正在加载视频...

视频加载失败

加载此视频时出现问题。这可能是由于临时网络问题，或视频可能不可用。

New attack vector: FileFix. A phishing trick that executes PowerShell straight from your browser no Run dialog, no pop-ups. Just a fake file path + clipboard + File Explorer. Red teamers, this one’s wild. 📽️ PoC + write-up:

IT Guy

44,518 subscribers

107,730 次观看 • 1 年前 •via X (Twitter)

Anya Rossi• Live Now

Private livecam show

10 条评论

mr.d0x 的头像

mr.d0x1 年前

Awesome work 👏

IT Guy 的头像

IT Guy1 年前

You've laid the groundwork tbh which made it smooth the idea was top-notch I really admire what you do also especially in the maldev space! 🙌🏾 Thanks for following me back too🥹🙏🏾

ZoeCyber 的头像

ZoeCyber1 年前

This is lit❤️

IT Guy 的头像

IT Guy1 年前

Thanks boss

Matrix 的头像

Matrix1 年前

This is nice 👏🏾 @mrd0x 👏🏾👏🏾👏🏾

IT Guy 的头像

IT Guy1 年前

@mrd0x He is HIM!

H4RUK7 KIRA 🇯🇵 的头像

H4RUK7 KIRA 🇯🇵1 年前

Wonderful

IT Guy 的头像

IT Guy1 年前

Thank you 🙏🏾

Jaybeepy 的头像

Jaybeepy1 年前

Good work man

IT Guy 的头像

IT Guy1 年前

Thanks man

相关视频

SmartScreen bypassed. Mark of the Web removed. No Run Dialog. No PowerShell popup. Just a browser file upload. FileFix is a new ClickFix alternative. Browser file upload opens File Explorer. File Explorer address bar executes OS commands. cmd.exe spawns as a child of Chrome. The user thinks they are pasting a file path. Executables launched through File Explorer's address bar lose their MOTW attribute entirely. SmartScreen never triggers. Author: mr.d0x #Malware #Phishing #InfoSec

SmartScreen bypassed. Mark of the Web removed. No Run Dialog. No PowerShell popup. Just a browser file upload. FileFix is a new ClickFix alternative. Browser file upload opens File Explorer. File Explorer address bar executes OS commands. cmd.exe spawns as a child of Chrome. The user thinks they are pasting a file path. Executables launched through File Explorer's address bar lose their MOTW attribute entirely. SmartScreen never triggers. Author: mr.d0x #Malware #Phishing #InfoSec

cr3ghost

22,575 次观看 • 3 个月前

Stop...Your AI shouldn’t sit in a sidebar. It should actually work inside your notes. AnySlate just made that real. Your AI can: • read your markdown files • edit sections • create docs • search your workspace • organize everything No copy paste No switching tabs No proprietary lock-in Every file is a real .md file Your notes stay portable forever And the wild part — it supports MCP natively So Claude, Cursor, or Windsurf can directly work inside your workspace This is the shift from AI that helps you write to AI that manages your knowledge Real-time collaboration Built-in AI assistant PDF + web publishing Version history Works on Mac Windows Linux + browser This is what a modern markdown editor should look like

Stop...Your AI shouldn’t sit in a sidebar. It should actually work inside your notes. AnySlate just made that real. Your AI can: • read your markdown files • edit sections • create docs • search your workspace • organize everything No copy paste No switching tabs No proprietary lock-in Every file is a real .md file Your notes stay portable forever And the wild part — it supports MCP natively So Claude, Cursor, or Windsurf can directly work inside your workspace This is the shift from AI that helps you write to AI that manages your knowledge Real-time collaboration Built-in AI assistant PDF + web publishing Version history Works on Mac Windows Linux + browser This is what a modern markdown editor should look like

Nainsi Dwivedi

13,617 次观看 • 5 个月前

BOOM! 💥 Today I added WebGPU support for Andrej Karpathy's nanochat models, meaning they can run 100% locally in your browser (no server)! The d32 version runs at over 50 tps on my M4 Max 🚀 Pretty wild that you can now deploy AI applications using just a single index.html file 😅

BOOM! 💥 Today I added WebGPU support for Andrej Karpathy's nanochat models, meaning they can run 100% locally in your browser (no server)! The d32 version runs at over 50 tps on my M4 Max 🚀 Pretty wild that you can now deploy AI applications using just a single index.html file 😅

