every time I take a selfie I admire influencers a bit more - this shit ain't easy! Original->

Thanks @pancake for the swag! Original->

"We're gonna have the most British Wall of Death - don't worry, it's not a Brexit thing" - These guys are hilariously good xD Raised By Owls Full Set at Bloodstock 2024 www.youtube.com -> Original->

Please help making #TreeSitter Playground better by doing this little experiment: tree-sitter.github.io -> Write some JS, like `var x=1;`. Enable Query and provide the `(identifier) @foo` pattern in the new Query textbox. Do you see the code 1/2

[RSS] exploits.club Weekly(ish) Newsletter 92 - S23 N-Day PoCs, Printer Overflows, DNG OOB Writes, And More blog.exploits.club -> Original->

[RSS] NSO Group argues WhatsApp injunction threatens existence, future U.S. government work cyberscoop.com -> Original->

User-friendly GUI: please provide command line parameters in this text box! Me, knowing that one of characters will need escaping: Original->

That's how I like my #Friday's: I came back from lunch and my code started working! Time to push to prod... Original->

[RSS] How And Why We Hacked Cypherock Hardware Wallet: The Full Story www.darknavy.org -> "How did the U.S. government obtain LuBian%27s wallet private key?" Original->

what if we just forgot about DNS and start to address everything in IPv6-l33tspeak? Original->

[RSS] AI Coding Vibe Check tamir.dev -> /by @tmr232 Original->

[RSS] Deleting the [Boot Configuration Data] through COM as low privileged user [CVE-2025-59253] warpnet.nl -> Original->

[RSS] Deleting the [Boot Configuration Data] through COM as low privileged user [CVE-2025-59253] warpnet.nl -> Original->

... what makes this esp. frustrating is that the code is _right there_ in the current virtualenv, but oh no, let's make those servers in us-east-1 work, we gotta pump those CO2 numbers up! #python #uv Original->

The lesson for today is that you must always give your code weird ass names because tools tend to go online and fetch something completely unrelated if they can find the name :P Original->

Original->

[RSS] Remotely crashing the Spooler service incendium.rocks -> Original->

[RSS] LITE XL RCE (CVE-2025-12121) bend0us.github.io -> Original->

Another humble #UX request: I know dates look ugly, but "last month" is a pretty wide timeframe and when my brain sees "3 weeks ago" it will recall yesterdays dinner and the 1994 World Cup finals with equal probability. Please display exact dates on frontends! Original->

TIL cURL only supports the lowercase http_proxy environment variable: curl.se -> Original->

[RSS] dz6: vim-like hex editor crates.io -> Original->

[RSS] "Astral-tokio-tar" / "uv" Arbitrary Write Path Traversal Vulnerability github.com -> This is CVE-2025-59825 Original->

[RSS] HEX ADVENT 2025: Crack the Advent, Conquer the Threat starlabs.sg -> Original->

Since yesterdays #AdTech link was received quite positively, I'm sharing again this collection from The Correspondent: Debunking the science of advertising thecorrespondent.com -> The Correspondent was an incredible 1/2

Cloudflare down is another teachable moment to think about your eggs and your baskets. Original->

reasoning_effort = 'none' Original->

Friendly advice for crisis communication: "Our systems have been under attack for T days" doesn't mean that your system withstood the attack for that long. Hackers don't work with sledgehammers. It means that you saw the attack but were unable to act on it for T days. 1/2

This is a fun one: LLM inference creates a timing side channel that allows identifying sensitive topics by passively intercepting encrypted traffic: www.microsoft.com -> /via @jonny Original->

TIL Minecraft requires a freaking MS account. I thought it wasn't that bad so we proceeded to create one, but it turns out that if you want to create a child account (based on birth date, to avoid adult ads and shit) you as an adult *also* need a MS account that would be of 1/2

Dear designers: scrollbars are useful and exist for a reason. Don't hide them, please. Original->

OK, it seems I found it (although not very useful, acceptable value formats are not documented for example), at the end of the article about...publishing. Because somehow in the CLI's world there is just *no way* I won't update my code to GitHub :P 1/2

Is it my weak search-fu again, or the new qlpack.yml format for #CodeQL is not officially documented? @GitHubSecurityLab The best resource I could find is this one by @trailofbits: appsec.guide -> Original->

Kociemba has launched the No Longer Evil project, an open-source initiative aimed at breathing new life into decommissioned first- and second-generation Nest thermostats. www.techspot.com/news/110186-...

TIL about #git subtree split git-memo.readthedocs.io -> Original->

I wanted to understand what information is available in .pdb files, so I made a tool for it 🔎🐛 Welcome DiaSymbolView - a debug symbol hierarchy and properties viewer based on MSDIA: github.com/diversenok/D...

...last offset, I gave you my heart... Original->

Having spent the last couple of nights reversing data types I'm all in for UNION busting! #ReverseEngineering #capitalism Original->

TIL when you recursively search for source files, .ccls-cache can ruin your day because it contains very similar file names to the originals :P Original->

This article highlights how much control endpoint security vendors have over customer machines, and transitively over companies and maybe even nations: www.huntress.com -> You only install this stuff, because you trust the vendor 1/2

[RSS] How I got Domain Admin via Citrix FAS through ESC3 scribe.rip -> Original->

From vendor to ESC1 scribe.rip -> Awesome blog post explaining why ~all enterprise domains could be pwned via ADCS: vendors prescribe insecure configuration to integrate their stuff! (AFAICT I couldn't post this from my RSS 1/2

So glad to see KI/KI getting the recognition she deserves, super fun DJ! www.youtube.com -> Original->

I'm seriously considering creating a Yelp account just because of this shit... Original->

/me after a chill Sunday with #IDAPython I'm now basically doing this out of spite. Original->

I'm old enough to remember years ago comrades predicting the inevitable fall of software and services which work just fine today. Original->

I moved my fork of pdbparse to uv and tested it with Construct v2.10 - earlier versions weren't compatible with recent Python stdlibs. Everything seems to work fine (tested with REshare vs big MS .pdb's) so you can use this fork with Python >= 3.12: 1/2

Mark Zuckerberg seems to have a band with his clones: www.youtube.com -> Original->

I had this #electronics project idea several months ago... The original concept involved like two transistors and a basic "framework" of $5 consumer mechanics. It turns out the "framework" is so primitive (in a good sense!) that now I have an AVR involved and like $50 spent. 1/2

[RSS] Kubevirt security audit blog.quarkslab.com -> Original->