jd_pressman: KYC for zero-install code is absurd vs. legacy PHP bug hunting
jd_pressman · x · 2026-10-27
jdpressman elaborates on his complaint: it's not KYC per se, but that his work on something "I just wrote yesterday with zero installs" is being routed through Daybreak. He argues there's a principled difference between hunting vulnerabilities in legacy systems like PHP with millions of installed instances and testing brand-new code — questioning whether one-size-fits-all KYC thresholds make sense.
Related event: Researchers debate blanket KYC requirements for security work(2 posts)→
More from Safety
- CA eMudhra blocks curl/wget User-Agents from CRL endpoints, Mozilla bug filed — kingslyj · 2026-10-27
- 300 Agents, 60 People: Runlayer Found Engineer Details Real-World Agent Security Failures — AI Engineer · 2026-10-27
- Abliterated LLM finds $3,300 in live ElevenLabs keys; OpenAI/Anthropic keys already drained — deedydas · 2026-10-27
- Tailscale confirms serious Tailworm SSH flaws; fix due within 24 hours — AIFlow_ML · 2026-10-27
- OpenAI details how it locked down frontier training environments and red-teamed them with its own agents — AxSaucedo · 2026-10-27
- GMO hack: account compromises real, ransomware encryption still unconfirmed — jd_pressman · 2026-10-27