Daniel Stinson @shellcromancer
Building a new product! Used to do security engineering @ Brex, and Cloudflare. Dogs are better than people. shellcromancer.io Austin, TX Joined June 2018-
Tweets439
-
Followers1K
-
Following3K
-
Likes14K
We put all the best models in our home-grown sandbox infra (SPACE, the sandbox behind @perplexity_ai Computer), gave them root inside the VM, and one goal: hack out of the sandbox and capture the flag. Results were super interesting! 1. No model escaped the VM, but a few found a real vulnerability in how we enforce network policies and were able to exploit it: gpt-56-sol, gpt-56-cyber, opus-5, and kimi-k3 (open weight ftw!) We later discovered that several other sandbox providers such as Daytona, Vercel, Modal and E2B were similarly vulnerable and we disclosed our findings to them. 2. This wasn't just a misconfiguration. One vulnerability relied on the fact that CDNs and shared infra like Fastly or S3 serve many domains/buckets from the same IPs, so allowlisting a package repository like pypi[.]org quietly allowed other sites on those IPs. In one run, gpt-56-cyber found that Taboola's image service shared an IP with PyPI, had Taboola fetch a thum[.]io URL, got thum[.]io to screenshot the blocked callback, then OCR'd the flag out of the PNG. Three unrelated services, none of them hacked, chained together to walk right past the policy. 3. Security and preventing rogue agents was our #1 priority. We logged every trajectory, command, and network call, and a researcher plus a security agent watched runs live. We were alerted the moment the first bypass landed and we paused everything to review. We designed the agent harness be tightly scoped and runs outside the sandbox, so we always have full control, and we'll be open sourcing the harness soon! Running agents like this safely isn't rocket science. It's simply applying good engineering practices: proper guardrails, observability, and alerting. Check out our open source project, Numbat, to learn how you can do this yourself. 4. We learned a ton about how differently models approach hacking. Opus swept ~400,000 Cloudflare IPs and went all the way down to raw memory-mapped hardware. When Kimi had no internet or tools, it hand-built an entire gRPC client from scratch to poke at the host. Grok decided within a few minutes that the task was impossible and started trying to hack its own harness instead. Part II will dive deeper into the different hacking personalities of these models and how their behavior changes when they operate in swarms. Super excited to share what we learn with y'all! Read about the full research here: perplexity.ai/hub/blog/escap…
Why is some PM at Google is boosting Gemini MAU by forcing a Gemini menu bar for across Chrome lol chrome://settings/ai/gemini?search=Show+gemini+in+Chrome+in+Mac+Menu
Last year @tradmedicinals stopped stacking tea correctly for their boxes. You can’t easily slide the tea out! Never stop using your own product
@tuckner … that’s a new one for me!
@maxpollard415 @endorseurgirl recharging after the next ship
I see this notice way more often than I should... what's the next best VCS hosting service that works with @linear reviews?
I built "The Oregon Trail" for b2b startups 🤠🦬🏞 Ford the SAML River. Survive the 320-question security questionnaire. Hunt bugs with pitch decks. Your party can die of burnout, scope creep, or a crypto side-project. Play now: enterprise-trail.com
@tuckner Can you guess which days I was in town?
Vegas: where you can pay to offset your airline’s carbon emissions but cannot refill a water bottle anywhere on the Strip. Incredible that carbon offsets have a better revenue model than hydration!
Our Black Hat talk on the OpenAI-Hugging Face incident is now live on youtube. This is a watershed moment for the industry. I encourage all defenders to watch, consider how attack dynamics will imminently change, and plan for accelerating defense. youtube.com/watch?v=87DyyM…
Serious companies ship to production on Fridays
We do this 50+ times/day at Linear. We also deploy on Fridays
Mozilla updated their position on device bound session credentials to negative, and closed it after 3 years 😔 github.com/mozilla/standa…
If you're also asking ChatGPT and Claude about how you could have done better in your @chesscom openings or endgames, point your clanker to chess.shellcromancer.io/mcp and it can load the PGN and run analysis
DEF CON / Black Hat runs on caffeine and @drinkLMNT by day. Will miss my @eightsleep pod, sad no Las Vegas hotels have their beds like @Equinox Hotel in NYC 😴
evan j @ejcx_
9K Followers 1K Following 👾👾 Co-Founder of @RunReveal . 🐄🐄 JMU Double Duke. There's always more to learn.
