talhof8

talhof8 on Hacker News

AuthMask: Microsoft Authenticator Hands over Tokens to an App with 0 Permissions

Posted by talhof8 on Monday October 26, 2026 @06:26AM
from the twitter.com dept.

https://twitter.com/EnclaveAI/status/2114356312368623761

( Read More... | no comments | on HN )

Show HN: AI agent swarms test if new CVEs are exploitable in your env

Posted by talhof8 on Saturday October 24, 2026 @12:00PM
from the show-hn dept.

https://app.enclave.ai/threat-feed

( Read More... | no comments | 2 points | on HN )

Access open‑weight, cyber‑capable models with one API key

Posted by talhof8 on Friday October 02, 2026 @07:07PM
from the router.enclave.ai dept.

https://router.enclave.ai/login?next=%2F

( Read More... | no comments | on HN )

DeepSeek v4.1 Flash Is Now Our Best Hacking Model

Posted by talhof8 on Wednesday September 16, 2026 @08:19AM
from the enclave.ai dept.

https://enclave.ai/blog/deepseek-v41-flash-is-now-our-best-hacking-model

( Read More... | 67 comments | 91 points | on HN )

We Raced Seven AI Models to RCE

Posted by talhof8 on Monday August 31, 2026 @12:58PM
from the enclave.ai dept.

https://enclave.ai/hackingrace

( Read More... | no comments | on HN )

Nice2Meet: We Turned Teams Mobile Meetings into a Silent Account Takeover

Posted by talhof8 on Wednesday August 12, 2026 @09:17AM
from the enclave.ai dept.

https://enclave.ai/blog/nice2meet-we-turned-teams-mobile-meetings-into-a-silent-account-takeover

( Read More... | no comments | 3 points | on HN )

Chinese LLMs write more vulnerable code when prompted as U.S. officials

Posted by talhof8 on Tuesday July 21, 2026 @07:59AM
from the boozallen.com dept.

https://www.boozallen.com/expertise/cybersecurity/whats-in-americas-code.html

( Read More... | 1 comment | 2 points | on HN )

Amdahl's Law and the Work That Remains

Posted by talhof8 on Tuesday July 14, 2026 @03:22PM
from the twitter.com dept.

https://twitter.com/talhof8/status/2077062730054324567

( Read More... | no comments | 2 points | on HN )

Abusing the Sandbox for a Critical Cross-Tenant Vulnerability in Writer AI

Posted by talhof8 on Tuesday July 07, 2026 @02:10PM
from the sandsecurity.ai dept.

https://www.sandsecurity.ai/blog/writeout-writer-ai-cross-tenant

( Read More... | no comments | on HN )

Unipop: Data Federation and Virtualization Engine

Posted by talhof8 on Thursday July 02, 2026 @11:31AM
from the github.com dept.

https://github.com/unipop-graph/unipop

( Read More... | no comments | on HN )

PorTAL: Portable Task Adapters for LLMs

Posted by talhof8 on Wednesday July 01, 2026 @04:28PM
from the twitter.com dept.

https://twitter.com/ramplabs/status/2072381992285647280

( Read More... | no comments | 2 points | on HN )

We got DeepSeek-V4-Pro serving in 20 seconds

Posted by talhof8 on Thursday June 25, 2026 @04:49PM
from the inferize.ai dept.

https://inferize.ai/blog/restoring-live-multi-gpu-llms-in-seconds

( Read More... | no comments | 7 points | on HN )

Can gzip be a language model?

Posted by talhof8 on Tuesday June 16, 2026 @04:51PM
from the twitter.com dept.

https://twitter.com/nathanrs/status/2066924065521357093

( Read More... | no comments | on HN )

Flag turned Microsoft 365 apps into account takeover pipeline

Posted by talhof8 on Tuesday June 02, 2026 @01:24PM
from the enclave.ai dept.

https://enclave.ai/blog/flagleft-microsoft-365-android-forgotten-flag-account-takeover

( Read More... | no comments | 2 points | on HN )

MapRoot: Two OSS zero-days to cross-tenant RCE in Microsoft Planetary Computer

Posted by talhof8 on Thursday May 28, 2026 @10:47AM
from the enclave.ai dept.

https://enclave.ai/blog/maproot-two-cross-tenant-rce-on-microsoft-planetary-computer

