Author | Lightnews

Reposted by Anant Shrivastava

DEF CON @defcon.bsky.social · 14d

#DEFCON34 Call for #CTF Organizers is OPEN!

After four excellent years, Nautilus Institute is retiring from running the official #DEFCON CTF. The search is on for the next team. Is it your turn? Is your crew the future of live hacking competitions?

defcon.org/html/links/d...

DEF CON® Hacking Conference - Call for CTF Organizers

Nautilus Institute is passing the torch, will your group be the next CTF Overlords?.

defcon.org

5 4

Anant Shrivastava @anantshri.info · 28d

Final hours for Black Hat EU Early Bird! 🚨

Save £300 today and join my 0wning the Cloud training this December in London.

We’ll cover AWS, Azure, GCP, DigitalOcean & Aliyun with hands-on attack + defense labs.

🔗 Register before midnight: www.blackhat.com/eu-25/traini...

Black Hat

www.blackhat.com

Anant Shrivastava @anantshri.info · Sep 22

We just dropped GH Navigator 🎉
Paired with KeyChecker, it gives full GitHub coverage:

Data plane: what can be read

Control plane: what can be changed

Check out the release post 👉 cyfinoid.com/gh-navigator...

Introducing GH Navigator: Optimizing GitHub Security Tools

Discover how GH Navigator and KeyChecker enhance GitHub security by providing visibility and testing for both data and control planes.

cyfinoid.com

1

Reposted by Anant Shrivastava

Baldur Bjarnason @baldurbjarnason.com · Sep 21

“OpenAI admits AI hallucinations are mathematically inevitable, not just engineering flaws”

https://www.computerworld.com/article/4059383/openai-admits-ai-hallucinations-are-mathematically-inevitable-not-just-engineering-flaws.html

10 76 190

Anant Shrivastava @anantshri.info · Sep 16

Everyone talking about npm hacks. But is it really more attacks or just more visibility?

Maybe attackers are piling on npm
Maybe the ecosystem is just easier to monitor
Maybe sloppy practices make it an easy catch

What nags me more: silence in PyPI, RubyGems, Maven.
No attacks, or no one looking?

1

Anant Shrivastava @anantshri.info · Sep 16

am i the only one who goes like lets finish all updates on one version then do version upgrade.

Anant Shrivastava @anantshri.info · Sep 12

bsky.app/profile/anan... :P

Anant Shrivastava @anantshri.info · May 29

enuf said #promptengineering

P.S. Image made by chatgpt

Panel 1:
Dark, spooky room. A group of people huddled around a table with candles.
Caption:
"We summon the spirit of Prompt Engineering to grant us AI mastery!"

Panel 2:
A ghost appears wearing a hooded cloak, glowing softly with phrases like "unlock hidden capabilities," "next-gen creativity," etc. swirling around it.
Caption:
"I am the sacred art of promptcraft, the whisperer of the machine!"

Panel 3:
Someone reaches forward, pulls the hood back.
Caption:
"Wait a second..."

Panel 4:
It’s the Wren & Martin English Grammar book with glowing eyes.
Caption:
"SURPRISE. You just needed to learn how to write clearly."

Bottom Text (Classic Impact Font Style):
Prompt Engineering
is just English teachers finally getting their revenge.

1

Reposted by Anant Shrivastava

BSides London @bsideslondon.bsky.social · Sep 8

#BSidesLDN205 Call for Workshops is still open!
Want to pass on the knowledge you have?

Here's your chance: cfp.bsides.london/bsides-londo...
Any topic.
2-4hrs long
Not a commercial presentation
30 people minimum audience (mixed experienced levels)

#Security #BSIdes #London

7 7

Reposted by Anant Shrivastava

Nathan Hamiel @nhamiel.bsky.social · Sep 3

To all of the people pushing hard to coin the term “vibe security,” the joke is on you. Security has always been about vibes. 😆

1

Anant Shrivastava @anantshri.info · Aug 30

Determinism builds trust, non-determinism builds discovery. The art lies in knowing when the world needs certainty - and when it needs the unexpected gift of surprise.

Not Every Nail Needs a Non-Deterministic Hammer

Determinism builds trust, non-determinism builds discovery. The art lies in knowing when the world needs certainty - and when it needs the unexpected gift of surprise.

blog.anantshri.info

Anant Shrivastava @anantshri.info · Aug 29

Most say ‘think like a hacker,’ but infosec fights adversaries with goals, not curiosity. Real defense means blending hacker creativity with adversary realism.

Hacker Vs Adversary

Most say ‘think like a hacker,’ but infosec fights adversaries with goals, not curiosity. Real defense means blending hacker creativity with adversary realism.

blog.anantshri.info

Anant Shrivastava @anantshri.info · Aug 28

My thoughts on how LLM behaviour makes me rethink my own brain’s inner workings. A prediction engine as a mirror for a mind.

What LLMs Teach Me About My Own Brain

My thoughts on how LLM behaviour makes me rethink my own brain’s inner workings. A prediction engine as a mirror for a mind.

blog.anantshri.info

Anant Shrivastava @anantshri.info · Aug 25

Readwise reader is replacing google reader for me plus some more stuff.

Reader.readwise.com

1

Anant Shrivastava @anantshri.info · Aug 22

🔑 Introducing KeyChecker – a CLI to fingerprint SSH private keys & map them to Git hosting accounts.

📖 Blog: cyfinoid.com/automating-a...
🐍 PyPI: pypi.org/project/keyc...

#bugbountytips #ssh #git #github #infosec

Enhance Software Security with KeyChecker for Developer Keys

Discover how 'keychecker' automates SSH key validation to enhance supply chain security for developers and defenders alike.

cyfinoid.com

Anant Shrivastava @anantshri.info · Aug 22

github.com/njelich/Link... This is what i use.

GitHub - njelich/LinkOff: Cleans the LinkedIn feed based on keywords and filters.

Cleans the LinkedIn feed based on keywords and filters. - njelich/LinkOff

github.com

1

Anant Shrivastava @anantshri.info · Jul 30

Its funny how current ai tooling plays out and a few years ago self help courses use to use this same tactic. We are giving you tool if you dont use it properly it will not give you result. So user pays you for stuff and if it doesnt work its their problem not yours.

Anant Shrivastava @anantshri.info · Jul 29

Making Security Tools Accessible: Why I Chose the Browser

Tired of tools that need Docker to read a JSON file? I built browser-native, client-side tools like SBOMPlay and 3ptracer to prove you don’t need servers, tracking, or setup. Just open index.html and go. Minimalist, secure, and surprisingly…

Making Security Tools Accessible: Why I Chose the Browser

Tired of tools that need Docker to read a JSON file? I built browser-native, client-side tools like SBOMPlay and 3ptracer to prove you don’t need servers, tracking, or setup. Just open index.html and go. Minimalist, secure, and surprisingly powerful.

blog.anantshri.info

Anant Shrivastava @anantshri.info · Jul 27

Updates and plan for HackerSummerCamp USA 2025

HackerSummerCamp USA 2025

It’s that time again : HackerSummerCamp @ Vegas 2025.This one's special for me: it's my 10th BlackHat USA. What started back in 2015 as a support trainer gig has snowballed into… well, let’s just say the badge can no longer fit all the hats I wear. Here’s how the madness unfolds this year: 📆 2nd–5th Aug 2025: BlackHat Trainings…

blog.anantshri.info

Anant Shrivastava @anantshri.info · Jul 26

Vibe coding with AI feels magical until your project spirals into chaos. This guide explores how to stay grounded while building with AI tools; covering minimalism, context limits, testing, & code hygiene. A practical read for developers navigating the fine line between productivity & hallucination.

A Rational Survival Guide to Vibe Coding with AI

Vibe coding with AI feels magical until your project spirals into chaos. This guide explores how to stay grounded while building with AI tools, covering minimalism, context limits, testing, and code hygiene. A practical read for developers navigating the fine line between productivity and hallucination.

blog.anantshri.info

Anant Shrivastava @anantshri.info · Jul 21

If anyone here is already on @peerlist.bsky.social connect with me and if you are not signup here peerlist.io/anantshri/si... seems like a fun place especially if you want to be connected to builders.

Anant has invited you to join Peerlist!

peerlist.io

Anant Shrivastava @anantshri.info · Jul 21

This and a lot more is convered in my Defcon 2025 Training : training.defcon.org/collections/...

Cyfinoid Research - Attack and Defend Software Supply Chain - DCTLV2025

Name of Training: Attack and Defend Software Supply ChainTrainer(s): Anant ShrivastavaDates: August 11-12, 2025Time: 8:00 am to 5:00 pm PTVenue: Las Vegas Convention CenterCost: $1800 Course Description: In today's interconnected world, software development relies heavily on third-party components---up to 80% of your

training.defcon.org

Anant Shrivastava @anantshri.info · Jul 21

Introducing SBOM Play: A Privacy-First SBOM Explorer with Vulnerability & License Insights

cyfinoid.com/introducing-...

A fully client side browser based SBoM Explorer. more details on the link.

#SBoM

SBOM Play: Simplified SBOM Visualization Tool for Developers

Discover SBOM Play: a user-friendly tool to visualize SBOMs with vulnerability insights and licensing analysis—no complex setup required!

cyfinoid.com

1 2 2

Anant Shrivastava @anantshri.info · Jul 21

As i finalize my "Attack and Defend Software Supply Chain" Training. I am sprinkling newer content and one of the thing would be AI supply chain attacks.

Join me @ Defcon 2025 : training.defcon.org/collections/...

for a deep dive into the amazing world of software supply chain security.

salt sprinkler meme but instead of salt sprinkling AI

Anant Shrivastava @anantshri.info · Jul 14

I can understand your side of concern too. its not about who is right or wrong. we all look at the elephant from our sides. Now a days i tell the camera person to keep the camera not too tight, i try to stick within a big box of 4-5 fts to allow movement yet stable but i ensure i stand in center.

1

Anant Shrivastava @anantshri.info · Jul 14

however if I as a speaker is part of the whole game then its like performance art you cant ask an artist to stick to conforming norms, they need to be able to freely express themselves. and walking is one way of expression.

hope that makes sense.

1