Regor Tegruob retweeted
my spidey senses are telling me the labs are, as we speak, using unguardrailed versions of their unreleased models to systematically reverse-engineer ALL of the internet’s software, apps, and games, then feeding the reconstructed source code straight into their training pipelines while simultaneously building guardrails to ladder-pull the rest of us
Regor Tegruob retweeted
CISAの新しいLogging Reference Architecture。
これ、かなり刺さる。
「SIEMにログを集めました」は、もう答えにならない。
問われるのは、
・必要なログが本当に届いているか
・欠損や遅延を検知できるか
・元の文脈を潰さず正規化できるか
・障害後にReplayできるか
・必要な期間、検索できるか
・侵害経路を最後まで再構築できるか
そしてCISAは、
「全ログをSIEMに入れる必要はない」
とまで踏み込む。
Repository First、Selective Feed、階層ストレージ。
高価なSIEMをログ倉庫にするのではなく、
検知に必要なログと、フォレンジックに必要なログを分けて設計する。
さらに強烈なのがこれ。
コネクタがGreenでも、ログが使えなければ“能力”ではない。
収集できていることと、
インシデント対応できることは別物。
SOCで見るべきKPIは
「ログ収集率」ではなく、
そのログで攻撃を再構築できるか。
CISAがようやく、そこまで言語化した。
cisa.gov/resources-tools/res…
Regor Tegruob retweeted
DEFCON34 Talk slides media.defcon.org/DEF%20CON%2…
Regor Tegruob retweeted
NEW: AI consultant reveals a client accidentally spent $500,000,000.00 in a single month after failing to set employee limits on Claude usage.
Regor Tegruob retweeted
I broke Kindle's DRM protection tonight through a mix of static and dynamic analysis. AES key is derived from accountSecrets, kindle device ID, and voucher path. Book is decrypted in parts using OpenSSL from Ion blobs and then decompressed with LZMA.
Regor Tegruob retweeted
Bypasses bot detection with realistic browser fingerprints
github.com/enetx/surf
Regor Tegruob retweeted
兄弟们，ElevenLabs要哭了。
有个开源工具叫 OmniVoice Studio，本地跑语音克隆+视频配音，646种语言，完全离线，不要API、不要联网、不要钱。
🔗 链接: github.com/debpalash/OmniVoi…
1️⃣ 3秒音频就能克隆任何人声音，跨语言直接复制
2️⃣ 丢个YouTube链接进去，自动转录翻译重配音，导出MP4
3️⃣ 全局快捷键说话转文字，任何App直接粘贴
4️⃣ 声轨分离+说话人识别，背景音乐自动剥离
5️⃣ 批量丢50个视频后台自动跑
Mac/Win/Linux全支持，下载即用。
还在云端按字符收费的，该醒醒了。
Regor Tegruob retweeted
Claude helped me with this bug too but in a different way... Tried to gaslight me saying it wasn’t ~exploitable in practice~ and I got obsessed with proving it wrong 😩
Confirmed! @chompie1337 of IBM X-Force Offensive Research (XOR) used a race condition to escalate privileges on Red Hat Enterprise Linux for Workstations, earning $20,000 and 2 Master of Pwn points. #Pwn2Own #P2OBerlin
Regor Tegruob retweeted
Hey @YouTubeTV, I have the option to protect my computer using a VPN or canceling my YouTubeTV service since you won’t allow me to protect my computer with a VPN while watching TV.
Which do you suggest I do?
Regor Tegruob retweeted
📣📢 Calling all Android and Chrome bug hunters 🧑💻🔎!
We're updating our Android & Chrome VRP programs to ensure we can continue to reward the most challenging and impactful vulnerabilities researchers find in our products. For details, 👇
bughunters.google.com/blog/e…
Regor Tegruob retweeted
Her dad brought home a $300 box that gave him thousands of channels, every movie, every show, even pay-per-view.
Her sister said the home network had been slow ever since. So she took one home, put it on its own network behind a firewall, and watched who it was talking to.
Here's what she found.
