During yesterday's solar eclipse, Spanish Olympic skateboarder Danny Leon performed a jump, timing the trick with the moon passing in front of the sun. Leon shared the epic stunt on his social media accounts and called it ‘the move of his life.’
RE: https://hachyderm.io/@tailscale/117083224760630723
I wrote about finding an SQLite bug for the Tailscale blog!
I learnt so much from working on this series of incidents, and I’m proud of the outcome and the story we can finally tell. 🥰
A working exploit to achieve a SYSTEM shell with only CVE-2026-66804 has been released.
This is cool! https://github.com/xoreaxeaxeax/skitter-creek-bath-salts
The biggest problem I’ve had with fighting ransomware over the past 5 years is private cyber companies basically lobbying for nothing to change. A lot of companies have made a lot of money, so putting them in charge of stopping it seems optimistic.
@jima @Epic_Null @cR0w We could just make all the kids cringe by calling the next one IPv6-7
It's 2026 and on Windows Server 2025, attempting to create a TLS certificate will default to a 1024 bit key and you have to find this menu and expand it to change it.
Let’s call it „beg4shell“. At least now everyone can be a vulnerability researcher.
I self-host now: this account runs on my own server and my own domain, @mbr
The old instance is shutting down and the auto-migration only carried a fraction of you across. If you can read this, you're already in the right place.
Everyone else has to re-follow by hand. Please BOOST this to help me get back everyone :)
#Fediverse #SelfHosted #Mastodon #mbr #masterbootrecord
Rob Pike received the 2026 USENIX Lifetime Achievement Award! https://www.usenix.org/about/awards/flame
Did you read our latest publication?
Our newest advisory highlights a Linux kernel use-after-free vulnerability discovered by independent researchers during TyphoonPWN 2026: https://ssd-disclosure.com/linux-bridge-stp-timer-use-after-free/
SSD Secure Disclosure is a trusted partner for advanced vulnerability researchers, providing a direct path from high-impact research to coordinated disclosure and competitive compensation.
We are actively looking for Linux vulnerability research, including kernel exploitation, privilege escalation, memory corruption, and other high-impact findings.
You focus on the research. We handle the rest. Learn more at https://ssd-disclosure.com/product-index/