I did a talk on "Race Conditions", at BSides Cape Town! www.youtube.com/watch?v=9edv...

My BSides Cape Town 2025 wrap-up is finally out, you can read about it all here www.linkedin.com/pulse/bsides.... Please share with your friends and help spread the word! #bsidescapetown2025 #bsidescapetown #hackers #rubberducks

If you’re a fan of Hacker Jeopardy, check out my song DFIU on the @defcon.bsky.social soundtrack. You can pay what you want to own (that’s right, you can actually possess the files yourself!) soundtrack and all proceeds go to the EFF. defconcommunications.bandcamp.com/track/dfiu

Today one of my favourite hackers and biggest inspirations, @leonjza.bsky.social, is speaking at DEF CON 33! Track 4 @ 16:30 PDT defcon.org/html/defcon-... If you're there, please go and support him. If you're in a close enough timezone, please stream him live (see dctv.defcon.org)

This is huge (imo) for retro computing C= <3 www.youtube.com/watch?v=ke-A...

Even if you're not into the AI hype, it's worth reading about the dangers of "MCP" servers everyone's going on about: www.cyberark.com/resources/th...

Half way through the year... not a bad time to backup a bunch of stuff if you don't already have a backup process/plan.

Ubikron You probably know Roelof Temmingh as the man who created Maltego 17 years ago, and who has been working on the Vortimo tool for the last few years. A few days ago he released Ubikron, a tool for tracking, tagging, and saving web investigations www.ubikron.com

First Pewdiepie makes a Linux video, now a "maker" video - didn't see that coming youtu.be/pgeTa1PV_40

#speakerlife my @devconf.co.za talk is in a few days, but I'm drawing custom icons in Excalidraw. Obviously these are best enjoyed, in person at my talk. #devconf2025 #rubberduck #duckhunt #retro #gaming

Pocket is one of my favourite apps, I use daily. Mozilla bought them years back. Now Mozilla is shutting them down. Sigh.

I recreated Joey's Gibson virus from the movie Hackers and it runs on a vintage Powerbook Duo. When you launch the "virus" it makes a new post to the Bluesky bot @hacktheplanet.simone.computer Before you ask no this is not actually a virus 😜 #hacktheplanet #retrocomputing #vintageapple

This white genocide debacle highlights another reason to be extremely cautious of AI that I don't see people talking about much--if you're getting your information from AI, your knowledge will be selectively curated by the people who control the AI

I watched a company do something dumb today. And it went badly for them. There is balance to the force sometimes :)

When a rock n roll photographer shoots a hacker collective. @cultdeadcow.bsky.social

DEF CON legal update: Truth is a complete defense against defamation. The Hadnagy lawsuit against us is over. Summary judgement. Dismissed, with prejudice. You can read the judgment here storage.courtlistener.com/recap/gov.us... . Stay tuned for a more detailed report. #defcon #legalupdate

Looks like "Sneakers" got a 4k release! www.blu-ray.com/movies/Sneak...

System Of A Down, Chop Suey. Hokuto Force #C64 youtu.be/6oRUCkAbPn0?...

We (@lambdafu.bsky.social & me) found a critical security vulnerability in the #Erlang/OTP SSH daemon that allow attackers to execute arbitrary code via network access on devices running Erlang/OTP SSH servers. This vulnerability is #CVE-2025-32433, patches out now. Estimated CVSSv3 10.

You definitely know this guy’s music, even if he looks a bit different nowadays. Do you recognize him?

Gen Z and Millennials: In ten years when we’re still without a cure and you’re caring for your parents, remember what he did.

Oh, I am READY. Please be good please be good please be good #tron #tronares www.youtube.com/watch?v=9KVG...

Oracle has a serious, customer impacting security incident playing out in Oracle Classic, a cloud SaaS service they manage. They're attempting to deny it by saying there's no problem in "Oracle Cloud", which is wordplay. doublepulsar.com/oracle-attem...

Somehow.

Guess who showed up to defend Tesla? The Proud Boys, armed militias, and at one event in Idaho, and a guy dressed as Hitler. More on the "Tesla Takedown" protests here:

Years of work, pain, suffering and tears and we are SO CLOSE to a 5.0 release of the ASVS Standard. However, a standard that isn't usable isn't a standard at all, it's a mess, so we need your help. If you have some spare cycles, can you review github.com/OWASP/ASVS/t...

Whipped together a SOCKS5-over-any-transport feature today for the c2 & implant used in @sensepost.com purple teaming / emulation exercises. Here I have a cURL request, over an ICMP channel, funnelling HTTP requests in and out via our implant :D Fun! 😄🔥

New video! Big Bambda Boom - Unleashing Burp's Full Potential. I gave this talk at two cons last year, and now it's RETIRED which means everyone gets to watch it on my YouTube channel. Watch now: youtu.be/B2L2janGWmk

Wondering how and why your vulnerability management tools are failing you? My talk "Your Next Incident Won't Have a CVE" is now live at www.runzero.com/resources/yo... PS. runZero shipped coverage for Nutanix this week

If you accept that non-citizens have no right to due process, you are accepting that citizens have no right to due process. All the government has to do is claim that you are not a citizen; without due process you have no chance to prove the contrary.

Jacob Sandum posted a detailed and well-written PoC for the IngressNightmare (CVE-2025-1974 ) vulnerability found in the Kubernetes ingress-nginx Admission Controller by Wiz (Woogle!). If you are looking for a quick way to reproduce the issue or validate […] [Original post on infosec.exchange]

9.8 Critical Vulnerabilities in Ingress Nginx https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities (https://news.ycombinator.com/item?id=43469629)

A local real estate agency, that I'm not a customer of, SMSed me to inform me there had been a breach of the personal data on their systems... if they have my number to SMS me that, I guess my data's included blog.pamgolding.co.za/cyber-incide...

Zelensky: public support from world leaders Trump: public support from his cabinet, party members and, uh, Russian leaders

If you've been watching the bloodbaths of Mozilla over the last few years, it's clear what the end-game is: be vc-friendly, be investment-friendly, get that bag, split it among the tiny set of executives left, and peace out. Anything else they claim is going on is on its face silly.

Say what now? "When you upload or input information through Firefox, you hereby grant us a nonexclusive, royalty-free, worldwide license to use that information" -- FireFox (connect.mozilla.org/t5/discussio...)

Breaking: Zelenskyy Offers to Step Down for Ukraine’s Future—While Trump Sides With Russia (Again)

Well I missed the other day. Microsoft's CEO Satya Nadella says it's time to put the brakes on AI hype gizmodo.com/microsofts-s...

Awesome bug and write-up by Brutecat. They found a way to leak any YouTube user's email using their public channel ID. They chained two unrelated Google services: - YouTube (to get their ID) - Google Recorder (mapped ID to email) Here's a link to the writeup: brutecat.com/articles/lea...

trillion dollar industry that will revolutionize everything

"Where Warlocks Stay Up Late: Episode 2: Ralph Logan aka sangfroid" www.youtube.com/watch?v=O0Cm...

Normalize pronouncing DOGE as DOUCHE.

The new Amish of the late 21st century: isolated, rural communities of software engineers writing their own code and crafting emails by hand, getting around in non-self-driving carriages

It used to be the cloud is someone else’s computer. Now it’s the UK government’s computer. Globally. news.sky.com/story/apple-...

Guess Crowdstrike just did a Friday deploy in EU #HTTP500

Geocities (1997)