Abu @abutwowin

On July 25, we hacked OpenAI. Two bugs let us take over ChatGPT/Codex accounts of OpenAI employees (+some unaffiliated users) and reach connected services: Outlook, Slack, GitHub, etc. We proved it with a PR in OpenAI’s internal codebase . It took us <72h. 🧵

353 1K 12K 2.8M 6K

View Details

International Cyber Digest @IntCyberDigest

a month ago

Nightmare Eclipse, the person who has been dropping Windows zero-days, has finally decided to share his story. He's an ex-Microsoft employee, we had dinner together, and I've known him and his story for some time. His real name is Abdelhamid Naceri. He's a very talented and intelligent individual, and he came across as someone who'd be a real professional to work with. "If only I didn't pour my soul into that job with countless of stupid non sleep nights, i would have gotten over it..." - Naceri He loved Microsoft. I wouldn't say that what he did, releasing all those zero-days, was normal, but he felt he had no other option because of the injustice Microsoft did to him. They fired him, and you can read the vague reason they gave in the email sent to him by the Vice President of Engineering at MSRC, below. According to Abdel's account, VP Tom Gallagher met with him after the firing to tell him they were blacklisting him from Microsoft and writing him a bad reference so he'd never be able to get a job again. Normally you'd think, well, big deal, just find another job, right? But Abdel doesn't have a European passport, and he was only a couple of months away from getting permanent EU residence. So instead of granting him those couple of months, Microsoft fired him for a reason that, as far as we can tell, was never made clear, then fought him in court and offered him €55,000 plus a year's pay to drop the case. All while Abdel was releasing zero-days. Abdel continued suing Microsoft for unfair termination in Germany, a fight that has cost him over $200,000. He says Microsoft refused to reveal any details about the security breach and went another direction. If you are reading this, and you can offer him a LEGAL job, this is his e-mail: [email protected]

107 519 5K 231K 2K

View Details

Abu @abutwowin

a month ago

on-chain minted : )

0 0 0 21 0

View Details

Abu @abutwowin

a month ago

certified human

1 0 0 33 0

View Details

Abu @abutwowin

a month ago

Check out Aburahman918's profile on Human Tech Covenant manifest.human.tech/profile/0x85b3…

0 0 0 22 0

View Details

Abu @abutwowin

a month ago

I choose to manifest a brighter future with human-aligned tech. I reject the false choice of "tech vs humanity." I choose self-custody with privacy. Signer: mp4rymh08mtxod6ax19240e5 @humntech manifest.human.tech/read-covenant#…

1 0 0 24 0

View Details

Abu @abutwowin

a month ago

that's rare

0 0 1 34 0

View Details

Abu @abutwowin

2 months ago

@0x0SojalSec nice phish

0 0 0 56 0

View Details

Abu @abutwowin

2 months ago

these ads are getting damn creative

0 0 0 19 0

View Details

Abu @abutwowin

2 months ago

@0xLupin one of the best reads I've had in a while - but one question that might still bug the public would be "what if the possibilities of finding out a new vuln class becomes obsolete" but still that might not be the case still cause everyday the technologies boundaries are expanding.