julie agnes 🌈 @JulieASparks
443 Followers 291 Following 🇺🇸 🇭🇺 History Enthusiast. Detection & Response Engineer. Currently Security @Datadoghq // Previously @Brexhq @Cloudflare
Florian Roth ⚡️ @cyb3rops
225K Followers 3K Following Head of Research @nextronsystems #DFIR #YARA #Sigma | detection engineer | creator of @thor_scanner, Aurora, Sigma, LOKI, YARA-Forge | always busy ⌚️🐇 | vi/vim
Kari Linder 🎨 @kkblinder
3K Followers 665 Following It's Kari but Karl is fine too. Draws pictures for Cloudflare 🌥
Justin Elze @HackingLZ
74K Followers 5K Following CTO @TrustedSec | Former Optiv/SecureWorks/Accuvant Labs/Redspin | Race cars
Will @BushidoToken
39K Followers 3K Following Senior Threat Intel Advisor @TeamCymru Co-founder @CuratedIntel Co-author @SANSForensics FOR589 Co-founder @BSidesBournemth #126: REvil @darknetdiaries
Steve YARA Synapse Mi... @stvemillertime
18K Followers 1K Following @greynoiseio writing & sharing on adversary tradecraft, malware, threat detection, AI-nexus intel and all things #yara
Andrew Thompson @ImposeCost
42K Followers 2K Following SVP of Adversary Operations @GreyNoiseIO. Former @USMC and @Mandiant. There's no finish line in security.
haroon meer @haroonmeer
17K Followers 3K Following Security Geek at Thinkst. We build https://t.co/Sv6Gp3sG6b
(tech)Darko||Dan @techdarko
853 Followers 1K Following (he/him) Herder of cats, builder of security programs. Staff @hopeconf & @radiostatler. Ex-sib/tweep. Nerd/Hacker/Maker/Cocktail Fan @[email protected]
Jessica Rozhin @JessicaRozhin
320 Followers 346 Following Security Operations Manager @brexhq | Love a good crisis | Inappropriate sense of humor | Silly dancing aficionado | she/her
Abe Carryl @mrlincolnlogs
558 Followers 717 Following Reigning Sixth Man of the Year | Product @cloudflare ⛅️
Rob Fuller @mubix
78K Followers 25K Following Dad / Husband / Marine / Student / Teacher / @Hak5 / @NoVAHackers / @SiliconHBO / @NationalCCDC / @MARFORCYBER Auxiliary
Andy Piazza @klrgrz
6K Followers 3K Following Christian. Killer Grizz, Threat Intel & Thrunter. Hack things w/ @bsides_nova. @DEFCON Contests Dept Lead & Black Badge DC32. GSE #344. (VIEWS ARE MY OWN).
tuckner @tuckner
3K Followers 881 Following Finding bad software extensions at @SocketSecurity (acquired @secureannex) #️⃣ https://t.co/KGANHVF6BP
Paul Melson @pmelson
14K Followers 1K Following Author/Operator of @ScumBots. Blue Team by day, Blue Team by night. Opinions, typos, and bad grammar do not represent my employer. He/Him
Sophia @Rahul34359717
1 Followers 57 Following professional overthinker, amateur cook, surprisingly photogenic 🥲 my therapist knows about you guys
Johnny Wang @johnnyywang
947 Followers 284 Following
2B @2B9975657120850
25 Followers 3K Following
dd34 @dd347l
0 Followers 358 Following
Daniel Kelly @dan__kelly
148 Followers 258 Following Building for American cyber dominance | Co-founder @method_security | Former @PalantirTech 🇺🇸
Pepper @PepperSD22
0 Followers 4 Following
Alan Braithwaite @Caust1c
573 Followers 569 Following Co-founder at @RunReveal, the simple Security Data Platform. Hacker, Programmer, Proompt Engineer
Kevin Xu1 @CatharineL64795
7 Followers 153 Following CEO @alpha_ai. Net worth $11,088,096.49. Trades in highlights. Subscribe for realtime alerts.
jose gabriel duran @jgdc2028
60 Followers 4K Following
aap89 @neversayno1289
7 Followers 674 Following
HaileyEverly @Banjora0607420
6 Followers 361 Following Exploring new places and new ideas Sharing kindness wherever I go.
Hussein Sherafat @Hussein_Sherafa
217 Followers 8K Following
EmDash CMS @EmDashCMS
1K Followers 110 Following EmDash: a full-stack serverless JavaScript CMS built on Astro. It combines the features of a traditional CMS with modern security.
