This process is such bullshit. The people exploiting systems are using chinese models that require no verification or restrictions. They dont need to "request for access", they have nothing in their way. The people getting fucked are the ones trying to play fair.

The day P2O contestants stop flexing details of their upcoming entries before they've even stepped on stage will be a great day. not only you poke the vendor to start panicking and hammer down on the product attack surface but you also provoke other contestants to start burning bugs

‼️ Researchers at depthfirst used AI to remotely take over the camera and photo roll of a phone that was browsing TikTok, chaining together bugs in open-source code the app depends on. TikTok has confirmed it fixed the flaw. depthfirst sent us an exclusive video of the PoC:

Guys, I built a super fast Android decompiler called ASC. It completely replaced Jadx MCP for me and lets me analyze 10+ APKs in parallel. And this week my Agent use ASC found 2 RCE in Honor and Xiaomi! This tool now accepted by BlackHat EU Arsenal github.com/MG1937 #BHEU

I'm 33 and I think Claude Code is melting my brain. For 6 months straight I've had 5-6 terminals open at once, waiting on responses just to smash "enter" 90% of the time. That's the whole job now. And it's doing something to me. A few friends and I keep circling back to the same thing in conversations: none of us feel as sharp as we used to. Maybe it's just us. But I keep wondering how many other people in their 30s feel it too. (And yeah: this is a me problem, how I lean on the tool, not the tool itself. Doesn't make the effect any less real.)