Henno van Arkel
@vanarkel.cc
Computer hooligan. I like to break webs and clouds. Occasional puppy/foodie pictures, and movie reviews.
Albuquerque, NM
Albuquerque, NM
I can't believe it's almost 2026 and there's still web apps that fail silently and truncate long passwords FFS. Bonus points for burying the password reset functionality 5 click deep.
November 18, 2025 at 6:32 AM
I can't believe it's almost 2026 and there's still web apps that fail silently and truncate long passwords FFS. Bonus points for burying the password reset functionality 5 click deep.
Reposted by Henno van Arkel
Reposted by Henno van Arkel
There's been endless talk about an AI bubble, but less about exactly how, why, and how much it's a bubble. So I turned to the framework put forward by scholars Brent Goldfarb and David A. Kirsch, authors of "Bubbles and Crashes," for assessing tech bubbles.
Spoiler: On a scale of 1 to 8, AI is an 8
Spoiler: On a scale of 1 to 8, AI is an 8
AI Is the Bubble to Burst Them All
I talked to the scholars who literally wrote the book on tech bubbles—and applied their test.
www.wired.com
October 27, 2025 at 8:58 PM
There's been endless talk about an AI bubble, but less about exactly how, why, and how much it's a bubble. So I turned to the framework put forward by scholars Brent Goldfarb and David A. Kirsch, authors of "Bubbles and Crashes," for assessing tech bubbles.
Spoiler: On a scale of 1 to 8, AI is an 8
Spoiler: On a scale of 1 to 8, AI is an 8
October 12, 2025 at 6:33 PM
48 hour FLASH! 45% off with code FLASHSALE
@pragdave felt like stirring things up - he just put nearly every title on sale!
@pragdave felt like stirring things up - he just put nearly every title on sale!
September 18, 2025 at 10:00 PM
Quick trip to the East Mountains #NewMexico
September 10, 2025 at 4:19 AM
Quick trip to the East Mountains #NewMexico
Reposted by Henno van Arkel
These guys are simply not smart.
September 4, 2025 at 4:25 PM
These guys are simply not smart.
Reposted by Henno van Arkel
PSA: go apply the urgent security update to your Apple devices. Don’t wait. Do it right now
Update Now: iOS 18.6.2 and macOS Sequoia 15.6.1 Fix Actively Exploited Vulnerability
Apple today released new iOS 18.6.2, iPadOS 18.6.2, and macOS Sequoia 15.6.1 updates, and the software addresses a security vulnerability that is...
www.macrumors.com
August 20, 2025 at 6:28 PM
PSA: go apply the urgent security update to your Apple devices. Don’t wait. Do it right now
Reposted by Henno van Arkel
We’re not sure who needs to hear this, but ‘blueberry’ has two b’s.
August 8, 2025 at 8:38 PM
We’re not sure who needs to hear this, but ‘blueberry’ has two b’s.
OZZY OSBOURNE - "No More Tears" (Official Video)
YouTube video by Ozzy Osbourne
www.youtube.com
July 22, 2025 at 6:22 PM
Not sure if it's the latest Firefox update or YouTube finally being better behaved, but holy crap the ridiculous CPU usage spikes are finally gone for now (I know this is intentional on YT's end)
July 14, 2025 at 1:13 AM
Not sure if it's the latest Firefox update or YouTube finally being better behaved, but holy crap the ridiculous CPU usage spikes are finally gone for now (I know this is intentional on YT's end)
June 27, 2025 at 8:21 PM
Sourdough buttermilk waffles. Banana brown butter bourbon flambe. Roasted pecans and pine nuts. Butter. Maple Syrup.
I'm still recovering. #food
I'm still recovering. #food
June 5, 2025 at 11:03 PM
Sourdough buttermilk waffles. Banana brown butter bourbon flambe. Roasted pecans and pine nuts. Butter. Maple Syrup.
I'm still recovering. #food
I'm still recovering. #food
Reposted by Henno van Arkel
For those who missed it, check out my talk, “Widgets Gone Wild: Exploiting XSS through Flawed postMessage Origin Checks.”
📺 Watch here: www.youtube.com/watch?v=qgB0...
🖥️ Follow along with the slides: 0-a.nl/nahamcon/
📺 Watch here: www.youtube.com/watch?v=qgB0...
🖥️ Follow along with the slides: 0-a.nl/nahamcon/
Widgets Gone Wild: Exploiting XSS Through Flawed postMessage Origin Checks
YouTube video by renniepak
www.youtube.com
May 24, 2025 at 7:33 PM
For those who missed it, check out my talk, “Widgets Gone Wild: Exploiting XSS through Flawed postMessage Origin Checks.”
📺 Watch here: www.youtube.com/watch?v=qgB0...
🖥️ Follow along with the slides: 0-a.nl/nahamcon/
📺 Watch here: www.youtube.com/watch?v=qgB0...
🖥️ Follow along with the slides: 0-a.nl/nahamcon/
Really great view for a little break form reality. Oozes style, kickass soundtrack, throw in a little Tarantino and vintage Kung Fu. Bonus points for punched Nazis. #filmsky #movies
www.imdb.com/title/tt2194...
www.imdb.com/title/tt2194...