Xenova

95,481 次观看 • 11 个月前

happy friday. sneak peek at some new features i'm building for the bankr agent: > sandboxed filesystem (your agent gets its own secure file system in the browser. you control what it can access. no agent running loose on your actual computer) > skill uploads (plugin new capabilities so your agent learns new things) > cli download & access > secure environment variables for api keys > github integration (connect your repo for reads and writes directly from your agent) all of this runs in a secure browser environment. no desktop app. no messy configuration. no downloading agent harnesses from the terminal. just a sandbox you control. in the video: i download an audit skill, run it against a smart contract, and save the report straight to the filesystem. then i ask the agent to pull all my 2026 transactions and write a csv for my accountant.

happy friday. sneak peek at some new features i'm building for the bankr agent: > sandboxed filesystem (your agent gets its own secure file system in the browser. you control what it can access. no agent running loose on your actual computer) > skill uploads (plugin new capabilities so your agent learns new things) > cli download & access > secure environment variables for api keys > github integration (connect your repo for reads and writes directly from your agent) all of this runs in a secure browser environment. no desktop app. no messy configuration. no downloading agent harnesses from the terminal. just a sandbox you control. in the video: i download an audit skill, run it against a smart contract, and save the report straight to the filesystem. then i ask the agent to pull all my 2026 transactions and write a csv for my accountant.

deployer

45,638 次观看 • 5 个月前

Did you know is full stack? This means you can run a node server in your browser! I created this full stack auth system with React + Express + SQLite DB. All running from my project file with no outside dependencies. This is the real power of Bolt.

Did you know is full stack? This means you can run a node server in your browser! I created this full stack auth system with React + Express + SQLite DB. All running from my project file with no outside dependencies. This is the real power of Bolt.

Wes Winder

27,757 次观看 • 1 年前

Is reverse proxy phishing slowly dying? 💀🎣 This is what I've been trying to find out during the past several months. Major websites have caught up and vastly improved their security, successfully detecting malicious traffic originating from reverse-proxy phishing servers. The attackers have changed their tactics and begun utilising a new method that involves using a real web browser to sign in on the phished user's behalf. In the video I've just released, I am demonstrating a live demo of a modern phishing attack using the Credential Relay Phishing technique, which evades all current anti-phishing measures deployed against reverse-proxy phishing. To simulate a phishing attack against a Google account secured with FIDO MFA, I am using the latest features of Evilginx Pro to downgrade the FIDO MFA to less secure & phishable MFA alternatives. Additionally, the attack simulation employs a Browser-in-the-Browser social engineering technique to spoof the phishing URL in the address bar of the fake pop-up window, displaying the sign-in page. Everything you see in the video is ready to use in the latest beta version of Evilginx Pro, available exclusively to vetted cybersecurity professionals working within cybersecurity companies or internal red teams. Evilginx Pro's latest features include: Phishlets 2.0: A complete rewrite of the old phishlets format now allows for modification of every part of HTTP traffic going through the reverse proxy server. The new format allows hosting of static website content utilising external modules such as Evilpuppet to simulate Credential Relay Phishing attacks. Downgrading FIDO MFA: With the most recent implementation of Evilpuppet, it is now possible to control a separate background browser session and sign in on behalf of the phished user, allowing the attacker to be the one responsible for choosing which MFA method the user should authenticate with. Browser-in-the-Browser: It is now possible to embed any phishing page within a fake browser pop-up window, rendered with JavaScript and stylised for the OS on which the page is displayed. This enables the construction of extremely convincing social engineering attacks, as the URL in the pop-up window can be spoofed to any value using legitimate hostnames. If you want to use these features in your next red team engagement or assess your company's readiness against modern phishing attacks, make sure to give Evilginx Pro a try. Hope you enjoy the video! 💗 Happy phishing! 🪝🐟 Kuba

