Joshua Rogers retweeted
This is how most reverse engineers and security researchers started, playing video games when they were 8 or 9 years old.
Joshua Rogers retweeted
I don't care what he thinks about video games, Roger Ebert had the ultimate redpill on nerd culture as a whole.
This basically describes every fandom on earth, and once you see it, you can never un-see it.
Joshua Rogers retweeted
NEW: malware developers added nuclear & biological weapons text to to their spyware.
Goal? To trigger LLM safety refusals... so that their spyware wouldn't be analyzed by an AI security scanner.
Cleanest practical example I can think of for why over-indexing on first order safety alignment is risky.
When closed (and open) models ship with aggressive refusals, they will be sprinkled with second-order blindspots that attackers will discover...and exploit.
We are only in the earliest days of attackers leveraging these features, and it wouldn't surprise me if users systems that need to handle complex cybersecurity issues demand that models be less safety-blunted.
In the weeds: @SocketSecurity's post also shows why intention matters in how you design a malware analysis pipeline to avoid prompt manipulation.
H/T to colleagues that shared this with me socket.dev/blog/mini-shai-hu…
Joshua Rogers retweeted
“You picked Johnny Cash’s picture. You did not pick his message. Try listening to the words.”
@HunterBiden putting on a master class
Joshua Rogers retweeted
Replying to @Kenneth_Belkin
Do I look like I’m a part of the elite oligarch class. This was taken at a super 8 motel off I95 by the way.
Joshua Rogers retweeted
Logged on RuneScape for the first time in a while. Map looks a little different.
Joshua Rogers retweeted
The President of Linux Japan has been arrested for "abandoning body," which is a strange way to say that he dumped some person's body, but they aren't saying he necessarily killed that person.
Weird.
Joshua Rogers retweeted
The CEO of Krafton (creator of PUBG) asked ChatGPT to create a "corporate takeover strategy" to prevent a company they acquired from hitting a revenue target within a certain time window (which would trigger an additional payout).
ChatGPT (against his lawyer's advice) suggested locking down the acquired companies Steam account to prevent them from publishing Subnautica 2 in the time window, which the CEO of Krafton followed.
ChatGPT's advice did not hold up at trial and the judge was not happy. The opinion is a wild read and includes several direct quotes from the Krafton CEO's ChatGPT conversation.
I feel like it's gonna take a few more high profile examples like this until executives start realizing that conversations with ChatGPT are not privileged and you probably shouldn't describe your questionably legal schemes to them in detail!
Joshua Rogers retweeted
yo @hxmonsegur how was the island?
Joshua Rogers retweeted
Security engineer worked for me 6+ years
But last week she made a strange request
"We need to upgrade React immediately - CVE-2025-55182 is a CVSS 10"
I was puzzled
Checking our WAF dashboard, I saw we had already blocked 14 proof-of-concepts from GitHub
Why in the world would we need to rush an upgrade?
I suggested she focus on the product launch and we'd revisit patching in Q2 planning
For some reason, she insisted the PoCs we blocked weren't the "real exploit"
She kept saying something about "prototype pollution" and that our WAF "can't parse JavaScript"
I reminded her that our vendor specifically said we had "day-zero runtime protection"
She sent me a gist from some researcher
I didn't click it
My trust in her fell off after that
She was creating unnecessary panic during a critical business period
I gradually phased her out of security decisions
The breach happened three days later
Prototype pollution
Exactly what she described
For some reason, she felt the need to say "I told you so" in the postmortem
Just bizarre behavior from someone who used to be a team player
She's on a PIP now
Never seen this kind of attitude in my 15+ years running security programs
Joshua Rogers retweeted
NEW: Ukrainian SBU’s Operation “Web” Took 1.5 Years to Prepare
Ukraine’s SBU spent over 18 months planning the massive “Web” operation that struck 41 Russian strategic aircraft today.
President Zelensky personally oversaw the mission, with SBU chief Vasyl Maliuk leading execution.
Sources say the complex logistics involved smuggling FPV drones and mobile wooden cabins into Russia. The drones were hidden under remote-controlled roofs on trucks. When triggered, the roofs opened and kamikaze drones launched toward Russian bombers.
SBU insiders stress that all operatives involved are already safely back in Ukraine. Any arrests by Russian authorities will likely be staged for domestic propaganda.
Joshua Rogers retweeted
I prefer jobs without the theatrical rituals of overplanned roadmaps, performative KPIs, sprint planning and retros…
just hire based on sheer skill and competency and you wouldn’t need to worry about any of this bs.
These all seem like mechanisms to defensively cover up for incompetency.
I’ve never met a brilliant person who’s willingly and eagerly participating in scrum theater. They instead know what do to and their managers trust them.
On the other hand guess what the most incompetent folks are laser focused on? Because you can fill your day with these activities and leave no time for any real work.
Joshua Rogers retweeted
Replying to @vxunderground
It's only slightly more complicated: "genie's done some maths on a bunch of recent btc transactions, and got result X; to get rewarded, find a value Y that when you do a hash of X+Y, you get something starting with 22 zeros"
And since the hash(X+Y) func used has good uniformity, miners just keep changing Y and re-testing the hash result until set difficulty (22) is met 🤷♂️









































