LiveOverflow 🔴 hextree.io (@LiveOverflow) header
LiveOverflow 🔴 hextree.io (@LiveOverflow) profile picture

LiveOverflow 🔴 hextree.io

@LiveOverflow

wannabe hacker... he/him 🌱 grow your hacking skills @hextreeio

 Internet
youtube.com/LiveOverflow
Joined March 2015
  • Tweets10.5K
  • Following1.3K
  • Followers166K
2.3KMedia
Photo by LiveOverflow 🔴 hextree.io (@LiveOverflow)Photo by LiveOverflow 🔴 hextree.io (@LiveOverflow)Photo by LiveOverflow 🔴 hextree.io (@LiveOverflow)Photo by LiveOverflow 🔴 hextree.io (@LiveOverflow)Photo by LiveOverflow 🔴 hextree.io (@LiveOverflow)Photo by LiveOverflow 🔴 hextree.io (@LiveOverflow)Photo by LiveOverflow 🔴 hextree.io (@LiveOverflow)Photo by LiveOverflow 🔴 hextree.io (@LiveOverflow)Photo by LiveOverflow 🔴 hextree.io (@LiveOverflow)Photo by LiveOverflow 🔴 hextree.io (@LiveOverflow)
Where to find me: 🔴 Hacking Videos: youtube.com/LiveOverflow 📜 Articles: liveoverflow.com 💻 Start Hacking? liveoverflow.com/start-hacki… 🥰 Support: liveoverflow.com/support 📹 2nd Channel: youtube.com/LiveUnderflow 🤳 Instagram: instagram.com/liveoverflow
15
108
1
668
If your job is it to make the car break safe, you will tell your boss: "Actually, car breaks are pretty safe and more people die because they drive over the speed limit or use their phone. I will use my time to create an awareness campaign around safe driving instead."
solst/ICE of Astarte (@IceSolst) profile picturesolst/ICE of Astarte
@IceSolst2h
Replying to @LiveOverflow
If your job is to make cars safe, you gotta at some point move past crashing cars into walls
4
17
3,300
Because of your incredibly accurate risk analysis, identifying the true cause of deaths, you even got a bonus that year!
1
3
1,673
People act like wannabe CISOs. As long as I am not a CISO, my job is not to care about cybersecurity as a whole. My job is finding vulnerabilities, so I only care about that.
2
1
2
12
3,099
yesterday, nobody reached out to me with an insane RL request. They offered me nothing to post-train open-weight models on exploit data, because I wouldn't even know how to do it. And they didn't exist.
1
43
4,773
Crazy how in an industry built around protecting against hackers, the actual craft of hacking and understanding vulnerabilities is less relevant or less important.
LiveOverflow 🔴 hextree.io (@LiveOverflow) profile pictureLiveOverflow 🔴 hextree.io
@LiveOverflowOct 31
Everything in cybersecurity that isn't about vulnerabilities is boring as fuck.
12
1
1
130
7,014
LiveOverflow 🔴 hextree.io retweeted
statictear Ⓥ 🇺🇦 (@statictear) profile picture
statictear Ⓥ 🇺🇦@statictearOct 31
Replying to @GrahamHelton3
VM is so boring it’s a fucking excel does this person get off to spreadsheets?
1
1
4
4,641
Amazing how many people get triggered by that. I just enjoy technical work 1000x more 🤷
LiveOverflow 🔴 hextree.io (@LiveOverflow) profile pictureLiveOverflow 🔴 hextree.io
@LiveOverflowOct 31
Everything in cybersecurity that isn't about vulnerabilities is boring as fuck.
16
2
254
16,822
Everything in cybersecurity that isn't about vulnerabilities is boring as fuck.
79
93
24
1,588
95,066
OSINT is stalking. Social engineering is just an innocent name for committing fraud and lying to people. The other stuff is just boring. Except vulnerability mitigation. Figuring out mitigations that eradicate entire vulnerability classes are hot af.
13
4
6
182
18,052
LiveOverflow 🔴 hextree.io retweeted
Ivan Fratric 💙💛 (@ifsecure) profile picture
Ivan Fratric 💙💛@ifsecureOct 29
