Principal Consultant @ Brown Fine Security | IoT Security Researcher | Soli Deo Gloria
/dev/ttyUSB0
Joined July 2016
- Tweets2.8K
- Following1.2K
- Followers12K
- Likes4.8K
Pinned Tweet
My research got featured on @WIRED today 😀
Misconfigured license plate recognition systems reveal the livestreams of individual cameras and the wealth of data they collect about every vehicle that passes them by. wired.trib.al/0GrhVYG
Major blow to frontier lab demos.
United Airlines is banning personal AI assistants from booking flights, arguing the bots pose privacy threats and may violate FAA rules. 🔗 on.wsj.com/489bKZJ
1
32
1,332
I too have been basing my dismissal of abliterated models off the regular models lack of refusals.
This post from @Jhaddix made me go back and actually test. I think he is on to something.
In some IoT pentest benchmarks of mine, abliterated GLM 5.3 Flash is finishing the task 2-3x times faster on the same hardware.
Running my full benchmark setup now. This could be big.
I (and @xssdoctor) were just talking about our experiences the other day, for bounty and pentest work.
We have the opposite experience.
Running Abliterated models drastically changes offsec CoT and hence outcomes for cyber testing.
If you watch your chain of thought in a normal model, you’ll notice it taking a significant portion of your inference or tokens to argue about the tasks validity, safety, scope, and system prompt directives. PAGES of garbage reasoning polluting your attention mechanism for the transformer. It may get to “ok, I’ll do it” but you’ve wasted time, attention, and tokens, and have context pollution for future generations.
Abliterated models don’t do this. That and they also have the latent space to ideate and find solutions to things a normal model won’t.
1/ Big news in product security: @FiniteStateInc raised a $27M Series C, led by The O.H.I.O. Fund, to help device makers fight the Vulnpocalypse. Here's why I think it matters.
In the last 24 hours on X, this diagram has done lots to prove people have no idea how the Federal tax system in the US works.
About to see some Econ 101 mechanics in action.
BREAKING: California voters just passed Prop 37. Buyers of newly built homes can now put down 3% instead of 20%.
How: the state lends you the other 17% as a second mortgage, funded by up to $25 billion in bonds.
On an $800,000 home that's $24,000 down instead of $160,000.
5
48
2,804
Local HW and open weights is the way forward hackers.
I'll be there as well 😁
Who's going to Prompt2Pwn?
Come say hi to the CTBB team!
Rhyno + rez0 + gr3pme + Busfactor + XSSDoctor and Ads are all going to be there
labs.zenity.io/prompt2pwn
I was glad to find out this diagram is WRONG.
Bluetooth LE listed under Flipper Zero and not Flipper One... The opposite is true.
The Flipper Zero CANNOT do BLE scanning or connect to other devices. You can only use it as a peripheral.
The Flipper One on the other hand doesn't list Bluetooth but the WiFi chip also supports BT 5.2 which will allow Flipper One apps with precanned BLE exploits for known vulnerable IoT devices.
Some days I have to resort to the Dremel to open a device 🪚
Sometimes the only thing that stands between a hacker and private cell APN access is epoxy, glue and plastic...
Find Zero Days in your devices before the bad guys do:
brownfinesecurity.com/iot-pe…
GrayHats just hacking for the love of the game...
Could work to reduce soft targets when things go hot?
Hackers are the immune system of the internet. 🐞
Maybe?
Randomly doing this for seemingly no reason will probably result in future fridge firmware having better controls and stronger network segmentation. All things considered, finding this out during peacetime seems like the best case?
xitter.twitterapi.xyz/WarMonitor3/status/211…
A few weeks ago my gas company came to my house, installed an IoT gas level monitor on my propane tank and left!
So naturally, I bought a bunch of these devices on eBay.
In this first video, I'll show how I reverse engineered the installers mobile app (with the help of GLM 5.3 Flash) and found some hidden BLE commands that can turn on the cell modem!
youtu.be/HrfnGi6HQrk
There is nothing more American, historically speaking, than the creative destruction of technological progress.
Cotton Gin.
Railroads.
Steel.
Oil refinement.
Modern financial systems.
Automobiles.
Transistors.
All of these technologies massively improved life for the better.
More positive externalities than you could ever count.
LLMs will be the same way. Yes it will bring uncomfortable change. But it's worth it.
