tjbecker

7 ms·

1.
by tjbecker 5mo ago
https://x.com/i/status/2049687923814281351 > and yes, RHEL 14.3 doesn't exist We meant to say RHEL 10.1. Sorry for the confusion!
2.
by tjbecker 5mo ago
For this crowd, I highly suggest checking out the technical writeup https://xint.io/blog/copy-fail-linux-distributions
3.
by tjbecker 5mo ago
This is correct. The container escape exploit and writeup is not yet released.
4.
by tjbecker 5mo ago
I recommend reading the technical writeup https://xint.io/blog/copy-fail-linux-distributions
5.
by tjbecker 9mo ago
This is fair, and we will gladly share the extraordinary evidence as soon as we can. If you're curious, we have already released the full traces of finding a sqlite3 0day with an early version of Xint Code (submitted to the AIxCC compe
6.
by tjbecker 9mo ago
In the commenter's defense, it's reasonable to be skeptical about the level of autonomy claimed in the post. We are very eager to share more evidence (including the raw inputs and output artifacts for these bugs) and will absolute
7.
Autonomous code analyzer beats all human teams at OSS zero-day competition(theori.io)
8 points by tjbecker 9mo ago|4 comments
8.
No, it doesn’t just crash Safari. Apple has yet to fix exploitable flaw(arstechnica.com)
3 points by tjbecker 5y ago|0 comments
9.
by tjbecker 6y ago
> Sure, but that isn’t the user’s fault, and they’re the ones who are going to get attacked. This is true, but the responsibility to protect these users is ultimately on Slack, not the researcher. If Slack's bounties are nowhere nea