f

I’ve spent the last 2 years at @Tanium, best job I ever had. But resource realignment happens, and I am seeking a new opportunity. I am a security innovator, to the extent that nearly every computer on the Internet is using at least one of my technologies or inventions. 1/n

CVE-2020-19909 is everything that is wrong with CVEs Another 9.8 CRITICAL curl problem. All made up. daniel.haxx.se/blog/2023/08/2…

@TailosiveTech Pretty sure someone already mentioned it but, Canada still ships with SIM card tray.

Apple removed the SIM tray too early. I might actually get my next iPhone overseas so I can keep it.

Comparing hobby PCB vendors: lcamtuf.substack.com/p/comparing-ho…

Our blog post with full technical details about the two vulnerabilities in the TPM 2.0 reference implementation discovered by @fdfalcon is now live at blog.quarkslab.com/vulnerabilitie… #TPM #0day #not0day

Quarkslab @fdfalcon discovered 2 vulns in the TPM2.0 Reference Implementation. They affect many hardware, software and firmware TPMs. The Trusted Computing Group and CERT/CC issued security bulletins. Stay tuned for our technical analysis on March 14th kb.cert.org/vuls/id/782720

@JeroenFrijters @Lieve_Lisette Care to share which one? I am about to visit Providence architecturaldigest.com/story/why-to-v…

Tomorrow I will be off to paradise. Don't worry. Not the fictional one, but a week of sun and fun with @Lieve_Lisette on a beautiful tropical island.

Happy Festivus! Photo by Matthew Keefe - Flickr: Celebrating Festivus 2, CC BY 2.0, commons.wikimedia.org/w/index.php?cu…

I solved the Blue Frost Security linux kernel challenge they published for Ekoparty 2022 and loved it! @bluefrostsec Here's my writeup: klecko.github.io/posts/bfs-ekop…

During last year's #BlackFriday promotion, half the internet bought a Burp Suite Certified Practitioner exam but mysteriously got cold feet about taking it. We feel really guilty about taking your $10, so this year we have a new deal: you prepare, we pay: portswigger.net/web-security/c…

@0xcharlie Hacking OSX, starting with Safari

For you kids out there, hacking OS X used to require heading out into the jungle. It’s easier now that you can do it from your basement.

1995: PHP is dead, learn ColdFusion 2002: PHP is dead, learn ASP​.net 2003: PHP is dead, learn Django 2004: PHP is dead, learn Ruby on Rails 2010: PHP is dead, learn Flask 2011: PHP is dead, learn AngularJS 2016: PHP is dead, learn Next.js 2022: okay this is awkward

"http://http://http://@http://http://?http://#http://" is a legitimate URL

@dragosr @robertgraham Not sure if it has been mentioned already, but shellshock comes to my mind. Even if your Apache was updated, the underlying problem was inside bash. Maybe Rob considers that you are exposing bash by enabling CGI, but there are tons of software features that work like that.

@robertgraham That's a hard hill to defend. Good luck.

Keeping Windows desktops, mobile phones, and browsers up-to-date is basic "hygiene". Because the threat is huge. For a server that exposes only web services, the external threat posed by lack of OS updates is insignificant.

@TubeTimeUS I have these two :) the numeric kb wasn’t working correctly last time I tried, I believe the M0110 was actually unused when I got it.

keyboard is cleaned and reassembled. I still need to source a new key switch and key cap.

I got a new Mac! let's try to restore it and get it working. 🧵

@berendjanwever After a couple of reloads it shows this on safari 😅

Want a page where you can check if your webcam works? Want a page that allows you to view your webcam at max resolution? I did, so I wrote webcam.skylined.nl Source code here: github.com/SkyLined/webca…

@travisgoodspeed Are those the cards that go inside tv cable box? Those are still In use afaik over here … or is it like a different kind of cards

If you pirated TV twenty years ago, could you kindly look through your smart card collection for any Nagra1 cards? They look like this, and I'd very much like to have more of them for a history project, even though they have long been useless for watching TV.

@natashenka Good friends always have bugs

Good bugs always have friends