@adedommelin.bsky.social
Reposted
Added a small feature to cspbypass.com to warn the user if unsafe-inline is detected, in which case you typically don’t need to waste time hunting for 3rd-party whitelisted CSP bypasses and go straight to inline scripts / event handlers.
February 7, 2026 at 6:50 PM
Added a small feature to cspbypass.com to warn the user if unsafe-inline is detected, in which case you typically don’t need to waste time hunting for 3rd-party whitelisted CSP bypasses and go straight to inline scripts / event handlers.
Reposted
I don’t want to seem out of touch but I don’t actually understand the economy anymore.
November 18, 2025 at 3:23 AM
I don’t want to seem out of touch but I don’t actually understand the economy anymore.
Reposted
Researchers have been sneaking secret messages into their papers in an effort to trick AI tools into giving them a positive peer-review report
Read the full story: www.nature.com/articles/d41...
Read the full story: www.nature.com/articles/d41...
July 15, 2025 at 1:48 PM
Researchers have been sneaking secret messages into their papers in an effort to trick AI tools into giving them a positive peer-review report
Read the full story: www.nature.com/articles/d41...
Read the full story: www.nature.com/articles/d41...
Reposted
Your regular reminder being laid off is not a condemnation of you or (likely) your manager, but instead a signal of incompetence from upper management. Their job is to keep the business sustainable and they failed, and you get to pay the price.
www.theverge.com/news/693535/...
www.theverge.com/news/693535/...
Microsoft is laying off as many as 9,000 employees
Xbox will end or decrease work ‘in certain areas’
www.theverge.com
July 2, 2025 at 5:28 PM
Your regular reminder being laid off is not a condemnation of you or (likely) your manager, but instead a signal of incompetence from upper management. Their job is to keep the business sustainable and they failed, and you get to pay the price.
www.theverge.com/news/693535/...
www.theverge.com/news/693535/...
Reposted
Now THIS is what a customer-centric app is.
Most banks keep sending out warning emails about impersonation and scams.
Any app can implement this capability with a little coding + backend work (assuming their BE sensible enough): and yet Monzo is the first one I’ve heard do it.
Most banks keep sending out warning emails about impersonation and scams.
Any app can implement this capability with a little coding + backend work (assuming their BE sensible enough): and yet Monzo is the first one I’ve heard do it.
June 4, 2025 at 8:10 AM
Now THIS is what a customer-centric app is.
Most banks keep sending out warning emails about impersonation and scams.
Any app can implement this capability with a little coding + backend work (assuming their BE sensible enough): and yet Monzo is the first one I’ve heard do it.
Most banks keep sending out warning emails about impersonation and scams.
Any app can implement this capability with a little coding + backend work (assuming their BE sensible enough): and yet Monzo is the first one I’ve heard do it.
Reposted
unfollowing everyone on linkedin except this guy
April 23, 2025 at 6:35 AM
unfollowing everyone on linkedin except this guy
Reposted
If you have a once-public, now-private (or deleted) repo on GitHub, no matter what Microsoft says, it could very well be exposed via Copilot.
www.lasso.security/b...
www.lasso.security/b...
Lasso Research: Fortune 500 Companies found Exposed in Microsoft Copilot via Bing Cache. Read Now.
Fortune 500 companies’ sensitive data was exposed through Microsoft Copilot via Bing Cache, raising serious privacy and security concerns. Discover how this happened and what it means for enterprise security. Read the full research now.
www.lasso.security
March 3, 2025 at 6:51 AM
If you have a once-public, now-private (or deleted) repo on GitHub, no matter what Microsoft says, it could very well be exposed via Copilot.
www.lasso.security/b...
www.lasso.security/b...
Reposted
Not all heroes wear capes.
Fun fact - on Windows, if you press WIN + Period(.), it includes ¯\_(ツ)_/¯ to make it easy if you want to put it in a message, and I'm the one that added it
RESOLVED: ¯\_(ツ)_/¯ is so much more expressive and therefore preferable than 🤷
Discuss
Discuss
February 27, 2025 at 12:22 PM
Not all heroes wear capes.
Reposted
Science is supported by facts and evidence.
Conspiracy is supported by the lack of them.
Conspiracy is supported by the lack of them.
January 26, 2025 at 10:50 AM
Science is supported by facts and evidence.
Conspiracy is supported by the lack of them.
Conspiracy is supported by the lack of them.