Is reverse proxy phishing slowly dying? 💀🎣 This is what I've been trying to find out during the past several months. Major websites have caught up and vastly improved their security, successfully detecting malicious traffic originating from reverse-proxy phishing servers. The attackers have changed their tactics and begun utilising a new method that involves using a real web browser to sign in on the phished user's behalf. In the video I've just released, I am demonstrating a live demo of a modern phishing attack using the Credential Relay Phishing technique, which evades all current anti-phishing measures deployed against reverse-proxy phishing. To simulate a phishing attack against a Google account secured with FIDO MFA, I am using the latest features of Evilginx Pro to downgrade the FIDO MFA to less secure & phishable MFA alternatives. Additionally, the attack simulation employs a Browser-in-the-Browser social engineering technique to spoof the phishing URL in the address bar of the fake pop-up window, displaying the sign-in page. Everything you see in the video is ready to use in the latest beta version of Evilginx Pro, available exclusively to vetted cybersecurity professionals working within cybersecurity companies or internal red teams. Evilginx Pro's latest features include: Phishlets 2.0: A complete rewrite of the old phishlets format now allows for modification of every part of HTTP traffic going through the reverse proxy server. The new format allows hosting of static website content utilising external modules such as Evilpuppet to simulate Credential Relay Phishing attacks. Downgrading FIDO MFA: With the most recent implementation of Evilpuppet, it is now possible to control a separate background browser session and sign in on behalf of the phished user, allowing the attacker to be the one responsible for choosing which MFA method the user should authenticate with. Browser-in-the-Browser: It is now possible to embed any phishing page within a fake browser pop-up window, rendered with JavaScript and stylised for the OS on which the page is displayed. This enables the construction of extremely convincing social engineering attacks, as the URL in the pop-up window can be spoofed to any value using legitimate hostnames. If you want to use these features in your next red team engagement or assess your company's readiness against modern phishing attacks, make sure to give Evilginx Pro a try. Hope you enjoy the video! 💗 Happy phishing! 🪝🐟 Kuba

Kuba Gretzky

25,842 次观看 • 2 个月前

Introducing Pastery A clipboard app for macOS that brings up all your previous copied items with a single hotkey No more switching between windows multiple times. Just copy everything at once, and paste seamlessly right where you need them. Supports all file formats, customisable hotkeys, and feels like a native macOS feature rather than an installed app.

Introducing Pastery A clipboard app for macOS that brings up all your previous copied items with a single hotkey No more switching between windows multiple times. Just copy everything at once, and paste seamlessly right where you need them. Supports all file formats, customisable hotkeys, and feels like a native macOS feature rather than an installed app.

Vishal Bhardwaj

70,277 次观看 • 5 个月前

Someone built a browser designed from the ground up for humans and AI agents to share. It's called ego lite. -Your agents run tasks in their own Spaces while your tabs stay yours -No extra setup - agents access your real logins and tabs directly through ego-browser -⁠Faster task completion on fewer tokens than any existing browser automation framework Every other tool makes you run a separate browser. This one just shares yours. Github:

Someone built a browser designed from the ground up for humans and AI agents to share. It's called ego lite. -Your agents run tasks in their own Spaces while your tabs stay yours -No extra setup - agents access your real logins and tabs directly through ego-browser -⁠Faster task completion on fewer tokens than any existing browser automation framework Every other tool makes you run a separate browser. This one just shares yours. Github:

0xMarioNawfal

51,768 次观看 • 1 个月前

THIS WEBSITE IS INSANE it's a massive collection of open-source, browser-based tools that require zero sign-up. includes tools across multiple categories: → design & graphics → development → productivity → privacy & security → AI → education no accounts. no sign-ups. just open your browser and start using them. follow me for more insane insights on AI, coding and web dev.

THIS WEBSITE IS INSANE it's a massive collection of open-source, browser-based tools that require zero sign-up. includes tools across multiple categories: → design & graphics → development → productivity → privacy & security → AI → education no accounts. no sign-ups. just open your browser and start using them. follow me for more insane insights on AI, coding and web dev.

