Jacolon Walker
@call_eax
Followers
119
Following
570
Media
61
Statuses
629
🛡️ Vulnerability Researcher | 📊 CyberSecurity Data | 👨🌾 Homesteader. My projects: 🔗 https://t.co/RIkq9oyM57 (organize your links!)
Joined May 2022
RT @charliermarsh: Today, we're announcing our first hosted infrastructure product: pyx, a Python-native package registry. We think of pyx….
0
278
0
RT @tjbecker_: @theori_io's AIxCC CRS has already found dozens of 0day vulnerabilities, and we've barely scratched the surface! The best pa….
0
33
0
I wonder how much OSS documentation is now written by AI versus new or junior developers looking to contribute. This is typically how devs build early stage confidence. My guess is they now use AI to enhance those contributions.
0
0
0
So will @perplexity_ai contribute to V8 development if the unsolicited Chrome offer is entertained? 🙂.
0
0
0
RT @trailofbits: Learn how Buttercup works under the hood:
blog.trailofbits.com
Now that DARPA’s AI Cyber Challenge (AIxCC) has officially ended, we can finally make Buttercup, our CRS (Cyber Reasoning System), open source!
0
38
0
Some early experimentation of using ollama with gpt-oss for automated code review vuln detection, seems promising. Was able to catch a bug I found in Chromium Blink that I was only able to catch via fuzzing and manual code review.
0
0
1
At some point people have to realize we don't need yet another "vulnerability management product" but yet people keep buying and investing. 🤷🏾♂️.
0
0
3
Agreed. I once had a mentor who said, there are those who read the RFC and those who write it.
It's important to remember that "technology influencers" can be bad role models. Many encourage people to be "fans of technology" instead of actual developers of technology. Hot takes are easy, writing good code is not.
0
0
1
The types of posts that bore me, "vibe coding doesn't work on anything slightly complex" or "it's impossible to add code or fix bugs because of vibe coding". This only suggests a few things but IYKYK.
0
0
1
Has anyone built AFL++ to instrument V8 (d8)? The only resource I found is which vaguelly mention it Fuzzilli and LibFuzzer were straightforward.
1
0
3
RT @5aelo: We released our Fuzzilli-based V8 Sandbox fuzzer: It explores the heap to find interesting objects and c….
github.com
This is a basic fuzzer for the V8 Sandbox. It uses the memory corruption API to implement a random-but-deterministic (given a seed) traversal through the V8 heap object graph and corrupts some obje...
0
72
0
RT @natashenka: While most vendors ship timely patches for vulnerabilities reported by Project Zero, they don’t always reach users. Today,….
0
42
0
RT @thezdi: Announcing #Pwn2Own Ireland for 2025! We return to the Emerald Isle with our new partner @Meta and a $1,000,000 WhatsApp bounty….
zerodayinitiative.com
If you just want to read the rules, you can find them here . Last year, we moved our consumer-focused Pwn2Own event to our offices in Cork, Ireland, and the event could not have gone better. Despite...
0
66
0
I'm glad I took notes during my previous fuzzing sessions. Testing a new profile (harness) for a different JS fuzzer engine. Hoping for luck.
0
0
1
Friendly reminder: not everyone is attending or wants to attend Hacker Summer Camp this year.
0
0
1
RT @sidbidasaria: Claude Code is getting a brand new feature: custom subagents. Type `/agents` to get started.
0
510
0
Definitely one of the better sources for modern and fresh content. Subscribe and join!.
We're almost at 30K subscribers on YouTube, have over 100 videos, passed 50K hours watched, and are up to 21 members! Please consider helping us to promote the channel to get a wider reach! All proceeds go back to the community!.
0
0
0