1. X
  2. yan
Log inSign up
yan
20.2K posts
yan profile banner
user avatar

yan

@bcrypt
security engineering @brave / helped build Let's Encrypt, Privacy Badger, and HTTPS Everywhere @eff / physics alum @mit / rabbit enthusiast
azuki.vip
Joined November 2012
335
Following
73.6K
Followers
RepliesRepliesMediaMedia
  • Pinned
    user avatar
    yan
    @bcrypt
    Apr 15, 2022
    could not for the life of me figure out how to buy a bus ticket in Milan. it was literally easier to get a shell 😆
    Image
  • user avatar
    yan
    @bcrypt
    Aug 8
    if you’ve been on either side of a bug bounty you know the joy in it is gone now. it’s just AI reports coming in, AI patches going out, and decreasing human understanding of either. i wonder what is left of the security industry once the fun clever hacking parts are all
    user avatar
    Joel Margolis (teknogeek)
    @0xteknogeek
    Aug 7
    after seeing the current state of HackerOne, I decided it was time to sit down and address the elephant in the room blog.teknogeek.io/posts/what-hap…
  • user avatar
    yan
    @bcrypt
    Jul 20
    planked for 9+ minutes continuously today to win a contest and now am regretting my hubris in even looking this up…
    Image
  • user avatar
    yan
    @bcrypt
    Jun 9
    haha this reminds me that at one point during internal testing of Brave's AI agent (Leo), it refused to execute Step 3 on a todo list when Steps 1 and 2 were black text and Step 3 was white text (therefore invisible). but it got tricked into executing it when Steps 1 and 2 were
    user avatar
    Brave
    @brave
    Jun 8
    Indirect prompt injection is a fundamental security challenge for AI. It's an issue for both local and cloud-based LLMs. After disclosing our findings to both companies, we're now sharing our analysis of Mozilla Tabstack and Cotypist today.
    Image
  • user avatar
    yan
    @bcrypt
    Apr 27
    in light of the tragic news that a 2-year old died at a licensed SF daycare earlier this month, i made a site to show childcare license violations and complaints in the Bay Area:
    azuki.vip
    Bay Area Childcare Violations & Complaints
    Search violations, complaints, and inspection records for licensed childcare facilities in San Francisco, Marin, Alameda, San Mateo, and Santa Clara counties. Data from California CDSS CCLD.

Log in or sign up for X

See what’s happening and join the conversation

Continue with phone
or
Log in with username or email
Terms·Privacy·Cookies·Accessibility·Ads Info·© 2026 X Corp.
Advertisement
Advertisement