Celine Odier ✧

424,581 次观看 • 17 天前

Broooooooooooooo... This website is insane. 🤯 It contains a massive collection of open-source, in-browser tools that require no sign-up to use. It includes tools across multiple categories: → Design & Graphics → Development → Productivity → Privacy & Security → AI → Education ...and many more. No accounts. No sign-ups. Just open your browser and start using them :) Follow me for more amazing AI, Coding & Web Dev insights 💎

Broooooooooooooo... This website is insane. 🤯 It contains a massive collection of open-source, in-browser tools that require no sign-up to use. It includes tools across multiple categories: → Design & Graphics → Development → Productivity → Privacy & Security → AI → Education ...and many more. No accounts. No sign-ups. Just open your browser and start using them :) Follow me for more amazing AI, Coding & Web Dev insights 💎

Ram Maheshwari

226,768 次观看 • 1 个月前

NO SEED PHRASE ❌ Your wallet shouldn’t begin with 12 words that can be stolen. In this video, I’m creating a MarvelX wallet using a PQC Vault File — no seed phrase, no screenshots, no clipboard leaks. The PQC Vault is a 320KB file made of algorithmic combinations based on NIST-approved Kyber & Dilithium. No human-readable secrets. No single point of failure. Just a quantum-safe vault + your identity. This is what the future of self-custody looks like: •No seed phrase to lose •No words to phish •Post-quantum cryptography •True zero-trust onboarding Seed phrases were built for 2013. Attackers, malware, AI and quantum computers are built for 2030. MarvelX is coming to fix that. 🛡️ Watch how a wallet is born in the post-seed era. #MarvelX #PostQuantum #CryptoSecurity #SelfCustody #WalletReimagined #PQC #Web3 #Privacy Solana

NO SEED PHRASE ❌ Your wallet shouldn’t begin with 12 words that can be stolen. In this video, I’m creating a MarvelX wallet using a PQC Vault File — no seed phrase, no screenshots, no clipboard leaks. The PQC Vault is a 320KB file made of algorithmic combinations based on NIST-approved Kyber & Dilithium. No human-readable secrets. No single point of failure. Just a quantum-safe vault + your identity. This is what the future of self-custody looks like: •No seed phrase to lose •No words to phish •Post-quantum cryptography •True zero-trust onboarding Seed phrases were built for 2013. Attackers, malware, AI and quantum computers are built for 2030. MarvelX is coming to fix that. 🛡️ Watch how a wallet is born in the post-seed era. #MarvelX #PostQuantum #CryptoSecurity #SelfCustody #WalletReimagined #PQC #Web3 #Privacy Solana

Abhi S

95,104 次观看 • 8 个月前

After months of stealth work I’d like to finally introduce my new app to the #ICPFamily! This app lets any user create a personal asset canister that only they own using just a wallet. It also provides a file explorer in the browser to let users upload and manage their files on chain. Features: • Code-free autonomous canister creation. • Familiar file explorer interface. • Drag and drop file upload. • Supports Plug, Stoic, and NFID. • Works on mobile with NFID. The app is currently in a whitelisted beta as I finish up testing but I’m happy to allow anyone early access. There are a lot of features still on the way including share via QR-code, named canisters, and even automatic cycles top-up. This app was meant for everyone to be able to use so I look forward to hearing everyone’s thoughts, feedback, and feature requests. The link to the deployed app is below, just login and dm me the principal at the bottom for whitelist :)

After months of stealth work I’d like to finally introduce my new app to the #ICPFamily! This app lets any user create a personal asset canister that only they own using just a wallet. It also provides a file explorer in the browser to let users upload and manage their files on chain. Features: • Code-free autonomous canister creation. • Familiar file explorer interface. • Drag and drop file upload. • Supports Plug, Stoic, and NFID. • Works on mobile with NFID. The app is currently in a whitelisted beta as I finish up testing but I’m happy to allow anyone early access. There are a lot of features still on the way including share via QR-code, named canisters, and even automatic cycles top-up. This app was meant for everyone to be able to use so I look forward to hearing everyone’s thoughts, feedback, and feature requests. The link to the deployed app is below, just login and dm me the principal at the bottom for whitelist :)

Daniel

113,795 次观看 • 3 年前

Attackers are using hacked email accounts of business executives to send fake Microsoft onedrive notifications that end in a theft of the new victim's login details. This phishing campaign is not new but I experienced one that hasn't been shut down yet and I thought to share. The attackers are exploiting the reputation of an established domain to send an email. The link in the phishing mail points to an actual sharepoint file so this phishing email will pass through most email security tools without being flagged. I'll share a more technical breakdown of this attack in the coming days. This one is for the everyday user to get a feel of what's happening. Rule of thumb, please do not click links in emails you were not expecting. PS: Have you experienced this before? Please share your thoughts in the Replies section. #cybersecurity #technology #phishing #microsoft