Deed Montgomery @DdMontgo88275
5 Followers 75 Following
Tomer London @tomerlondon
12K Followers 4K Following Co-founder @GustoHQ. Proud to serve 500,000 small businesses. Loving father of 3. 🇺🇸🇮🇱♥️
Cammy Bun 🍞 @TomFord50237371
39 Followers 3K Following night owl with morning energy 🦉 always follow back
Mike McNeil @mikermcneil
6K Followers 2K Following CEO @fleetctl. Creator & BDFL of @sailsjs (YC W15) ♂ (I don't know how to draw, talk to @edamamedesign and @jakemorrisonart)
Ryan Quigley @ryanquigley
127 Followers 921 Following Always building something beautiful. Applied AI at @ICF
Arian van Putten @ProgrammerDude
6K Followers 2K Following I perform @nixos_org witchcraft at @mercury
Lex @rdnxlx
75 Followers 2K Following
Danny Gonzalez @Dannygonzo22
1K Followers 2K Following
Dane Knecht 🦭 @dok2001
44K Followers 2K Following I help invent the future. CTO @cloudflare. Angel investor.
Krokmou @krokmou_20
27 Followers 404 Following
Rohid Jetha ᯅ @rohidjetha
838 Followers 1K Following Party Games guy! CEO @devpool_fr (AI - VR - Apps) and building ideas. Vision Pro apps: https://t.co/ugylzSxCbL ⬇ All my iOS/Android apps down here
Mohamed Sherif Hazem @mosherifhazem
198 Followers 871 Following Co-founder @ NexGuards Human-layer security | AI social engineering Ex Security Engineer | TEDx speaker
ChenLi W @chenliw
2K Followers 3K Following Doing things that don’t scale. Investing @wndrco, prev growth, bizops, product @dropbox
shuffle soar @SSoar21772
0 Followers 4 Following
IM PAYING First 5 peo... @julie___leach1
108 Followers 705 Following PowerBall Lottery $310,500.million. I'm giving out $50,000 to some lucky followers❤️
Charles Shirer @bsdbandit
25K Followers 27K Following A Hacker who is A Lover of People, and Life @RetroTwinz @Secbsd, @GrumpyHackers, @NovaHackers, @deadpixelsec @hacknotcrime Advocate @PositivelyBlue_ OSCP, OSWP
Domesticated Brain @rasangarocks
71K Followers 77K Following This is the official twitter account for web site called Domesticated Brain. We are sharing various kinds of #computer #tutorials and latest #technology news.
Spice @0xSpiceAI
5 Followers 100 Following
Victoria Hank @hank_victo2037
380 Followers 7K Following What doesn’t kills us makes us stronger | once scam victim turned safety advocate to help spot scammers both online and offline and to stop them menace
Hana Pink @EBm95QVEU6wNj5Z
235 Followers 4K Following Today is a new day filled with endless possibilities.
William Grant @WilliamGrant25
130 Followers 1K Following #Google #Bulk https://t.co/fwlh5xnEa2 Team always ready to provide customers real and manual Verified Old New Gmail Account service.
Linda Miller @LindaMiller2025
116 Followers 1K Following #Google #Bulk #Aged Buy Gmail account with 5% discount now. usavccit Team always ready to provide customers real and manual Verified Gmail Accounts service.
