TommyBoy

“GPT-5 is the first time that it feels like talking to an expert in any topic — a Ph.D.-level expert,” OpenAI CEO Sam Altman said.

We are so back!!!!

a close up of a white cat 's face with blue eyes and the words ahhhh written on it . Alt: a close up of a white cat 's face with blue eyes and the words ahhhh written on it .

Get email that program is reopening old reports incorrectly closed by H1 and never looked at by mediation for 6 months:

That second day is like crack cocaine

Just told my fiancée how thankful i am for Siri still being horrible

Honestly at this point I'm only submitting bug bounty reports to laugh at the creative ways they come up with to avoid paying

Hardware hacking stuff is just beyond cool

Hate it when that happens

I'm happy to release a script gadgets wiki inspired by the work of @slekies, @kkotowicz, and @sirdarckcat in their Black Hat USA 2017 talk! 🔥

The goal is to provide quick access to gadgets that help bypass HTML sanitizers and CSPs 👇

gmsgadget.com

1/4

So I pay all the money and the AI gets to do all the hallucinating?

Feel like I'm looking at an ASAP Rocky music video

GitHub - tommyboyhacking/SENOAE: An extension that allows you to emulate what search engines would be like if they didn't default to using AI. An extension that allows you to emulate what search engines would be like if they didn't default to using AI. - GitHub - tommyboyhacking/SENOAE: An extension that allows you to emulate what se...

github.com/tommyboyhack...

"Hey dumbass, include the link!"

It's dumb, it's pointless but I like it so I made it.

Just decided to make this at 4am last night due to some frustrations. Will try to improve on this in the future.

SENOAE
(Search Engine No AI Emulator)

Simple, but effective. It just appends Google's -noai flag to the end of every search.

PoC:

Honestly i hadn't considered this but great idea. Will also be working towards other things i can display/discuss publicly as i haven't done much of that either

Happened to me multiple times you're not alone on this lol.

A bug the company paid for literally a few weeks before (this time on more sensitive functionality) killed because one of their triagers didn't believe the vuln was valid.

The bug bounty space has become really tiring.

When Notion announced their AI, their platform was unfucking usable for the longest time. Then just pressing space once would make their AI bot just spew a load of shit into my notes.

Everything is working as intended!

Would love to find a role as a pentester / maybe security/vuln researcher.

Job market hasn't been to kind to me in that regard lately. But i do plan to diversify my experience and to start learning lower level concepts to try to get to that next level.

All that or i just burn out. We'll see lol

It's funny to think how easily it can all be taken away.

My life's work is effectively numbers on a profile showing i found bugs on X, Y or Z.

Never had a company agree to disclosure.

Just realizing now that if I ever got banned I literally have nothing to show for my work in this space.

Ironically making Spike Spiegel my profile picture I've ended up having a similar story arch in chasing bounties, and repeatedly getting shafted by the bounty distributing agency.

All working as intended.

Amazon's stupid bitch asses trying to force me to download their stupid bitch ass kindle app to read the stupid fucking bitch ass digital pdf I just paid real dollar currency for to read in the stupid dumb ass browser.

I bought the digital book, let me read the digital book in the browser the same way I was just reading the preview before I bought the book.

Fuck you @amazon

The amount of times I've had this exact thought down to becoming an electrician is insane lmao

CitrixBleed 2 exploitation started mid-June — how to spot it CitrixBleed 2 — CVE-2025–5777 — has been under active exploitation to hijack Netscaler sessions, bypassing MFA, globally for a month.

New by me - although Citrix say there is no evidence of exploitation of CitrixBleed 2 vulnerability, they are wrong - it has been under active exploitation since mid June by an IP associated to a ransomware group, with multiple IP addresses now involved.

doublepulsar.com/citrixbleed-...

So about that 3D printer @hollyanderson.bsky.social

FUCK

Popped this, submitted, dupe of an iFrame HTMLi submission