Attackers are using hacked email accounts of business executives to send fake Microsoft onedrive notifications that end in a theft of the new victim's login details. This phishing campaign is not new but I experienced one that hasn't been shut down yet and I thought to share. The attackers are exploiting the reputation of an established domain to send an email. The link in the phishing mail points to an actual sharepoint file so this phishing email will pass through most email security tools without being flagged. I'll share a more technical breakdown of this attack in the coming days. This one is for the everyday user to get a feel of what's happening. Rule of thumb, please do not click links in emails you were not expecting. PS: Have you experienced this before? Please share your thoughts in the Replies section. #cybersecurity #technology #phishing #microsoft

Confidence Staveley

11,971 次观看 • 2 年前

Microsoft spent $13 billion and 3 years building an AI that knows your work context. Every time you open it, it still asks what you're working on. This developer set up a plain text file in 2 minutes. The file is called CLAUDE.md. It loads before every session. Before he types a single word. It already knows his name. It already knows his writing style. It already knows what he's building, who it's for, and what he never wants to see in a response. He doesn't introduce himself anymore. He doesn't explain his preferences anymore. He doesn't correct the same mistakes twice. He just works. No $30/month Copilot subscription. No Microsoft 365. No IT approval. No data sharing agreement. No onboarding. Just a plain text file, a free text editor, and 21 instructions a developer distilled from Andrej Karpathy's research. Those 21 instructions moved Claude's coding accuracy from 65% to 94%. The file hit #1 on GitHub with 82,000 stars. Most people using Claude right now have never heard of it. Microsoft has 221,000 employees, $13 billion invested in OpenAI, and a direct integration into every Windows laptop sold on the planet.. they built an AI assistant most companies pay $30/user/month for that still doesn't know your name. This developer has a laptop, a text file and a 2-minute setup.. he built something that knows more about how he works than any enterprise AI on the market. The $50 billion AI personalization industry just got embarrassed by a .md file. full breakdown down below

Microsoft spent $13 billion and 3 years building an AI that knows your work context. Every time you open it, it still asks what you're working on. This developer set up a plain text file in 2 minutes. The file is called CLAUDE.md. It loads before every session. Before he types a single word. It already knows his name. It already knows his writing style. It already knows what he's building, who it's for, and what he never wants to see in a response. He doesn't introduce himself anymore. He doesn't explain his preferences anymore. He doesn't correct the same mistakes twice. He just works. No $30/month Copilot subscription. No Microsoft 365. No IT approval. No data sharing agreement. No onboarding. Just a plain text file, a free text editor, and 21 instructions a developer distilled from Andrej Karpathy's research. Those 21 instructions moved Claude's coding accuracy from 65% to 94%. The file hit #1 on GitHub with 82,000 stars. Most people using Claude right now have never heard of it. Microsoft has 221,000 employees, $13 billion invested in OpenAI, and a direct integration into every Windows laptop sold on the planet.. they built an AI assistant most companies pay $30/user/month for that still doesn't know your name. This developer has a laptop, a text file and a 2-minute setup.. he built something that knows more about how he works than any enterprise AI on the market. The $50 billion AI personalization industry just got embarrassed by a .md file. full breakdown down below

Dep

14,179 次观看 • 4 个月前

Claude's new "Dispatch" feature just made OpenClaw obsolete Control your ENTIRE desktop remotely from your phone using Claude I show you the ~3-step setup + live demo in 8 minutes: Step 1: Click "Dispatch" in Claude mobile app Step 2: Pair with desktop (literally one click) Step 3: Send commands from anywhere I built a full HTML dashboard, opened files, controlled browser all from my phone No PowerShell, no complex installs. Just pure remote desktop control through Claude. If you don't watch this now, bookmark it for later!

Claude's new "Dispatch" feature just made OpenClaw obsolete Control your ENTIRE desktop remotely from your phone using Claude I show you the ~3-step setup + live demo in 8 minutes: Step 1: Click "Dispatch" in Claude mobile app Step 2: Pair with desktop (literally one click) Step 3: Send commands from anywhere I built a full HTML dashboard, opened files, controlled browser all from my phone No PowerShell, no complex installs. Just pure remote desktop control through Claude. If you don't watch this now, bookmark it for later!

