lambda
@pwnlambda
aspiring iOS researcher & estradiol enthusiast @ @calif_io
1K Following2.6K Followers22 Posts
- lambda@pwnlambdalambdaRT @justdionysus: I get the best results when I pretend I’m a TV lawyer. I poke around the code by asking detailed questions to prime the context with model generated facts. These are used for the contract invalidation question “is it ever possible that …” In my head I call it the Matlock methodBrendan Dolan-Gavitt @moyixThe weird part about this is that it can be hard to pin down exactly what makes the difference. An expert just chatting with a frontier model will still get better results than someone unfamiliar with the topic!0503
The weird part about this is that it can be hard to pin down exactly what makes the difference. An expert just chatting with a frontier model will still get better results than someone unfamiliar with the topic!93737.3K- lambda@pwnlambdalambdaRT @calif_io: Let’s set the record straight: @lcfr_hax was the first to discover php2shell and develop a working exploit. See his August 5 tweet: His work convinced the PHP Foundation to invest in fixing this entire bug class. He then worked around the clock to review, test, and retest the patches.LCFR @lcfr_haxd935be023a55b04681eccd1d2b8385b4b295e141a5df108e5e979d8d5d7124ac040703
- lambda@pwnlambdalambdaRT @justdionysus: You can see an iPhone get popped and still understand there’s nuance. I think Apple devices are some of the most expensive to attack. Exploiting them doesn’t make other devices more secure. AI is changing the economics but they’re still there. It hasn’t erased the mitigations.01003
- lambda@pwnlambdasome of the coolest work we have done so far :)Calif @calif_io82eeab7f03c75ece988ea5c7e3bf8434a022f973f977315527e13857fe487235226820.1K
- lambda@pwnlambdalambdaRT @brucedang: If you are tired of AI generated analysis of the 0-click CoreGraphics bug fixed in iOS 26.7.1 a few days ago, here is a more authoritative version from our research team. It includes analysis of WhatsApp too so you get 2 for the price of 1. To whoever found this bug: very cool. Please talk to us at @hexacon_fr next month. No PDFs plz.Calif @calif_ioCVE-2026-86950: The Great Glyph Grift01802
- lambda@pwnlambdalambdaRT @0x41con: 0x41con 7 Mad props to Anna and @qwertyoruiopz for hosting and organising this edition! Kudos to all the speakers! And thank you all for being part of it!017025.8K
- lambda@pwnlambdalambdaRT @gamozolabs: My kinda hot take on the Mythos stuff is really that there is so little money in offensive research that it's still not really that hard to find bugs. These AI companies are operating with budgets that make the entire offensive research of all big tech combined look like a joke067042K
- lambda@pwnlambdaA bit late, but I’ve finally uploaded the slides for the talk I did together with @npupyshev on Apple’s C1 at @0x41con 2025 as well as the slides from my talk at (In)Offensive BCN about my attempts at training specialist LLMs for vulnerability research:13014320.6K
- lambda@pwnlambdaPosts @pwnlambda@npupyshev @0x41con Thanks to @__x86, @xerub and @justandrijana for organising these amazing conferences :)1179.3K
- lambda@pwnlambdalambdaRT @mhackeroni: We are sincerely thankful to our sponsor that make it possible for the mHACKeroni team to take part in the DEF CON 27 CTF in Las Vegas:0360
- Show more posts
