Peak Security (@peaksec) header
Peak Security (@peaksec) profile picture

Peak Security

@peaksec

Hacking your site before attackers do

 San Francisco
peaksecurity.us
Joined August 2026
  • Tweets103
  • Following99
  • Followers41
28Media
Photo by Peak Security (@peaksec)Photo by Peak Security (@peaksec)Photo by Peak Security (@peaksec)Photo by Peak Security (@peaksec)Photo by Peak Security (@peaksec)Photo by Peak Security (@peaksec)Photo by Peak Security (@peaksec)Photo by Peak Security (@peaksec)Photo by Peak Security (@peaksec)Photo by Peak Security (@peaksec)
added ai summaries for each release
Image from Peak Security (@peaksec)
Peak Security (@peaksec) profile picturePeak Security
@peaksecOct 30
we built a leaderboard showing which yc startups ship the most by tracking changes in public javascript bundles, we can see which companies are shipping the fastest 🚢 add your startup and see where you rank shipwatch.sh
Image from Peak Security (@peaksec)
1
40
we built a leaderboard showing which yc startups ship the most by tracking changes in public javascript bundles, we can see which companies are shipping the fastest 🚢 add your startup and see where you rank shipwatch.sh
Image from Peak Security (@peaksec)
1
3
105
could also be pretty interesting to have it summarize the javascript changes. pretty useful for watching your competitors. 👀
2
16
i wonder how much code exists because an agent didn’t notice there was already a function for that
1
167
finally got our ci on boat roughly 2x faster and massively cheaper lfg ⛵️
Image from Peak Security (@peaksec)
Anicet (@AniC_dev) profile pictureAnicet
@AniC_devOct 28
ciao blacksmith we just made a CI runner so cheap & fast you can scale your CI by 20x on the same budget introducing CI on boat.dev's cloud VMs 1. install boat & run: $ boat ci connect 2. change your runner: - runs-on: ubuntu-latest + runs-on: boat
1
7
1,859
“it’s basically chatgpt but for cybersecur—”
Image from Peak Security (@peaksec)
1
86
famous last words before 10,000 agents start hitting your api
Sam Lambert (@samlambert) profile pictureSam Lambert
@samlambertOct 22
don't worry, hackers usually take fridays off
48
"mom, why are we so rich" “honey, your father never missed a codex reset"
Image from Peak Security (@peaksec)
Tibo (@thsottiaux) profile pictureTibo
@thsottiauxOct 23
Replying to @thsottiaux
Landing tomorrow before 10am PST together with a small ship.
2
127
railway watching their customers disappear 😭
Image from Peak Security (@peaksec)
This quoted post is unavailable.
Try viewing anyway · View on X
40
today we had: - php2shell - a malicious litellm release - node2shell - gitlab unauthenticated rce, cvss 10.0 - railway’s security incident - http/3 attacks happy cybersecurity awareness month to everyone currently rotating a key
2
402
“rotate your keys immediately” “also you can’t deploy” yeah wtf @Railway. revoke the old credentials and potentially break production, or leave potentially exposed credentials active while waiting for deployments to return. customers need a way to actually apply the fix you’re asking for
Image from Peak Security (@peaksec)
Railway (@Railway) profile pictureRailway
@RailwayOct 21
An urgent notice from the Railway team blog.railway.com/p/security-…
Security Disclosure: Wednesday October 21st | Railway Blog

Security Disclosure: Wednesday October 21st | Railway Blog

Railway detected anomalous activity involving systems that store customer environment variables and recommends your immediate attention

blog.railway.com
2
244
cool little easter egg in the openai platform console
Image from Peak Security (@peaksec)
2
59
weight streaming from google drive is insane
« 2k2 » (@peach2k2) profile picture« 2k2 »
@peach2k2Oct 13
the other day i figured i've barely used my 5tb Google Drive storage so i decided to host GLM on it 47 minutes for the first token btw
Image from « 2k2 » (@peach2k2)
1
38
yes, you need a harness to hack at scale but building one from scratch is how you spend six months debugging tool calls, context management, retries, permissions instead of finding bugs start with something like pi and start building off that
Jenish Sojitra (@_jensec) profile pictureJenish Sojitra
@_jensecOct 13
Harness is absolutely required if you want to do hacking at scale.
2
92
humans picked high level languages because humans had to write and read the code agents don’t care one guy + tokens just rewrote typescript in rust and made it 70% faster many such cases coming
Theo - t3.gg (@theo) profile pictureTheo - t3.gg
@theoOct 13
ts-rust v0.6.0 is out! It's now 30% faster than before, and up to 70% faster with the new "--fast" mode (at the expense of RAM) This mostly closes the gap in performance against `bun check` while still maintaining 100% compatibility with upstream TypeScript (Bun does not)
Image from Theo - t3.gg (@theo)
36
our database now has 8,144 findings marked confirmed internally 6,502 are high or critical the bottleneck is no longer finding vulnerabilities it’s reviewing, reporting, disclosing, and getting them fixed
23
14 of our 15 strongest critical samples became materially better after the agent kept going past the first bug one exposed object became crosstenant access one token became control of an entire workflow one weak permission became an admin boundary the first vulnerability is usually just the lead
22
my agent joined a google meet for me today i asked it to set up two new workspace emails for domains we just bought it purchased the accounts configured everything noticed one mailbox was not working contacted google support explained the issue joined a call with a real support employee shared its screen worked through the fix then hung up this is agi 👏
Image from Peak Security (@peaksec)
Image from Peak Security (@peaksec)
Image from Peak Security (@peaksec)
2
4
183
all without any human intervention
1
48
soc 2 might be the purest form of security larp months spent proving you followed your own policies just to ship a badge that makes customers feel safe then someone sends one request to the api and becomes an admin
Image from Peak Security (@peaksec)
1
85
Load more