Posts
2507Following
649Followers
1468
repeated
This is exactly what the internet is for.
9
32
3
repeated
Simple Sabotage Field Manual
simple_sabotage@mastodon.socialGive lengthy and incomprehensible explanations when questioned.
2
1
0
repeated
Filippo Valsorda (🏝️🔙 Aug 1)
filippo@abyssdomain.expertOperating a Certificate Transparency log is now within reach of many organizations.
I wrote up the requirements: essentially one small server process, a couple people, and the capacity to host 3-5 TB of static files. https://words.filippo.io/run-sunlight/
I'd love to chat with anyone who's considering running one!
5
6
0
repeated
Remember the perfect 10 CVE-2024-56346 in IBM NIM? They are just now publishing an advisory that IBM Virtualization Engine TS7700 is vulnerable to it. I know IBM is large, but that seems like a long time to wait to publish that an IBM product is impacted by another IBM vulnerability, especially that one.
0
2
0
buherator
buheratorhttps://devblogs.microsoft.com/oldnewthing/20250707-00/?p=111351
0
0
2
buherator
buheratorhttps://ssd-disclosure.com/ssd-advisory-linux-kernel-pipapo-set-double-free-lpe/
0
0
1
buherator
buheratorhttps://karmainsecurity.com/KIS-2025-03
0
0
2
buherator
buheratorhttps://blog.himanshuanand.com/posts/discovered-a-libpng-vulnerability-11-years-after-it-was-patched/
0
2
4
buherator
buheratorhttps://www.netspi.com/blog/technical-blog/network-pentesting/remote-code-execution-sailpoint-iqservice/
0
1
3
buherator
buheratorhttps://slcyber.io/assetnote-security-research-center/abusing-windows-net-quirks-and-unicode-normalization-to-exploit-dnn-dotnetnuke/
1
0
4
repeated
astralia
astralia@infosec.exchangeComputer engineer interested on #cybersecurity and #reverseengineering looking for job.
Maybe I do not have the skills, but one thing i can say is that I’m pretty good on getting my shit done, even if is something new to me.
#jobsearch
0
4
0
repeated
HN Security
hnsec@infosec.exchangeIn our last blog post, our colleague Gianluca shares the story of a lucky discovery: a bug initially spotted during a routine assessment turned out to be a high impact vulnerability in Microsoft Graph API — earning a $3,000 bounty.
0
3
0
repeated
John Carlos Baez
johncarlosbaez@mathstodon.xyzIf you've turned it off it will stay off...
... but it will be on.
1
4
0
repeated
Gabriele Svelto
gabrielesvelto@mas.toIf you have an Intel Raptor Lake system and you're in the northern hemisphere, chances are that your machine is crashing more often because of the summer heat. I know because I can literally see which EU countries have been affected by heat waves by looking at the locales of Firefox crash reports coming from Raptor Lake systems.
7
33
1
repeated
internetarchive
internetarchive@mastodon.archive.orgWhat does the web mean to you?
As we celebrate 1 trillion webpages archived in the Wayback Machine, we want to hear your story. Why does preserving the web matter to you?
📝 Share your story now: https://forms.gle/c3XqotHUToKe2pZw5
0
4
0
repeated
Soatok Dreamseeker
soatok@furry.engineerChecklists Are The Thief Of Joy
I have never seen security and privacy checklists used for any other purpose but deception. After pondering this observation, I'm left seriously doubting if comparison checklists have any valid use case except to manipulate the unsuspecting. But before we get into that, I'd like to share why we're talking about this today. Recently, another person beat me to the punch of implementing MLS (RFC 9420) in TypeScript.
http://soatok.blog/2025/07/07/checklists-are-the-thief-of-joy/
10
6
0
repeated
Post-auth code injection in IBM Integration Bus for z/OS.
https://www.ibm.com/support/pages/node/7239003
sev:HIGH 8.2 - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.5 is vulnerable to code injection by a privileged user with access to the IIB install directory.
0
2
0
repeated
Charlie Balogh
chainq@mastodon.socialSoftware dependencies are subject to Brandolini's law (a.k.a the Bullshit Asymmetry Principle), which states:
"The amount of energy needed to refute bullshit is an order of magnitude bigger than that needed to produce it."
However, I also find that in any software project, the amount of effort needed to get rid of an external dependency is an order of magnitude bigger than it took to add it.
Conclusion: most software is largely made of bullshit.
1
1
0
repeated
eShard
eshard@infosec.exchangePost-quantum crypto resists quantum computers, not physical attacks.
On July 10, we're live with PQShield to show how side-channel and fault injection techniques still break schemes like ML-KEM, and how to protect your implementations.
Register now:
🔵 11am CEST: https://pqshield.zoom.us/webinar/register/WN_GUBZIV41QDGiROlkbuUsPg#/registration
🔵 6pm CEST: https://pqshield.zoom.us/webinar/register/WN_6WZOefg3T06jQW6ind_bqw#/registration
#pqc #postquantumcryptography #sidechannel #faultinjection #hardware #hardwarehacking #hardwaresecurity
0
2
0
repeated
RPGPGM
rpgpgm@mastodon.socialNew IBM Redbook about modernization on the IBM Power and IBM i was published on May 20, 2025.
💙 #IBMi #rpgpgm #IBMChampion
https://www.rpgpgm.com/2025/07/new-modernization-techniques-redbook.html
0
1
0