bearsyankees

5 ms·

31.
by bearsyankees 5mo ago
fixed now
32.
by bearsyankees 5mo ago
apologies, just a vc firm
33.
Securing a DoD contractor: Finding a multi-tenant authorization vulnerability(strix.ai)
221 points by bearsyankees 5mo ago|101 comments
34.
by bearsyankees 6mo ago
Strix (strix.ai, https://github.com/usestrix/strix )| Founding Engineer | NYC/SF We built the largest open-source AI pentesting framework — 25k GitHub stars, 80k active users, 15B LLM tokens processed daily, 1,800
35.
Context.ai seemingly cause of Vercel breach(twitter.com)
3 points by bearsyankees 6mo ago|0 comments
36.
by bearsyankees 6mo ago
https://x.com/steipete/status/2044423791405924562 very soon it seems...
37.
by bearsyankees 6mo ago
I don't know if I fully agree with this -- how many people were actually self-hosting cal infra? I def could be wrong though
38.
by bearsyankees 6mo ago
+1, at this point all companies need to be continuously testing their whole stack. The dumb scanners are now a thing of the past, the second your site goes live it will get slammed by the latest AI hackers
39.
by bearsyankees 6mo ago
Think this is a bad, bad move... https://news.ycombinator.com/item?id=47780712
40.
Open Source Isn't Dead(strix.ai)
356 points by bearsyankees 6mo ago|186 comments
41.
Show HN: Greptile for Security (open source)(strix.ai)
2 points by bearsyankees 6mo ago|0 comments
42.
We love open source: finding a critical auth bypass in etcd (CVE-2026-33413)(strix.ai)
4 points by bearsyankees 6mo ago|0 comments
43.
What Now (and What's Next)(strix.ai)
11 points by bearsyankees 6mo ago|0 comments
44.
Yale senior hacks United, gets 2.6M miles(yaledailynews.com)
5 points by bearsyankees 6mo ago|0 comments
45.
CVE-2026-33413 found in ETCD by open source AI agent (strix.ai), 8.8 CVSS(wiz.io)
1 points by bearsyankees 7mo ago|0 comments
46.
Caido partners with Strix for the best of both worlds in AI penstesting(strix.ai)
3 points by bearsyankees 7mo ago|1 comments
47.
First Impressions on Open-Source Claude Security (Strix)(theartificialq.github.io)
8 points by bearsyankees 8mo ago|1 comments
48.
Strix Is an Open-Source Claude Code Security(strix.ai)
5 points by bearsyankees 8mo ago|0 comments
49.
Finding a Cross-Tenant Vulnerability in GCP's Apigee(omeramiad.com)
1 points by bearsyankees 8mo ago|0 comments
50.
Reverse Engineering US Airline's PNR System and Accessing All Reservations(alexschapiro.com)
134 points by bearsyankees 10mo ago|63 comments
51.
Reverse engineering a $1B Legal AI tool exposed 100k+ confidential files(alexschapiro.com)
821 points by bearsyankees 11mo ago|288 comments
52.
Pwning OpenAI Atlas Through Exposed Browser Internals(hacktron.ai)
2 points by bearsyankees 11mo ago|1 comments
53.
Low PNR Entropy: I accessed all airline bookings via simple math(alexschapiro.com)
4 points by bearsyankees 11mo ago|1 comments
54.
Airline Left All Passenger Data Vulnerable Due to Missing Last-Name Check(alexschapiro.com)
6 points by bearsyankees 11mo ago|0 comments
55.
Hacktron Hacks Supabase(hacktron.ai)
7 points by bearsyankees 11mo ago|0 comments
56.
Nobel Peace Prize Sparks Insider Trading Questions on Prediction Sites(forbes.com)
3 points by bearsyankees 1y ago|3 comments
57.
by bearsyankees 1y ago
https://archive.ph/T06X9
58.
by bearsyankees 1y ago
The security issue and POCs provided were not real like they said there was a vuln but I double checked it and it was not an exploitable vuln
59.
by bearsyankees 1y ago
Super cool! Just tried it out and it is giving me 100% confidence for two vulnerabilities (one 9.4, one 6.5) that aren't real -- how is that confidence calculated?
60.
by bearsyankees 1y ago
https://archive.ph/qcoSR

More ›