Reposted
CVSS is dead to us daniel.haxx.se/blog/2025/01... #curl
CVSS is dead to us
CVSS is short for Common Vulnerability Scoring System and is according to Wikipedia a technical standard for assessing the severity of vulnerabilities in computing systems. Typically you use an online...
daniel.haxx.se
January 23, 2025 at 10:50 AM
CVSS is dead to us daniel.haxx.se/blog/2025/01... #curl
Reposted
⚠️Alerte CERT-FR⚠️
CERTFR-2025-ALE-002 : La vulnérabilité CVE-2024-55591 affecte les équipements Fortinet et permet à un attaquant non authentifié de provoquer une exécution de code arbitraire à distance.
Elle est activement exploitée.
www.cert.ssi.gouv.fr/alerte/CERTF...
CERTFR-2025-ALE-002 : La vulnérabilité CVE-2024-55591 affecte les équipements Fortinet et permet à un attaquant non authentifié de provoquer une exécution de code arbitraire à distance.
Elle est activement exploitée.
www.cert.ssi.gouv.fr/alerte/CERTF...
Vulnérabilité dans les produits Fortinet - CERT-FR
www.cert.ssi.gouv.fr
January 14, 2025 at 5:07 PM
⚠️Alerte CERT-FR⚠️
CERTFR-2025-ALE-002 : La vulnérabilité CVE-2024-55591 affecte les équipements Fortinet et permet à un attaquant non authentifié de provoquer une exécution de code arbitraire à distance.
Elle est activement exploitée.
www.cert.ssi.gouv.fr/alerte/CERTF...
CERTFR-2025-ALE-002 : La vulnérabilité CVE-2024-55591 affecte les équipements Fortinet et permet à un attaquant non authentifié de provoquer une exécution de code arbitraire à distance.
Elle est activement exploitée.
www.cert.ssi.gouv.fr/alerte/CERTF...
Reposted
Wow, a fairly serious auth bypass in Next.js, a super popular frontend framework:
"If a Next.js application is performing authorization in middleware based on pathname, it was possible for this authorization to be bypassed."
securityonline.info/...
"If a Next.js application is performing authorization in middleware based on pathname, it was possible for this authorization to be bypassed."
securityonline.info/...
CVE-2024-51479: Next.js Authorization Bypass Vulnerability Affects Millions of Developers
Find out about the Next.js vulnerability CVE-2024-51479 that could have exposed sensitive data. Take necessary measures to secure your Next.js application.
securityonline.info
December 20, 2024 at 4:52 AM
Wow, a fairly serious auth bypass in Next.js, a super popular frontend framework:
"If a Next.js application is performing authorization in middleware based on pathname, it was possible for this authorization to be bypassed."
securityonline.info/...
"If a Next.js application is performing authorization in middleware based on pathname, it was possible for this authorization to be bypassed."
securityonline.info/...
Reposted
In 2025 (less than 30 days away), PayPal will start selling your transaction history for targeted advertising.
I very highly recommend logging into your account and going to Settings > Data & Privacy > Personalized Shopping.
If you're reading this, turn that off RIGHT NOW before you forget.
I very highly recommend logging into your account and going to Settings > Data & Privacy > Personalized Shopping.
If you're reading this, turn that off RIGHT NOW before you forget.
December 5, 2024 at 9:12 PM
In 2025 (less than 30 days away), PayPal will start selling your transaction history for targeted advertising.
I very highly recommend logging into your account and going to Settings > Data & Privacy > Personalized Shopping.
If you're reading this, turn that off RIGHT NOW before you forget.
I very highly recommend logging into your account and going to Settings > Data & Privacy > Personalized Shopping.
If you're reading this, turn that off RIGHT NOW before you forget.
Reposted
HO HO HOLY FUCKING SHIT
December 1, 2024 at 4:03 PM
HO HO HOLY FUCKING SHIT
Reposted
Bluesky now has over 20M people!! 🎉
We've been adding over a million users per day for the last few days. To celebrate, here are 20 fun facts about Bluesky:
We've been adding over a million users per day for the last few days. To celebrate, here are 20 fun facts about Bluesky:
November 19, 2024 at 6:51 PM
Bluesky now has over 20M people!! 🎉
We've been adding over a million users per day for the last few days. To celebrate, here are 20 fun facts about Bluesky:
We've been adding over a million users per day for the last few days. To celebrate, here are 20 fun facts about Bluesky: