Posts
3804Following
723Followers
1598
buherator
buherator
recommendation is to use Mozilla's distribution+update mechanism to keep the browser up-to-date.
0
0
0
repeated
Frédéric Jacobs
fj@mastodon.social
Keep these monstrosities off our roads 🙅♂️
"US carmakers have accused Brussels of keeping their largest pick-up trucks, including the Ford F-150, the Chevy Silverado and the Ram 1500, off European roads”
https://www.ft.com/content/3eb796fd-bcdb-4a9f-89b7-f7d5e692a3cd
31
19
0
buherator
buherator- How easily you can adapt to a new target (vs. AFL)
- How much power is available for the task (GPU acceleration)
- Number of bug classes you can (trivially) aim for (vs. fuzzing for logic bugs)
- etc.
0
0
1
repeated
mirren
mirren@ioc.exchange📱 Summer intern wanted!
@exhel and I are looking for someone to help us reverse engineer Android apps this summer @ TU Graz.
→ 20 or 40hrs/week contract
→ Helpful background: Android, reversing, or messaging apps
Send a short motivation statement + CV to lena.heimberger@tugraz.at AND edona.fasllija@tugraz.at
Boosts appreciated! 🙏 #AndroidSecurity #ReverseEngineering #Internship
0
2
0
repeated
jonny (good kind)
jonny@neuromatch.socialyou know that problem where it's actually in Google's best interests to sabotage their traditional search results to force everyone to use the AI results because then you never leave the site and direct prompt advertising becomes extremely valuable? yeah, it's like that for code, where it's actually in anthropic's best interests for all the code to be entirely unmaintainable and unsecurable except for with LLMs
5
10
0
repeated
Dmitry Chestnykh ☮️
dchest@mastodon.socialIn the 70s they could open Facebook by pressing the Meta key and there were Like and Dislike buttons right on the keyboard.
2
4
0
repeated
radare 
radareorg@infosec.exchange
Here’s why it’s important to always use r2 from git. In r2land, we follow the law of full disclosure and fix any reported vulnerability within a 24h deadline, as stated in SECURITY.md #radare2 https://blog.calif.io/p/mad-bugs-discovering-a-0-day-in-zero
0
3
0
repeated
jonny (good kind)
jonny@neuromatch.socialIt's so cool that anthropic is setting up a double-sided protection racket where it will profit from the massive token burn of attackers and defenders with a tool specifically designed to generate exploits and their only observable mitigation is a clientside system prompt that sternly warns the LLM to be good and not do malware
https://red.anthropic.com/2026/mythos-preview/
3
10
0
buherator
buheratorhttps://heyitsas.im/posts/cups/
More LLM bugs: CVE-2026-34980 and CVE-2026-34990
0
2
2
repeated
Tom Schuster
evilpie@hachyderm.ioTo my security peeps: Was the introduction of widespread fuzzing similar to AI-based bug hunting now, or is this really a different beast?
1
4
0
repeated
daniel:// stenberg://
bagder@mastodon.socialNope, no one from Anthropic Glasswing has been in touch.
4
4
0
buherator
buheratorhttp://blog.quarkslab.com/milking-the-last-drop-of-intego-time-for-windows-to-get-its-lpe.html
0
0
0
repeated
/r/netsec
_r_netsec@infosec.exchangeCVE-2026-34197: ActiveMQ RCE via Jolokia API https://horizon3.ai/intelligence/blogs/cve-2026-34197-activemq-rce-jolokia/
0
2
0
repeated
danzin
danzin@mastodon.socialSystematically reviewing Python C extensions (575+ bugs found so far) and offering to analyze yours!
I’ve recently analyzed 44 C extensions for correctness and free-threading readiness. I'd love to run the analysis on your extension too.
If you want the deep dive into the methodology, the false positive rates, and what I've learned, I wrote a full post here: https://discuss.python.org/t/systematically-finding-bugs-in-python-c-extensions-575-confirmed-so-far/106875
But if you just want your C extension checked, reply below or DM me!
#Python #CPython
2
4
0
buherator
buheratorShow content
I guess some would prefer hiding in their little bunkers with their chosen friends (and that's fine), but if we want to have an open social network it's probably the wrong strategy to design things around that concept.
1
0
3