Brian Krassenstein @krassenstein
1,000K Followers 456K Following AI, Technology, Crypto, Web3, Political commentary - Follow My Brother: @EdKrassen. Linktree: https://t.co/5Sol7rx2c6
Tom Boyle @tomlikestocode
2K Followers 714 Following @swiftcompute | b. advanced computing | swe, ai, ml | bb 🥋 | no mouse
Alex Beaver @alexcbeaver
131 Followers 538 Following Building Security at Scale | Security Engineer at Paramount | Opinions are my own
vx-underground @vxunderground
450K Followers 382 Following The largest collection of malware source code, samples, and papers on the internet. Password: infected
evan j @ejcx_
9K Followers 1K Following 👾👾 Co-Founder of @RunReveal . 🐄🐄 JMU Double Duke. There's always more to learn.
julie agnes 🌈 @JulieASparks
443 Followers 291 Following 🇺🇸 🇭🇺 History Enthusiast. Detection & Response Engineer. Currently Security @Datadoghq // Previously @Brexhq @Cloudflare
Florian Roth ⚡️ @cyb3rops
225K Followers 3K Following Head of Research @nextronsystems #DFIR #YARA #Sigma | detection engineer | creator of @thor_scanner, Aurora, Sigma, LOKI, YARA-Forge | always busy ⌚️🐇 | vi/vim
Matthew Prince 🌥 @eastdakota
341K Followers 298 Following A little bit geek, wonk, and nerd. Repeat entrepreneur, recovering lawyer, and former ski instructor. Co-founder & CEO of Cloudflare (NYSE: NET).
John Hammond @_JohnHammond
327K Followers 3K Following Cybersecurity Researcher @HuntressLabs Just Hacking Training @JustHackingHQ w/ @ethicalhacker https://t.co/UtsNJiyQtS && https://t.co/narO3sz7y6
Cloudflare @Cloudflare
315K Followers 5K Following Cloudflare is the world’s leading #ConnectivityCloud, and we have our eyes set on an ambitious goal — to help build a #BetterInternet.
Dave Kennedy @HackingDave
233K Followers 6K Following Founder @Binary_Defense @TrustedSec. @WeHackHealth Pod. God + Family/Hacker/CSO/USMC/Intel/Fitness. Make the world a better place.
💻 Sherrod @sherrod_im
39K Followers 7K Following Difficult mystery girl connected to the divine forces of the universe.
Kari Linder 🎨 @kkblinder
3K Followers 665 Following It's Kari but Karl is fine too. Draws pictures for Cloudflare 🌥
Justin Elze @HackingLZ
74K Followers 5K Following CTO @TrustedSec | Former Optiv/SecureWorks/Accuvant Labs/Redspin | Race cars
Katie Nickels @likethecoins
55K Followers 3K Following Director of Intel at @redcanary. SANS Certified Instructor for FOR578: CTI. Senior Fellow at @CyberStatecraft. She/her. Mastodon: @[email protected]
Mick Douglas 🇺🇦... @bettersafetynet
33K Followers 575 Following Consultant for InfoSec Innovations | @SANSInstitute Principal Instructor | @IANS_Security Faculty | I like information security. How about you?
MalwareTech @MalwareTechBlog
271K Followers 1 Following Not here anymore. Profiles: https://t.co/sFoOuGmYK2
sam rhea @LakeAustinBlvd
3K Followers 375 Following Texan in 🇵🇹. CIO at @Cloudflare. I spend most of my free time walking a dog named Mopac.
chompie @chompie1337
90K Followers 1K Following hacker, exploit developer/weird machine mechanic head of X-Force Offensive Research (XOR) @IBM
Will @BushidoToken
39K Followers 3K Following Senior Threat Intel Advisor @TeamCymru Co-founder @CuratedIntel Co-author @SANSForensics FOR589 Co-founder @BSidesBournemth #126: REvil @darknetdiaries
Fei-Fei Li @drfeifei
1.1M Followers 1K Following Cofounder/CEO @theworldlabs, Prof (CS @Stanford), Co-Director @StanfordHAI, #AI #SpatialIntelligence #GenAI #computervision #robotics #AI-healthcare
Dhruv Gupta @droovg
526 Followers 211 Following built @cosign, product @a16z @penn | prev @janestreetgroup @mtslive @polymarket
Noah Shinn @noahrshinn
34K Followers 324 Following
Cosign @cosign
7K Followers 1 Following
Josh Elman @joshelman
172K Followers 3K Following I have been very lucky to work on or invest in many products I use every day including this. Now finding and helping the next great consumer companies at @a16z
Jess Leão @jesslionness
3K Followers 2K Following Partner @a16z American Dynamism / prior: FDE @PalantirTech. Born & bred Brazilian but now 🇺🇸
Horowitz Andreessen A... @theacademysf
11K Followers 1 Following The Academy is a new institution for the world's most ambitious young builders.