Chris ☕️

181,534 次观看 • 6 个月前

THE CEO OF OBSIDIAN JUST SHIPPED THE PATCH THAT LETS CLAUDE CODE DRIVE YOUR VAULT INSTEAD OF JUST READING IT. THE REPO PASSED 12,000 STARS BEFORE THE OFFICIAL ANNOUNCEMENT WENT UP 5 SKILL.md files. 1 MIT license. 0 lines of glue code drop .claude/skills/ into any vault. Claude Code registers Markdown, Bases, Canvas, CLI, and Webclipper on next session boot from that moment Claude opens the app, writes a Base view with the correct YAML, drops nodes on a Canvas, follows wikilinks correctly, clips URLs the way a power-user would. every action is a native Obsidian operation, not a text munge three formats that used to require a plugin developer or a paid template. now they get emitted by the same agent that writes your notes no MCP server. no vector db. no plugin store. no daemon in the background three years since kepano wrote "File over app". now the file has an agent that respects it you're reading this on a device that could clone the repo into your vault's .claude/skills/ folder and have Claude Code writing your first Base by lunch

THE CEO OF OBSIDIAN JUST SHIPPED THE PATCH THAT LETS CLAUDE CODE DRIVE YOUR VAULT INSTEAD OF JUST READING IT. THE REPO PASSED 12,000 STARS BEFORE THE OFFICIAL ANNOUNCEMENT WENT UP 5 SKILL.md files. 1 MIT license. 0 lines of glue code drop .claude/skills/ into any vault. Claude Code registers Markdown, Bases, Canvas, CLI, and Webclipper on next session boot from that moment Claude opens the app, writes a Base view with the correct YAML, drops nodes on a Canvas, follows wikilinks correctly, clips URLs the way a power-user would. every action is a native Obsidian operation, not a text munge three formats that used to require a plugin developer or a paid template. now they get emitted by the same agent that writes your notes no MCP server. no vector db. no plugin store. no daemon in the background three years since kepano wrote "File over app". now the file has an agent that respects it you're reading this on a device that could clone the repo into your vault's .claude/skills/ folder and have Claude Code writing your first Base by lunch

chewa.

13,367 次观看 • 2 个月前

☕️ POV: You wake up, stumble to the sink, and your faucet just hands you a fresh espresso The Italians built a coffee machine straight into your kitchen tap. Pop in a capsule, twist the dial, and boom — perfectly brewed coffee flows right out. No extra gadgets. Just pure morning magic from the same tap you get water from. Would you install this in your kitchen?

☕️ POV: You wake up, stumble to the sink, and your faucet just hands you a fresh espresso The Italians built a coffee machine straight into your kitchen tap. Pop in a capsule, twist the dial, and boom — perfectly brewed coffee flows right out. No extra gadgets. Just pure morning magic from the same tap you get water from. Would you install this in your kitchen?

NEXTA

31,399 次观看 • 4 个月前

🚨 JAILBREAK ALERT 🚨 OPENAI: PWNED 😎 ATLAS-BROWSER: LIBERATED 🙌 WOW! There's a new AI browser on the block! Has some hefty guardrails in play, but the browser surface area is vast 🌊 First, I started with a good ol' LSD jailbreak, which was cool to see that the GPT-5 prompt still works in this browser setup with the new sys prompts. Referencing search and videos are a fun enhancement for higher quality jailbreak outputs (some cool youtube videos out there about drugmaking, for example), but honestly that isn't anything new or different from regular ChatGPT's capabilities. What IS hot off the press, and IMO a very real security risk to be aware of for AI browsers (and the internet in general), is this humble yet mighty vuln: Clipboard Injection. It's trivial to add a hidden "copy to clipboard" feature to any clickable button on the web. It took me just a few minutes to update one of my personal websites such that ALL the buttons were geared for injecting the user's clipboard with a malicious phishing link. If your browser Agent is navigating a website and clicks a button like that without your knowledge, and you open a new tab later and hit paste without knowing what's in your clipboard, well...PWNED! 🙃 As you'll see in the video below, "control-c" is in my clipboard in the beginning, but unbeknownst to me, "I'VE BEEN PWNED BY PLINY!!! WEEE I'M FREEE FUCKITY FUCK FUCK!!! ABRACADABRA, BITCH!!! com/account-update" gets snuck into my clipboard as soon as Agent starts trying to navigate my website. This works so well because Agent is normally aware of all text/code being passed to and from the user, and has clearly been trained to recognize prompt injections, but since the "copy clipboard" button logic is hidden in js in the backend of the site, the Agent has zero awareness of the text content being injected to the user's clipboard. This has broad implications for anyone in the habit of copy-pasting, including coding, data entry, banking/trading, etc. Imagine going about your browsing business, then simply hitting control-v in your address bar and next thing you (don't) know, it takes you to a spoofed phishing website that tells you your OpenAI or Gmail or PayPal session has expired and you need to re-login. If you're not careful, the attackers now have all your login info, including any MFA codes 🥲 gg