( Read More... | no comments | 2 points | on HN )

Two kinds of work, and where AI belongs

Posted by talhof8 on Saturday May 09, 2026 @03:42PM
from the twitter.com dept.

https://twitter.com/talhof8/status/2051337721151455509

( Read More... | no comments | on HN )

CPU Work and GPU Work

Posted by talhof8 on Sunday May 03, 2026 @09:57AM
from the talhoffman.com dept.

https://www.talhoffman.com/2026/05/03/cpu-work-and-gpu-work/

( Read More... | no comments | 2 points | on HN )

Azure SRE Agent flaw lets outsiders silently eavesdrop on cloud operations

Posted by talhof8 on Tuesday April 21, 2026 @11:18AM
from the csoonline.com dept.

https://www.csoonline.com/article/4161389/azure-sre-agent-flaw-let-outsiders-silently-eavesdrop-on-enterprise-cloud-operations.html

( Read More... | no comments | 3 points | on HN )

We Could Watch Your Azure SRE Agent in Real Time

Posted by talhof8 on Monday April 20, 2026 @09:08AM
from the enclave.ai dept.

https://enclave.ai/blog/anyone-could-watch-your-azure-ai-agents-conversations-in-real-time

( Read More... | no comments | 2 points | on HN )

Agentic system to find 0-days in binaries

Posted by talhof8 on Tuesday February 24, 2026 @03:58PM
from the substack.com dept.

https://substack.com/home/post/p-188916866

( Read More... | no comments | on HN )

The End of Lazy SaaS: Same Game, Harder Rules

Posted by talhof8 on Thursday February 19, 2026 @10:48AM
from the verissimo.substack.com dept.

https://verissimo.substack.com/p/verissimo-monthly-february-2026

( Read More... | no comments | 2 points | on HN )

Re:8M users' AI conversations sold for profit by "privacy" extensions on Tuesday December 16, 2025 @10:59AM (#46290173)

Well, you’d be surprised to discover that Koi is also an Israeli company, and they were the ones who even discovered this

https://www.calcalistech.com/ctechnews/article/syoe1xjslx

Recursive Language Models (RLMs)

Posted by talhof8 on Wednesday October 15, 2025 @01:43PM
from the alexzhang13.github.io dept.

https://alexzhang13.github.io/blog/2025/rlm/

( Read More... | 34 comments | 14 points | on HN )

Everything you've been told about burnout is wrong

Posted by talhof8 on Monday September 01, 2025 @11:06AM
from the twitter.com dept.

https://twitter.com/bscholl/status/1962164588633530596

( Read More... | 2 comments | 2 points | on HN )

A Vulnerability Chain Leading to AI Server Takeover in NVIDIA Triton

Posted by talhof8 on Monday August 04, 2025 @10:29AM
from the wiz.io dept.

https://www.wiz.io/blog/nvidia-triton-cve-2025-23319-vuln-chain-to-ai-server

( Read More... | no comments | 2 points | on HN )

Vibe coding platform allowed access to private apps

Posted by talhof8 on Tuesday July 29, 2025 @10:44AM
from the wiz.io dept.

https://www.wiz.io/blog/critical-vulnerability-base44

( Read More... | no comments | 3 points | on HN )

Director.ai - Browser-based automation

Posted by talhof8 on Tuesday June 17, 2025 @11:22AM
from the director.ai dept.

https://www.director.ai/

( Read More... | 1 comment | 2 points | on HN )

The Unreliability of LLMs and What Lies Ahead

Posted by talhof8 on Monday June 02, 2025 @12:36PM
from the verissimo.substack.com dept.

https://verissimo.substack.com/p/verissimo-monthly-may-2025

( Read More... | 158 comments | 80 points | on HN )

Re:Show HN: Flowcode – Turing-complete visual programming platform on Tuesday April 29, 2025 @08:14AM (#43831539)

Pretty cool! Congrats on the launch.

Would love more built-in templates. Might be useful to plug this to Zapier, or support MCPs.

Edit: And built-in logs please!

Exposed DeepSeek database leaking sensitive information, including chat history

Posted by talhof8 on Wednesday January 29, 2025 @04:25PM
from the wiz.io dept.

https://www.wiz.io/blog/wiz-research-uncovers-exposed-deepseek-database-leak

( Read More... | 477 comments | 302 points | on HN )