Posts
4353Following
737Followers
1647
repeated
repeated
ESA (unofficial)
esa@squeet.meDeep space software upgrade for Hera’s asteroid visit
0
2
0
repeated
offensivecon
offensive_con@bird.makeup
CFP for #OffensiveCon26 Tokyo edition is STILL open.
We're looking for real, original work: cutting-edge security research, novel exploit techniques and deep technical investigations that actually move the field forward.
And yes, AI it's also in the game.
0
2
0
repeated
Martin Boller 
itisiboller@infosec.exchange
Shared by my Daughter
"I need privacy, not because my actions are questionable, but because your judgement and intentions are"
In response to "if you have nothing to hide you have nothing to fear"
52
40
2
repeated
Joxean Koret (@matalaz)
joxean@mastodon.socialIDA 9.4 Beta 1 has been published (with some features of my own on it):
0
2
0
repeated
mrmacete
bezjaje@infosec.exchangewe're hiring one iOS human on my team https://nowsecure.applytojob.com/apply/BXcVGTgFyb/Research-Engineer?source=Our%20Career%20Page%20Widget
0
3
0
repeated
Brad Spengler
spendergrsec@bird.makeupWon 80k via kCTF, unpriv userns-reachable vuln: https://lore.kernel.org/linux-cve-announce/2026050859-CVE-2026-43456-ae60@gregkh/ We fixed in March, upstream 6.6 still unfixed 4 months later.
2
3
0
repeated
quarkslab
quarkslab@infosec.exchangeCortex is a long-term, multi-tenant scalable open source storage for Prometheus and OpenTelemetry.
Earlier this year we conducted a security audit sponsored by @ostifofficial
Check our report here:
https://blog.quarkslab.com/cortex-security-audit.html
0
2
0
buherator
buheratorhttps://blog.paradoxis.nl/playing-around-with-adidns-rpc-internals-0c59c15d0a15
0
1
0
buherator
buheratorhttps://blog.exodusintel.com/2026/07/06/microsoft-windows-installer-folder-delete-privilege-escalation/
0
2
1
repeated
David Chisnall (*Now with 50% more sarcasm!*)
david_chisnall@infosec.exchangeSo, if I understand correctly, a bunch of elected politicians said ‘okay, we identified that the things Facebook and friends are doing is actively harmful to their users. So what we’re going to do to mitigate this is ensure that, legally speaking, the only people who can experience these negative effects are people of voting age.’
3
11
0
buherator
buheratorhttps://stackoverflow.com/questions/31460733/why-arent-stduniform-int-distributionuint8-t-and-stduniform-int-distri
I advocate equal rights for `char`s!
1
0
3
buherator
buheratorShow content
https://soundcloud.com/bassiani/bassiani-invites-luigi-tozzi-live-podcast-280
...then I realize I'm sitting in the office waiting for some VMs to boot :P
0
0
2
repeated
repeated
abadidea
0xabad1dea@infosec.exchangewow, discord acknowledged on the Bad Place that it was true that an overfitted CSAM detection AI started flagging grids (spreadsheets, game inventory screenshots, etc) as illegal and instabanning people.
8200 people got banned this way over several weeks before someone managed to get their attention on reddit. But the good news is they have in fact manually rolled back all the bans.
On the one hand, this is the one problem where you absolutely want as little hands-on human moderation as possible. On the other, this is a very clear-cut overfitting failure mode on a small dataset (of the images that governments provide to major websites for automated detection) with disastrous consequences for random innocent people. And they presumably had to go back and manually check all bans in this category for the last few weeks, thus maximizing the moderators' exposure too. 🤦♀️
3
2
0
buherator
buheratorhttps://swarm.ptsecurity.com/hack-the-elephant-one-bite-at-a-time-nul-byte-sql-injection-in-pdo_firebird-and-null-pointer-dereference-in-pdo-pgsql/
0
0
1
repeated
Marcin Wichary
mwichary@mastodon.onlineJust one more show option bro. One more show option will fix it.
3
1
0