Freaky Tales (2024) ⭐ 6.7 | Action, Adventure, Comedy
1h 47m | R
www.imdb.com
April 27, 2025 at 4:26 AM
Really great view for a little break form reality. Oozes style, kickass soundtrack, throw in a little Tarantino and vintage Kung Fu. Bonus points for punched Nazis. #filmsky #movies
www.imdb.com/title/tt2194...
www.imdb.com/title/tt2194...
Great read:
"That Sam Altman thinks his chatbot’s short story is brilliant tells us much more about Altman’s literary sophistication than it does the nearness of AGI."
Hubris and fishing for VC. The article also doesn't discard the usefulness of LLM either.
www.aaronrosspowell.com/p/why-tech-b...
"That Sam Altman thinks his chatbot’s short story is brilliant tells us much more about Altman’s literary sophistication than it does the nearness of AGI."
Hubris and fishing for VC. The article also doesn't discard the usefulness of LLM either.
www.aaronrosspowell.com/p/why-tech-b...
Why Tech Bros Overestimate AI's Creative Abilities
Silicon Valley's overconfidence in the imminent arrival of Artificial General Intelligence stems from a combination of limited understanding of the humanities, an insular culture, and a business model...
www.aaronrosspowell.com
March 23, 2025 at 1:55 AM
Great read:
"That Sam Altman thinks his chatbot’s short story is brilliant tells us much more about Altman’s literary sophistication than it does the nearness of AGI."
Hubris and fishing for VC. The article also doesn't discard the usefulness of LLM either.
www.aaronrosspowell.com/p/why-tech-b...
"That Sam Altman thinks his chatbot’s short story is brilliant tells us much more about Altman’s literary sophistication than it does the nearness of AGI."
Hubris and fishing for VC. The article also doesn't discard the usefulness of LLM either.
www.aaronrosspowell.com/p/why-tech-b...
Putting in some more time into my #BugBounty automation. The combo of #Go utilities with #Ruby shell scripting is working out really well.
March 22, 2025 at 9:51 PM
Putting in some more time into my #BugBounty automation. The combo of #Go utilities with #Ruby shell scripting is working out really well.
Just finished Adolescence. Dark subject, but an absolute acting tour de force by Stephen Graham. Best mini-series I've seen in a long time, 5/5 stars. #Netflix
www.imdb.com/title/tt3180...
www.imdb.com/title/tt3180...
Adolescence (TV Mini Series 2025) ⭐ 8.4 | Crime, Drama, Mystery
1h | TV-MA
www.imdb.com
March 22, 2025 at 9:44 PM
Just finished Adolescence. Dark subject, but an absolute acting tour de force by Stephen Graham. Best mini-series I've seen in a long time, 5/5 stars. #Netflix
www.imdb.com/title/tt3180...
www.imdb.com/title/tt3180...
The first two episodes of Dope Thief were amazing. Fantastic acting and writing, looking forward to seeing more www.imdb.com/title/tt2163... #AppleTV
Dope Thief (TV Series 2025– ) ⭐ 7.6 | Crime, Drama
Dope Thief: With Brian Tyree Henry, Wagner Moura, Marin Ireland, Amir Arison. Follows long-time friends and delinquents who pose as DEA agents to rob a house in the countryside, but end up unintention...
www.imdb.com
March 20, 2025 at 7:26 PM
The first two episodes of Dope Thief were amazing. Fantastic acting and writing, looking forward to seeing more www.imdb.com/title/tt2163... #AppleTV
Looking for an end table on Craigslist, this things is wild! Wish is wasn't $475 though.
#Mac #Apple #CraigslistGoneWild
#Mac #Apple #CraigslistGoneWild
March 19, 2025 at 10:13 PM
Looking for an end table on Craigslist, this things is wild! Wish is wasn't $475 though.
#Mac #Apple #CraigslistGoneWild
#Mac #Apple #CraigslistGoneWild
Reposted by Henno van Arkel
🎙️2nd @arcanuminfosec Hack_Tips Release for this week!
🚧 The ultimate 403 Bypass wordlists and tester notes:
🔗 github.com/Arcanum-Sec/...
🚧 The ultimate 403 Bypass wordlists and tester notes:
🔗 github.com/Arcanum-Sec/...
March 13, 2025 at 6:18 PM
🎙️2nd @arcanuminfosec Hack_Tips Release for this week!
🚧 The ultimate 403 Bypass wordlists and tester notes:
🔗 github.com/Arcanum-Sec/...
🚧 The ultimate 403 Bypass wordlists and tester notes:
🔗 github.com/Arcanum-Sec/...
February 14, 2025 at 1:01 AM
Reposted by Henno van Arkel
The results are in! We're proud to announce the Top 10 Web Hacking Techniques of 2024! portswigger.net/research/top...
Top 10 web hacking techniques of 2024
Welcome to the Top 10 Web Hacking Techniques of 2024, the 18th edition of our annual community-powered effort to identify the most innovative must-read web security research published in the last year
portswigger.net
February 4, 2025 at 3:02 PM
The results are in! We're proud to announce the Top 10 Web Hacking Techniques of 2024! portswigger.net/research/top...