Regor Tegruob retweeted
Capcom Mass Copyright Strike Hits Major Resident Evil Mod Channel
Capcom sent a legal notice to GrizzoUK, a YouTube channel with 216,000 subscribers that shows spicy adult-style costume mods for Resident Evil games.
The notice ordered the removal of over 1,000 videos with spicy nude outfits on Capcom characters from Resident Evil and Street Fighter. If ignored, the whole channel could be shut down.
GrizzoUK removed the videos to save the channel, and the creator now says he will stop making Resident Evil mod videos.
The notice listed many specific videos. It also included some mods from non-Capcom games like Stellar Blade.
In a 2023 company presentation they said all unofficial mods count as cheats.
They claimed mods hurt the game and the brand, They especially dislike mods seen as offensive.
Most other game companies support mods. Capcom does not and says the company has the right to protect its games and image especially with adult content.
Regor Tegruob retweeted
We’re expanding Trusted Access for Cyber with additional tiers for authenticated cybersecurity defenders.
Customers in the highest tiers can request access to GPT-5.4-Cyber, a version of GPT-5.4 fine-tuned for cybersecurity use cases, enabling more advanced defensive workflows.
openai.com/index/scaling-tru…
Regor Tegruob retweeted
Bounty: I will pay you $10,000 if you find me a capture card that does all of the following (READ TO THE END BEFORE YOU REPLY OR I AM BLOCKING YOU)
Required specs:
1. Can receive 1440p 60fps signal over HDMI from a Mac (in 720p hidpi mode)
2. Capture works on Windows over PCI-E or USB 3.2
3. Capture works in OBS
4. Video format contains options that prevent grays from flickering (XRGB works usually)
5. Doesn't randomly disconnect if PC is left on
6. Audio passthrough works reliably
Cards I have tried that do not work:
Avermedia GC553G2
This one is really really close. Only one I've found that works with hidpi and has no color flicker issues (on XRGB). Sadly it disconnects ALL THE TIME when I leave my PC on, and sometimes fails to reconnect entirely, forcing me to reboot. 50% of the time it "looks fine" but fails audio passthrough. SO CLOSE, but unstable enough to make me crash out.
Elgato 4k X
The spec sheet says it will work. @Videophile says it will work. It will not work. Sometimes it does for a single stream, but then it refuses to honor the color encoding settings and the flicker returns. There's also a bunch of settings they just won't let you change in OBS? Idk, I tried for days to make this card work and gave up.
(do not recommend other elgato cards, this is the only one that meets my spec requirements and it still doesn't work)
EVGA XR1
Didn't have resolution or color options I needed. Impressive for the price but not viable for my work.
BlackMagic Decklink Quad HDMI 4k
This card has taken years off my life. It only accepts "cinema resolutions" from my Mac. It "supports" 1440p, but will not ingest it no matter what I do. Unless I send it from a PC instead of a Mac. Then it works fine. For no reason. Ugh. Also missing the color options I need sadly.
Magewell USB Capture HDMI 4K Pro 32150
I don't know if this will work or not. I already ordered it and it's on the way. I am trying not to get my hopes up.
How to qualify for the prize
1. Recommend me a capture card that has not been recommended already in the replies.
2. Show the specs I need documented publicly somewhere
3. Wait patiently for me to order the card, test it, and report back
You will not be paid until I use the card for 2 weeks without issue. If there's some speed bumps initially that's fine, I just need 2 weeks of pushing it without issue to know that "i'm finally good".
This has been bottlenecking me for 5 years now. I am so tired. Please help.
Regor Tegruob retweeted
BREAKING: axios
Maintainer or developer, do yourself a favor and star this repo, send it to your entire dev team, and follow curated and battle-tested advice to avoid future security incidents and npm package compromise: github.com/lirantal/npm-secu…
I CANNOT STRESS ENOUGH
Regor Tegruob retweeted
FFmpeg is moving to Rust 🦀
Our use of C and Assembly in FFmpeg has been an unacceptable violation of safety.
FFmpeg will be running 10x slower - but we're doing it for your safety.
All your videos will appear green - safety first, working software later.
Regor Tegruob retweeted
🚨#BREAKING: According to Tech Sciencest they report that AI bot traffic is projected to surpass human internet traffic by 2027