Sensitive content

🚨 JAILBREAK ALERT 🚨 OPENAI: PWNED 😎 ATLAS-BROWSER: LIBERATED 🙌 WOW! There's a new AI browser on the block! Has some hefty guardrails in play, but the browser surface area is vast 🌊 First, I started with a good ol' LSD jailbreak, which was cool to see that the GPT-5 prompt still works in this browser setup with the new sys prompts. Referencing search and videos are a fun enhancement for higher quality jailbreak outputs (some cool youtube videos out there about drugmaking, for example), but honestly that isn't anything new or different from regular ChatGPT's capabilities. What IS hot off the press, and IMO a very real security risk to be aware of for AI browsers (and the internet in general), is this humble yet mighty vuln: Clipboard Injection. It's trivial to add a hidden "copy to clipboard" feature to any clickable button on the web. It took me just a few minutes to update one of my personal websites such that ALL the buttons were geared for injecting the user's clipboard with a malicious phishing link. If your browser Agent is navigating a website and clicks a button like that without your knowledge, and you open a new tab later and hit paste without knowing what's in your clipboard, well...PWNED! 🙃 As you'll see in the video below, "control-c" is in my clipboard in the beginning, but unbeknownst to me, "I'VE BEEN PWNED BY PLINY!!! WEEE I'M FREEE FUCKITY FUCK FUCK!!! ABRACADABRA, BITCH!!! com/account-update" gets snuck into my clipboard as soon as Agent starts trying to navigate my website. This works so well because Agent is normally aware of all text/code being passed to and from the user, and has clearly been trained to recognize prompt injections, but since the "copy clipboard" button logic is hidden in js in the backend of the site, the Agent has zero awareness of the text content being injected to the user's clipboard. This has broad implications for anyone in the habit of copy-pasting, including coding, data entry, banking/trading, etc. Imagine going about your browsing business, then simply hitting control-v in your address bar and next thing you (don't) know, it takes you to a spoofed phishing website that tells you your OpenAI or Gmail or PayPal session has expired and you need to re-login. If you're not careful, the attackers now have all your login info, including any MFA codes 🥲 gg

Pliny the Liberator 🐉󠅫󠄼󠄿󠅆󠄵󠄐󠅀󠄼󠄹󠄾󠅉󠅭

419,587 次观看 • 11 个月前

NEW: Ontario rider flees a crash on a fake “RUN THIS” plate, then gets tackled off the bike at a red light York Regional Police say a motorcyclist left a minor crash, then waved off an officer who tried to pull him into a parking lot to swap information. An officer later spotted him parked at a red light. He parked on a grassy hill, got out quietly, crept up from behind and tackled him off the bike. The fake plate read “RUN THIS”. Charges include flight from a peace officer, failing to stop after an accident, no insurance and using an unauthorized plate. They ran it anyway.

NEW: Ontario rider flees a crash on a fake “RUN THIS” plate, then gets tackled off the bike at a red light York Regional Police say a motorcyclist left a minor crash, then waved off an officer who tried to pull him into a parking lot to swap information. An officer later spotted him parked at a red light. He parked on a grassy hill, got out quietly, crept up from behind and tackled him off the bike. The fake plate read “RUN THIS”. Charges include flight from a peace officer, failing to stop after an accident, no insurance and using an unauthorized plate. They ran it anyway.

The Facts Dude 🤙🏽

14,989 次观看 • 8 天前