Sublime

An inspiration engine for ideas

AllPeopleCollectionsArticlesAudioBooksFilesHighlightsImagesLinksNotesTextTweetsVideosSocial

By now, you're probably heard about the exploit in several of ThirdWeb's contracts involving a popular open source library. It's not the easiest exploit to understand so I'm going to provide: - An explanation as if you were 5 - A more technical deep dive Let's jum... See more

cygaar

x.com

so i put up a proxy on their app and guess what 270k coinbase engineers are calculating user's usage on client side. i blocked their log_tokens api and now i can access their all models without any usage restriction lol??? https://t.co/kU32lcd9Zk

bharat

x.com

This is "Flipper ZERO" This can break into your house 💀. Here are some CRAZY examples. https://t.co/sr8PAlukML

Alif Hossain

x.com

I just hacked multiple @lovable_dev 'top launched' sites Wait—what? In less time than it took me to finish my lunch (47 mins), I extracted from live production apps: 💰Personal debt amounts 🏠Home Addresses 🗝️API keys (admin access) ___LINEBREAK_... See more

Danial Asaria x.com

apple sherlocked 1Password today, so i'd like to remind you that your Apple ID is only as secure as your carrier. if you have 2FA on and get SIM swapped, attackers can lock you out of it PERMANENTLY. last month it happened to me. make sure it doesn't happen to you: 🧵

Siqi Chen x.com

Thumbnail of www-x-com-pencilflip-status-1483880018858201090-d70c5dfb38494b56

.@armaniferrante recently published a great repository of 10 vulnerabilities to avoid when writing Solana programs. Here's the quick rundown if you don't feel like digging into the code 👇 https://t.co/PSNzzZwafB... See more

pencilflip 🍄

x.com

Yesterday, I tried to find out where the Deepseek servers are located, but I couldn't because they are Cloudflare-protected. Just now, someone randomly sent me a link to: "CF-Hero is a reconnaissance tool that uses multiple data sources to discover the origin IP addresses of Cloudflare-protected web applications"

Tom Dörr

x.com

Proxy to bypass Cloudflare protection https://t.co/zA2VUK91P2

Tom Dörr

x.com

OK my $1000 bounty on this is starting to pay off. @icanc4 has been working it at Waterloo and connected w a Russian hacker who has tons of not-published-in-English info. There's a kill-switch in FaceID modules which we thought was antitampering, but it's actually laser safety!

Nick Parker x.com