from the fixes.
Network edge devices can give threat actors a direct path into an organization. In a campaign linked to threat actor #k0t, Group-IB and NyxLab observed large-scale targeting of internet-facing FortiGate, FortiWeb, and Palo Alto GlobalProtect systems, with more than 70,000 exposed credentials and related data identified. The operators combined vulnerability exploitation and brute force activity to gain initial access, then moved deeper into victim environments using tools such as NetExec, Mimikatz, and Impacket, while MeshCentral and AdaptixC2 provided persistence and command-and-control. The investigation also observed data exfiltration through Rclone to Wasabi S3 and MEGA. Overlaps with organizations later listed by #ransomware groups including #Qilin and #TheGentlemen raise the possibility that the operators may be acting as Initial Access Brokers, although the relationship remains unconfirmed. Read the full technical analysis: link.group-ib.com/4yDaMQY
15
20
1
173
12,878
So it turns out that Ukraine's issues with Starlink were caused by Ukraine. Starlink terminals disconnected at speeds above 160 KPH, as determined by the Starlink terminals internal GPS. To get around this, Ukraine hacked the Starlink terminals to think they were stationary regardless of speed. SpaceX figured this out, and updated the system software to detect excessive speed by seeing how rapidly the terminal switched from on satellite to another. This broke Ukraine's hack, and Starlink would no longer work at high speeds. Ukraine was using Starlink in a way that violated the terms of service. Starlink figured it out and stopped it.
1,543
8,634
944
47,262
1,748,661
Gamers celebrate the closures of these studios because we've already mourned them a decade ago when they really died. You're crying over the zombie.
340
2,354
71
32,059
213,897
having a gf is insane because it's like a critical security vulnerability that you let in your house
178
1,597
127
38,534
686,292
Kyle retweeted
Ronald Reagan eats the same Big Mac as you Tim Cook uses the same iPhone as you the NSA runs the same abliterated GLM-5.3 as you
44
192
17
4,981
108,321
This is actually pretty damn amazing. I'm highly impressed.
introducing pwn.watch 👀 one place for following all the live security incidents it serves rss + llms.txt so u can paste to your clankers tell them to watch it on a schedule and sleep at night 😴 100% free but kitze.io/sponsors will appear on it ❤️
1
81
BREAKING NEWS: Texas GOP candidate Brandon Herrera once told a fellow Halo player on Xbox Live that he would, “…sleep with his mother and drink all of his juice boxes the next morning.” More to come.
Texas GOP House Candidate Brandon Herrera Says Kittens Should Be Sent to Chinese Restaurants
Readers added context they thought people might want to know
The remark was a dark joke by Brandon Herrera during an Oct 2025 episode of The Josie Show podcast responding to the host's story about rescuing kittens from euthanasia. sacurrent.com/news/texas-new… yahoo.com/news/politics/… open.spotify.com/episode/38JDXm…
394
338
35
9,814
130,196
wow this is bad! ENTIRETY of PingCap database used by linkedin, flipkart, airbnb etc. has been copied and stolen due to customer credentials being stored directly in support tickets (LOL) Attackers ran exfiltration directly on their cloud (LOL) pipeline ran for 22 days, exfiltrating data every 6 hours and NO ONE noticed. Worse, PingCap denies all of it. Average SRE salary is $300,000 at PingCap btw
85
607
102
3,896
269,002
Kyle retweeted
Dejo por aquí una POC de php2shell contra todas las versiones de php oficiales de docker y sigue siendo vulnerables hasta los parches con diferentes chains para llegar el RCE con una pequeña shell github.com/GoldraK/php2shell… #php #Security
11
113
6
621
67,468
when the cybersecurity team finds out there are actual vulnerabilities and they have to do their jobs instead of trying to trick someone into clicking a phishing email
49
610
29
12,591
165,236
Working RCE against PHP 8.5.12 (the 2026-10-21 security release that fixed CVE-2026-109618/109619). Pure logic bug — no memory corruption, ASAN-clean, orthogonal to the CVE-2026-109618/19 class. Receipt: uid=33(www-data) over HTTP, one-shot #infosec #php2shell #php
.... Dude the internet is cooked .... This can't be patched out 😈... #CyberSecurity #infosec
Readers added context they thought people might want to know
The claimed RCE on fully-patched PHP 8.5.12 requires a custom lab app with a destructor gadget plus deliberate session.serialize_handler mismatch (php_serialize writes, legacy php reads) and non-default settings like cleanup=Off; this is an app flaw, not core PHP RCE. github.com/rafalohaki/php… php.net/manual/en/sess…
24
96
35
849
165,954