#security
3 posts.
Writeup 5 min read
Approving a crypto licence on any Google Ads account
The Ads identity agent answered with no cookies and took the customer id out of the request body. Two curl calls, and the account shows an approved restricted certification it never qualified for.
#Security#Google#methodology
Writeup 4 min read
The five ways DeFi protocols get drained
Most post-mortems describe the same five failure families: access control, accounting drift, oracle failure, liquidation assumptions and integrations. Here is what each one looks like in code.
#Smart contracts#DeFi#Security
Article 6 min read
This is the endgame for Anthropic
Anthropic watermarks your Claude Code system prompt based on your timezone and proxy settings. I verified it in my own binary, v2.1.190.
#AI#security#Anthropic#surveillance