Generating AI slop @QED_Audit ex. @TeamAtlanta24, @osec_io, @georgiatech
/proc
Joined April 2019
- Tweets1.8K
- Following879
- Followers1.9K
- Likes2.1K
pr0cf5 retweeted
On July 25, we hacked OpenAI.
Two bugs let us take over ChatGPT/Codex accounts of OpenAI employees (+some unaffiliated users) and reach connected services: Outlook, Slack, GitHub, etc.
We proved it with a PR in OpenAI’s internal codebase . It took us <72h. 🧵
pr0cf5 retweeted
During my time at @QED_Audit I circled back and took another quick look at browser/JSE vulnerability research. AI agents flying high, seemingly finding & exploiting bugs everywhere, and there's this: a **constant integer overflow** in V8, alive for over 3.5 years. (1/5)
@QED_Audit found CVE-2026-19174, an integer overflow in V8 that gives you arbitrary code execution in Chrome. The bug is one line of constant arithmetic. It survived 3.5 years of fuzzing, manual audit, and LLM-driven review. (1/n)
pr0cf5 retweeted
@QED_Audit found CVE-2026-19174, an integer overflow in V8 that gives you arbitrary code execution in Chrome. The bug is one line of constant arithmetic. It survived 3.5 years of fuzzing, manual audit, and LLM-driven review. (1/n)
In some ways, LLM pessimists are even more bullish on AI than the slop startup bros. It's just buried so deep in their unconscious mind that it materializes as denial and complete logical fallacies like this.
pr0cf5 retweeted
Some people saw the "count Rs in strawberry" example and dismissed the capabilities.
But I saw it and thought I cannot spell strawberry either, and I still can be productive.
