@cydave.bsky.social //

Meow-ware on #GitHub . 😿 ghmlwr.0dave.ch

@ant0inet @securitytxt I use both (for fun purposes).

@_cydave @securitytxt you put your security contacts in .env? or your secrets in security.txt?

exposing your secrets on your website without providing security contacts @securitytxt

@ant0inet @Atlassian inb4 extension on the marketplace that backports that AND is totally not backdoored or vuln af.

yea so @Atlassian you replaced "epic" with "parent" in Jira Service Management. But could you please make that field only autocomplete on "parents" in JQL (like it did before with "epics")? (╯°□°)╯︵ ┻━┻

@mmartin_joo Worst idea thus far*

MySQL 9 just came out and it supports Javascript stored programs. Worst idea ever.

@hackerschoice meme exec, love it

THC RELEASE: 🎁Execute arbitrary backdoors 🚪on targets that do NOT allow execution 🙈 (noexec). Without ptrace() or mmap(). With only BASH _or_ PHP.👉Trick BASH to make (any)❗️SYSCALLS ❗️to the kernel. 🤪 #ISPScare iq.thc.org/bypassing-noex…

Ok... ehm, how do you actually pronounce JOSE things? JWT => "jot" (makes sense; to me) JWA => joa? JWE => joe? [mama] JWS => jos? JWK => jok?

@ozzi_____ I'm trying...

@ozzi_____ holy fuck some of them look cursed..., doesn't prevent me with using them as wallpapers tho, thanks :)

@ozzi_____ i can haz a copy of that picture? 😺

@JanPagon ... and get banned by your hosting provider due to the amassed abuse tickets \o/

How to scan internet under 5 minutes,.. #BSidesLjubljana

sEcUrItY aBoVe aLL eLsE !!!!!!11111

@ant0inet kannst mir die elektro nudel einfach in einen zug nach bern werfen, glaub ich find die dann schon 😘

@_cydave wann/wo treffen?

dopamin kick #dumpsterdiving

@ozzi_____ Love me some regex 😺

@LehmannLorenz @code security above all else.

Today, my PC was nearly compromised. With just one click, I installed a malicious @code extension. Luckily, I was saved as my PC doesn't run on Windows. Hackers are getting smarter and aren't just targeting beginners. Here's how they do it and how you can protect your coins!

@kaelavirusagain i can haz?

feel free.

@ozzi_____ When none of the #XLS libraries supports everything you need, you just use ALL OF THEM 🤞

@RachelTobac ... *sigh* At least they have a visiual menu to disable that right? Unlike certain platforms...

LinkedIn is now using everyone's content to train their AI tool -- they just auto opted everyone in. I recommend opting out now (AND that orgs put an end to auto opt-in, it's not cool) Opt out steps: Settings and Privacy > Data Privacy > Data for Generative AI Improvement (OFF)

Quick ghmlwr.0dave.ch update: I've included raw JSON data and an RSS feed (atom), check it out :) (let me know if either of these two files are borked).

@ant0inet "sorry, this finding is out of scope." something on the internet: *explodes*

@ant0inet "please demonstrate impact or we have to change the severity to informative..." *explodes*

ich warte noch darauf, dass #bugbounty als lösung gegen explodierende pager genannt wird...