Katie Paxton-Fear @InsiderPhD

Dr, apparently. Security Adovcate @semgrep & Hacker. #BugBounty hunter & #infosec YouTuber. APIs & Interlinked OffSec, PhD in AI+Sec @hacknotcrime. she/her youtube.com/c/InsiderPhD Manchester, UK Joined February 2018

Tweets

21K
Followers

97K
Following

2K
Likes

19K

Katie Paxton-Fear @InsiderPhD

12 hours ago

@ryzerth I completely forgot about them, GOD what a horrible situation for makers and tinkerers, in a world where e-waste is insane

0 1 11 430 0

View Details

Katie Paxton-Fear @InsiderPhD

13 hours ago

If you have missed out on this, because electronics retailers just don’t exist outside of Ali Express unless you are buying essentially standard kit components, you now have massive import fees in the EU

Ryzerth 🐲 @ryzerth

17 hours ago

That stupid bitch is destroying every technical hobby. Need to order components? Every line item in the invoice gets a 3€ fee. 10 cents worth of resistors now cost you 3.10€.... This adds up quick...

182 680 11K 650K 590

6 24 290 9K 22

View Details

Ryzerth 🐲 @ryzerth

13 hours ago

@InsiderPhD Not just aliexpress, but reputable suppliers like Digikey and Mouser which are the de-facto standard for low-volume components :/

1 2 23 1K 1

View Details

Katie Paxton-Fear @InsiderPhD

13 hours ago

The UK is also removing their de minimis rule though on what scale and how remains to be seen but in theory this is supposed to harm Temu wasteful products that end up in the bin, in practice it means that UK distributors buy the same shit and sell it for slightly more

0 0 6 794 0

View Details

Geekboy @emgeekboy

18 hours ago

Today we're launching securitycontext.dev It gives any AI agent ready-to-use security context for thousands of open source projects, built from each project's commit history of security fixes and its disclosed CVEs. Useful whether your agent is writing code or reviewing it for bugs. Free, no auth, over MCP and API.

4 19 124 8K 129

View Details

Katie Paxton-Fear @InsiderPhD

a day ago

A lot of people are talking about it Minecraft but they are almost certainly talking about reverse engineers who figure out how multiplayer game clients work and then use that knowledge to spin up their own servers, which should send out massive alarm bells about RE

0 0 1 1K 0

View Details

Katie Paxton-Fear @InsiderPhD

a day ago

Back in my day emulation was legal now it’s black market

Dexerto @Dexerto

2 days ago

Minecraft and Call of Duty community servers have been branded "illegal" and compared to the "black market" by the Entertainment Software Association The comments came during a debate over preserving games after official servers shut down

421 2K 29K 3.1M 4K

4 0 18 3K 0

View Details

✪ Felippe @FelippeRegazio

2 days ago

omg fork found in kitchen! 🥸 😮

International Cyber Digest @IntCyberDigest

2 days ago

‼️ BREAKING: Anthropic has embedded hidden spyware-like code in Claude Code that covertly targets Chinese users. It then sends information regarding every user by injecting it into their prompt message. Claude Code is sending info like timezone, proxy and possible AI Lab

843 3K 17K 5.0M 5K

2 10 213 14K 12

View Details

Katie Paxton-Fear @InsiderPhD

2 days ago

- Figuring out how to patch the remediation crisis, great we have all these vulnerabilities what on earth do we need to fix first - Figuring out which models are good at which vulnerabilities, for a proper multi-model setup that leverages things like counsel of AI

0 0 0 325 0

View Details

Katie Paxton-Fear @InsiderPhD

2 days ago

Right now I would be: - Building a business that scales you and your methodology with AI, prove it on bug bounties but long term go after the annual pentest - Using AI to quickly level up in exceptional vulnerabilities, your use-after-free chains, so you’re not relying on mediums

2 0 0 350 0

View Details

Katie Paxton-Fear @InsiderPhD

2 days ago

This is probably the greatest signal that bug bounty is still viable (for the moment anyway) long term? I have no idea

ClaudeDevs @ClaudeDevs

3 days ago

Boris sat down with Spotify VP of Engineering Niklas Gustavsson. Spotify ships 4,500 production deploys a day, and 73% of PRs are now AI-assisted.

534 230 4K 5.4M 3K

2 1 16 4K 4

View Details

dawgyg - WoH @thedawgyg

2 days ago

3 of the Apple CVE's dropped today <3 #bugbounty #0day #hacker

33 10 312 16K 52

View Details

Katie Paxton-Fear @InsiderPhD

3 days ago

I learned about Toyota bB opendecks yesterday and less than 24hrs later I am getting quotes for getting one to the UK from Japan 😭 THEY ARE SO CUTE THEY ARE A TINY PICKUP TRUCK THAT COMES IN YELLOW

3 0 7 3K 1

View Details

Katie Paxton-Fear @InsiderPhD

3 days ago

Hacker News: it’s suspicious that the benchmarks for Claude 4.8 and 4.7 are combined almost like the authors were hiding something Katie, who just wanted 10 things in the table so it would be a round number:

0 0 5 3K 0

View Details

Katie Paxton-Fear @InsiderPhD

3 days ago

You know your writing has made an impact when your non-tech friends sends you this, my article about the benchmarking we did at @semgrep authored by myself and my engineering colleagues