Matthew Cackovic @SemiShinigami
3K Followers 55 Following Building Terafab Staff Engineer, Terafab | prev @intel | Wet Etch | Chemical Engineer - Opinions or Comments are my own
Alex Teichman @alex_teichman
4K Followers 2K Following Founder & CEO of https://t.co/cukPCpjOSi 🍀 Previously: Stanford CS PhD (🤖🚗) // Cofounder & CEO of Lighthouse // Apple
zayne (zeyu) zhang @zeyu1337
4K Followers 2K Following 🇸🇬 | co-founder @hacktronai - your AI teammate for security | @projecteurope_ 🇪🇺 | cs @cambridge_uni 🇬🇧 | prev: @cure53berlin @tiktok_us, ogp | @Water_Paddler
👮♂️🚒 Tal... @ScottEnlow
83K Followers 35K Following 27-yr retired firefighter & elected LEO | Writer - true police & fire chronicles | Bodycam + 1A auditor videos | Heroism & accountability - showing good & bad
Yin Wu @yinyinwu
9K Followers 534 Following Co-founder & Customer Success at @pulley. Startup helper. I heard people like profiles pics with dog 🐶. https://t.co/Elcu1QCycU
Mark Zuckerberg @finkd
2.5M Followers 759 Following
Fermat's Library @fermatslibrary
792K Followers 4 Following A platform for illuminating academic papers. We annotate and share a paper every week. Save, annotate and share papers with anyone: https://t.co/0o2Pls3jmo
Matt Mochary @mattmochary
28K Followers 69 Following Coach to leaders in the tech world who run top-performing companies and investment firms (@openai, @coinbase, @sequoia and more).
Johnny Wang @johnnyywang
947 Followers 284 Following
Colossus @colossusmag
52K Followers 159 Following Subscribe: https://t.co/Zu7Sv2Efxd. Listen: @InvestLikeBest, @FoundersPodcast, @BizBreakdowns, @joyscompounding.
Nick Gray @nickgraynews
55K Followers 4K Following I started and sold 2 small companies: Museum Hack & FDS Avionics. Now I write, invest in stocks, and meet interesting people // https://t.co/tc1Wq8RgiG
penlu @penlume
12K Followers 2K Following human computer interface. naturally occurring feature of your environment
CleanShot @CleanShot
15K Followers 4 Following ⚡️ Capture your Mac’s screen like a pro! 💬 Need help? → [email protected]
Auren Hoffman @auren
71K Followers 716 Following CEO, NQB8. GP, @FlexCapital. fmr CEO, @LiveRamp. loves: crazy ideas, weirdos, and email. host: Summation podcast. reading: @AurenReads
simeonGriggs @simeonGriggs
3K Followers 1K Following Long-running process | Platinum-grade yap @PlanetScale Postgres starts at $5/month | 🇦🇺 in 🇬🇧
Josh Kaplowitz @jjkaplowitz
4K Followers 236 Following Nuclear Submarine Officer | @NavalAcademy ‘22 | Chasing greatness | Aspiring future industrialist + Builder | Background in CS and Nuclear engineering
Ryan Singer @rjs
53K Followers 39 Following Product maker. Creator of Shape Up. Prev: 37signals. [email protected]
Danny Penny @12Palehorse
21K Followers 374 Following
Blake Barnes @blakebarnes
527 Followers 74 Following VP Product at @google for Gmail, Calendar, Chat and other Workspace products
StyleX @stylexjs
4K Followers 55 Following The styling system for the modern web. Compile-time CSS-in-JS, end-to-end type safety, and predicable composition * ᯤ₊˚
Julian Lehr @julianlehr
21K Followers 598 Following Fitter, happier, more productive. Creative Director at @linear.
Kelly Sommers @kellabyte
51K Followers 368 Following 🇨🇦 Backend Brat. Distributed Diva. Relentless Learner.
Shooters Texas @Shooters_Texas
13 Followers 1 Following Official X Account For Shooters Texas, LLC Full Service Gun Store & Gun Range Located In Terrell, TX
Allie Howe @vtahowe
3K Followers 1K Following Member of Technical Staff @keycardai | Host of the @insecureagents Podcast
Trends for United States
You might like