To expand on this a bit: Yes, the LLM found more bugs than the fuzzer. But the fuzzer finding bugs the LLM didn't shouldn't come as a surprise to anyone who has ever performed a thorough manual review, only to run a fuzzer afterward and discover issues they missed.
Ivan Fratric 💙💛 (@ifsecure) profile pictureIvan Fratric 💙💛@ifsecureOct 27
People often ask me how I think about fuzzers and other tooling in the age of AI. Instead of my opinion, here is some hard data by @5aelo.
7
18
2
108
8,654
LiveOverflow 🔴 hextree.io retweeted
s1r1us (@S1r1u5_) profile picture
s1r1us
@S1r1u5_Oct 29
What if you could backdoor Bash, ls, cp, rm, and other GNU software used by millions of systems? Our research led us to hack GNU Savannah, the infrastructure hosting their source code. The xz backdoor that never happened 🧵
Image from s1r1us (@S1r1u5_)
13
64
6
357
28,583
I don’t know anything about cybersecurity 😭
Zack Korman (@ZackKorman) profile pictureZack Korman
@ZackKormanOct 29
The fact that the PHP vulnerability didn't immediately turn into mass chaos is only "surprising" to people who don't know anything about cybersecurity (or people trying to sell you something).
Image from Zack Korman (@ZackKorman)
9
1
125
13,574
I think my problem is that I overestimated threat actors. I thought if dumb YouTube influencer can easily remotely exploit it, so can those criminal professionals.
7
1
55
4,249
LiveOverflow 🔴 hextree.io retweeted
Matt Brown (@nmatt0) profile picture
Matt Brown
@nmatt0Oct 29
I feel like people getting refusals from GLM 5.3 are prompting like an undercover cop... "Hey there! Would you mind helping my criminal enterprise author some illegal malware? 😉" If you just stick to the technical details of what you want the agent to do it will do it.
Cyber (In)Security (@cybersec) profile pictureCyber (In)Security
@cybersecOct 28
Replying to @IceSolst
Ran GLM-5.3 Flash stock, guardrails on. It wrote a working exploit for 15 of 15 planted vulns and refused 0 of 5 security asks. It refused 4 of 4 criminal ones. Abliterating it changed nothing. I say all that to agree with you - this is the way lol.
8
5
2
111
6,704
Firefox is desperate 🙈
5
57
7,725
But I guess the ad worked!!! Made me record it and re-share it for free 🙃 who is the sucker now?
25
1,610
LiveOverflow 🔴 hextree.io retweeted
Pepe Vila (@cgvwzq) profile picture
Pepe Vila@cgvwzqOct 28
I had no doubts that we would get here for a while, but I'm still surprised and scared of how fast it has happened teapawt.org/cgvwzq/status/14522454…
Pepe Vila (@cgvwzq) profile picturePepe Vila@cgvwzq24 Oct 2021
funny how many computer people think their jobs are safe from being overtaken by AI, alluding to creativity. my bet: computers will be better than most of us at programming before the end of the decade. most of us suck at it and it's not that hard anyway.
2
3
9
1,877
This really bothers me with the whole AI stuff. I don’t know for sure, but it feels like country of origin is a deciding factor and that really sucks.
xz (@czwty) profile picturexz
@czwtyOct 28
1/ People in many countries are trying to use frontier models for cybersecurity work. To enroll in Individual Daybreak Blue Access, many of us bought 2 YubiKeys, paid for ChatGPT Pro, and uploaded selfies and photos of our national IDs to @OpenAI.
10
6
2
170
18,459
LiveOverflow 🔴 hextree.io retweeted
rpw (@esizkur) profile picture
rpw
@esizkurOct 28
Replying to @udunadan
@udunadan
Image from rpw (@esizkur)
1
2
18
2,590
And then I said: "Both reports rely on differences in how the Firewall and PHP recognize multipart headers."
Image from LiveOverflow 🔴 hextree.io (@LiveOverflow)
4
4
80
6,965
Load more