teflon (@0xTeflon) profile picture

https://teapawt.org/t.co/fUNTe6pzwR Bugcrowd/Hackerone - teflon

Virginia, USA
Joined November 2024
Photo by teflon (@0xTeflon)Photo by teflon (@0xTeflon)Photo by teflon (@0xTeflon)Photo by teflon (@0xTeflon)Photo by teflon (@0xTeflon)Photo by teflon (@0xTeflon)Photo by teflon (@0xTeflon)Photo by teflon (@0xTeflon)Photo by teflon (@0xTeflon)Photo by teflon (@0xTeflon)
And bug hunters, leave a comment on reports when you’re gonna stop hacking on them. Do so assertively but not disrespectfully. Heres an example of one I recently sent. If we never give them feedback, how can they know to do better?
pay attention bug bounty program owners. if your top hackers are walking away and not submitting anything anymore, then you have failed somewhere. (although let's be honest.. these days *most* programs don't actually care if people stop submitting. they're like "okay w/e")
22
12
5
300
28,318
I earned $17,500 for my submission on @bugcrowd bugcrowd.com/h/{id: "teflon"} #ItTakesACrowd
3
2
236
7,151
teflon retweeted
im gonna pass on installing your OS bro
OpenPhone - A new open source, customized Android OS Built with AI from the ground up, and work on your existing old devices at home
478
17,187
186
220,704
7,817,071
Thank you Anthropic for reminding me that cancelling my sub earlier this month was the right decision
3
347
This is required reading today. @caseyjohnellis didn't even write this today about MSRC - but it nails it. Full disclosure IS the agreed upon path forward to keep a vendor in check who stonewalls, threatens, or otherwise is shit to work with for security researchers.
7
59
5
202
14,228
teflon retweeted
Introducing Claude Opus 4.7, our most capable Opus model yet. It handles long-running tasks with more rigor, follows instructions more precisely, and verifies its own outputs before reporting back. You can hand off your hardest work with less supervision.
4,586
9,848
6,728
79,507
14,478,821
teflon retweeted
My final thoughts on Opus 4.6: why this model is so good, why I underestimated it, and why I'm so obsessed about Mythos. When I first tested GPT 5.4 vs Opus 4.6 - both launched at roughly the same time - I was initially convinced that GPT 5.4 was vastly superior, because it did better on my logical tests. That's still true: given the same prompt, by default, GPT will be more competent, careful, and produce a more reliable output, while Opus will give you a half-assed, buggy solution, and call it a day. Now, here's what I failed to realize: Opus bad outputs are not because it is dumb. They're because it is a lazy cheater. And you can tell because, if you just go ahead and tell it: "you did X in a lazy way, do it in the right way now" And if you show that this is serious, it will proceed to do a flawless job. That doesn't happen with dumber models. And, the more I work with Opus, the more I realize that, if you just keep pushing it, its intelligence ceiling is much, much higher than it seems. It IS there, you just need to be patient and push it. GPT, on the other hands, when it fails, it already did its best, so, pushing it further will give you no added results. That is also one of the reasons that benchmarks lie. When Claude and GPT score the same in a given benchmark, it is likely that Claude is actually smarter, because it puts less effort. Now, consider that for a moment, and remember that Mythos is outperforming GPT 5.4 *Pro* on benchmarks. How insane that is? Remember that Sonnet 3.5 lagged behind on benchmarks, yet everyone knew that it was superior to 4o. I think it is this effect at play: for whatever reason, Claude-series model "try less hard" on the first shot. Because of that, even if Spud gets close to Mythos on benchmarks (which I predict will be the case), I suppose Mythos will still be superior. This also leads me to wonder if perhaps Anthropic actually has a real lead over OpenAI, that will only get larger? I could totally see a timeline where Anthropic's models become so good that OpenAI simply fails to catch up as the recursive improvement unfolds? Just my silly thoughts though, what do I know As always I could be wrong, and I hope I am!!
151
55
36
1,506
181,531
Holy shit
🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages. The latest [email protected] now pulls in [email protected], a package that did not exist before today. This is a live compromise. This is textbook supply chain installer malware. axios has 100M+ weekly downloads. Every npm install pulling the latest version is potentially compromised right now. Socket AI analysis confirms this is malware. plain-crypto-js is an obfuscated dropper/loader that: • Deobfuscates embedded payloads and operational strings at runtime • Dynamically loads fs, os, and execSync to evade static analysis • Executes decoded shell commands • Stages and copies payload files into OS temp and Windows ProgramData directories • Deletes and renames artifacts post-execution to destroy forensic evidence If you use axios, pin your version immediately and audit your lockfiles. Do not upgrade.
4
5
469
teflon retweeted
Been working on a new tool for bug bounty hunters and will be looking for some testers in the near future, message me if you are interested! chaoticrecon.com/
3
1
11
1,657
I wonder who caused this 🤔
1
7
1,959
Happy New Years!!! 2026 is going to be great.
8
1,404
hi everyone i made a new website: an anonymous forum to discuss bug bounty and cybersecurity stuff freely all together. one (optional!) cool feature is to get your bug bounty earnings verified by the website check it out: bugbounty.forum/
24
41
5
1,090
77,268
Merry Christmas to my fellow hackers that celebrate! 🎄
2
894
What's everyone's favorite hacking book they have a physical copy of?
2
1
14
1,259
Earth to #cloudflare is this thing on
3
955
1
1
8
649
The best thing about bug bounty is the freedom it brings. Freedom to create your own schedule and maximize efficiency, but also freedom to fail. As your own boss it is imperative to set attainable goals and meet them consistently to stay motivated.
1
1
20
1,408
What do real hackers have their Burpsuite set to?
30%Light Mode
70%Dark Mode
86 votes • Final results
1
7
1,566
Scare a BUG BOUNTY HUNTER with ONE word 👇
16
1
22
6,607