Ron Masas's banner

Ron Masas

@RonMasas • 1,580 subscribers

trying to predict the next token to make you think i’m a security researcher.

Shorts

Last year, I reported a bug to Apple that could freeze any device or cause crash loops by exploiting how GPUs handle shaders. Dubbed ShadyShader, it overwhelmed the system, forcing reboots. Apple patched it (CVE-2023-40441), but similar issues may persist. #cybersecurity #Apple

Last year, I reported a bug to Apple that could freeze any device or cause crash loops by exploiting how GPUs handle shaders. Dubbed ShadyShader, it overwhelmed the system, forcing reboots. Apple patched it (CVE-2023-40441), but similar issues may persist. #cybersecurity #Apple

25,396 views

Videos

Anya Rossi

sweetdream.ai

SweetDream.ai•Sponsored•Livecam

Watch Anya Live

Anya is streaming live right now! Join her private show and enjoy exclusive content.

Exclusive private shows

1.2k viewers online

Private Show

Join now for exclusive access

Free preview available • Premium content

I made a tiny pet that lives on your Dock, modeled after the Claude Code mascot, vibe coded with Claude Code, of course. 😁

I made a tiny pet that lives on your Dock, modeled after the Claude Code mascot, vibe coded with Claude Code, of course. 😁

277,919 views • 3 months ago

I recently got access to OpenAI’s Trusted Access for Cyber program. With all the GPT-5.5 hype and the Anthropic Mythos discussion, I wanted to test it for myself. The result: **GPT-5.4** helped identify and develop a working Safari exploit affecting all Apple devices. It found a JSC WebAssembly use-after-free that gave us stale read/write access inside the Primitive Gigacage. Then it spotted a bug in Safari’s Fetch implementation where in-flight opaque cross-origin responses could be materialized inside renderer memory. By combining the two, a malicious page could steal authenticated cross-origin data and completely defeat the Same-Origin Policy.

I recently got access to OpenAI’s Trusted Access for Cyber program. With all the GPT-5.5 hype and the Anthropic Mythos discussion, I wanted to test it for myself. The result: GPT-5.4 helped identify and develop a working Safari exploit affecting all Apple devices. It found a JSC WebAssembly use-after-free that gave us stale read/write access inside the Primitive Gigacage. Then it spotted a bug in Safari’s Fetch implementation where in-flight opaque cross-origin responses could be materialized inside renderer memory. By combining the two, a malicious page could steal authenticated cross-origin data and completely defeat the Same-Origin Policy.

72,455 views • 2 months ago

I found 2 stored XSS vulnerabilities in ChatGPT. The XSS bug was the easy part, but sharing it required bypassing CSP, leveraging a mass assignment issue for client-side path traversal (thanks Critical Thinking - Bug Bounty Podcast) to force a request to a BFLA endpoint. 🧵 [1/5]

I found 2 stored XSS vulnerabilities in ChatGPT. The XSS bug was the easy part, but sharing it required bypassing CSP, leveraging a mass assignment issue for client-side path traversal (thanks Critical Thinking - Bug Bounty Podcast) to force a request to a BFLA endpoint. 🧵 [1/5]

76,652 views • 2 years ago

No more content to load