joe-limia

4 ms·

1. 1.▲
   by joe-limia 7mo ago

   Despite the obvious self promotion, this whole concept of insecure skills is so dumb to me, if your engineers are installing and running random "skills" found online it's the same as if you had engineers copy and pasting comm
2. 2.▲
   Building an Agentic Bug Bounty Hunter on a Raspberry Pi 5(joe-b-security.github.io)

   6 points by joe-limia 7mo ago|0 comments
3. 3.▲
   by joe-limia 9mo ago

   imo there is not a vulnerability without demonstrating impact. Whilst they should do the bare minimum to acknowledge the report, it's pretty much just noise. - If the system prompt did not have sensitive information it would only be cl