Remote

Amit Serper

@0xamit@infosec.exchange

Software and hardware hacker, (in)security researcher, musician,MTB/Gravel cyclist,politics nerd. Not necessarily in that order. ▪️Security Research Lead at Crowdstrike🦅▪️ BsidesTLV review board. Ex gov/Cybereason/Guardicore/Akamai/Sternum

Currently focused on Cloud computing and Linux (low and high level) security research
עברית/English/Poco Español

0 Followers

0 Following

24 Posts

Joined November 05, 2022

Twitter:

https://twitter.com/0xamit

Github:

https://github.com/aserper

Verified by Fedified:

https://fedified.com/@0xamit

Verified by Tweetodon:

https://twittodon.com/share.php?t=0xamit&m=0xamit@infosec.exchange

Blog:

https://blog.amit.wtf

Bluesky:

https://bsky.app/profile/amit.wtf

Posts

Amit Serper @0xamit@infosec.exchange · 5d ago

The area I was operated on is SO ITCHY it's driving me nuts.

Amit Serper @0xamit@infosec.exchange · Jul 25, 2026

Replying to @xabean@infosec.exchange

@xabean@infosec.exchange I'm over worked and alive

Amit Serper @0xamit@infosec.exchange · Jul 24, 2026

I remember the days I used to have time for social media.

Amit Serper @0xamit@infosec.exchange · Jul 24, 2026

Replying to @infoseclogger@infosec.exchange

@infoseclogger@infosec.exchange 🤝

Amit Serper @0xamit@infosec.exchange · Jul 24, 2026

*Cough*

Amit Serper @0xamit@infosec.exchange · Feb 21, 2026

Lmao. Delusional regime.

Amit Serper @0xamit@infosec.exchange · Feb 21, 2026

Finally moved my mini-pc servers to the "under the basement stairs data center". I still have two kubernetes nodes left in my office upstairs, but they're silent (mini pcs as well), so eventually they'll move downstairs as well. But right now it's so quiet here without the drone of the enterprise grade HDDs gnawing my brain

Amit Serper @0xamit@infosec.exchange · Jan 29, 2026

Imagine looking at the Grey zone as a reliable news source lmao

Amit Serper @0xamit@infosec.exchange · Jan 26, 2026

For the first time since 2014 there are no Israeli hostages, alive or dead, being held in Gaza. Those yellow ribbons can come off now 🎗️

Amit Serper @0xamit@infosec.exchange · Jan 26, 2026

Morphine was such a brilliant band. Man, I can't stop listening to them, especially in this weather.

Amit Serper @0xamit@infosec.exchange · Jan 26, 2026

The concept of ClawdBot is cool, but people buy entire Mac minis just for that and I find it completely insane.

Amit Serper @0xamit@infosec.exchange · Jan 25, 2026

@zcutlip@hachyderm.io yikes

hachyderm.io

Zachary Cutlip (@zcutlip@hachyderm.io) - Hachyderm.io

Amit Serper @0xamit@infosec.exchange · Jan 25, 2026

I friggin love my framework laptop

Amit Serper @0xamit@infosec.exchange · Jan 23, 2026

Replying to @dannotdaniel@hellions.cloud

@dannotdaniel@hellions.cloud unfortunately battlefield won't run on linux

Amit Serper @0xamit@infosec.exchange · Jan 23, 2026

On the rare occasion I boot up my Windows machine, I’m instantly reminded why it’s such a rare occasion

Amit Serper @0xamit@infosec.exchange · Jan 21, 2026

Now we wait

Amit Serper @0xamit@infosec.exchange · Jan 21, 2026

Trump saying that the iron dome is solely based on American technology is an insane lie

Amit Serper @0xamit@infosec.exchange · Jan 17, 2026

@zcutlip@hachyderm.io they actually fixed it pretty quickly but they're refusing to acknowledge a low severity vulnerability and pushing back on everything. This is taking to much of too many people's time.

hachyderm.io

Zachary Cutlip (@zcutlip@hachyderm.io) - Hachyderm.io

Amit Serper @0xamit@infosec.exchange · Jan 17, 2026

Some people are willing to die on the dumbest hill for a low impact vulnerability instead of just admitting it. The amount of time and energy this ridiculous back-and-forth with a certain open source project about a truly, stupid, input validation vulnerability (THAT THEY HAD ALREADY FIXED!) is really too much. This isn't the first time with those folks. It's incredibly frustrating. I am sure that they are frustrated with me as well. This honestly is not worth my time.

Amit Serper @0xamit@infosec.exchange · Jan 15, 2026

Re yesterday vulnerability drama: we've got a cve id today. We're working out on getting the advisory out and get it published

Amit Serper @0xamit@infosec.exchange · Jan 15, 2026

Yesterday my team member and I disclosed our first vulnerability for 2026. It's in a VERY well known kubernetes infrastructure, an open source project. In an unsurprising turn of events (they did the exact thing to us a year ago) they immediately rejected the issue being a security vulnerability and categorized it as a bug, they've already pushed a PR with a fix. I explained that this was a security vulnerability and not just a bug, since you can bypass their entire solution in a stealthy way by injecting malicious, unsanitized user controlled strings. In their book this isn't a vulnerability, which it obviously is. I've reached out to mitre this morning to get a CVE id

Amit Serper @0xamit@infosec.exchange · Jan 15, 2026

I'm reading testimonies from people inside #Iran. What that regime is doing to their own people is just beyond words. I really don't understand why this isn't getting even a quarter of the attention that the gaza war got. Protestors are being shot in the head, men with guns and full face covering go into neighborhoods and kidnap civilians and physically cutting the phone lines. The photos are horrifying. The stories are heartbreaking. I can't imagine how terrifying it is to be there right now. A lot of the messages from inside Iran are being sent by people who use Iraqi sims from near the iran-iraq border. There's hardly any other way to connect to the outside world right now. The "We're not free until we're all free" crowd are being awfully quiet right now.

Amit Serper @0xamit@infosec.exchange · Jan 14, 2026

First vulnerability disclosure for 2026 ✅

Amit Serper @0xamit@infosec.exchange · Aug 22, 2024

Replying to @TechConnectify@mas.to

@TechConnectify@mas.to tooting your own horn while tooting on mastodon. Well played.

Remote instance

infosec.exchange

Open on original server

Amit Serper

Posts

Zachary Cutlip (@zcutlip@hachyderm.io) - Hachyderm.io

Zachary Cutlip (@zcutlip@hachyderm.io) - Hachyderm.io

Remote instance

Media