@DavidKPiano I'd like to learn what the "right way" looks like in practice. Could you recommend a few open source projects that you think follow this approach well?
English
combab0
1.2K posts
This is the right way to go for most apps
Stop baking app/biz logic into the UI layer; it's only convenient short-term
And stop calling separation of logic "over-engineering" - it's just regular engineering
Mario Zechner@badlogicgames
People of pi. I'm going to break the extension API hard. Specifically, business logic (event handlers, custom tools/compaction/etc.) needs to be split off from the ui layer. it will likely not be a massive amount of work to migrate an existing extension, but it will hurt a little.
English
combab0 ری ٹویٹ کیا
combab0 ری ٹویٹ کیا
We @binarly_io just open-sourced our VulHunt framework at @REverseConf!
GitHub: github.com/vulhunt-re/vul…
Documentation: vulhunt.re/docs
Slack: join.slack.com/t/vulhunt/shar…
vulhunt.re
English
Just checked Pixel Perfect just reached 141 stars :)
Thank you all so much for the support
If you enjoy my work and designs, it would mean a lot if you could drop a star on the repo:
github.com/vansh-nagar/Pi…
English
combab0 ری ٹویٹ کیا
How a single feature was responsible for 5 Windows Administrator Protection bypasses, in a new Project Zero blog post by @tiraniddo
Natalie Silvanovich@natashenka
Part 2 of @tiraniddo’s Windows Administrator Protection journey is here! projectzero.google/2026/02/window…
English
combab0 ری ٹویٹ کیا
It's been just over a year since CVE-2024-54529 was patched. To celebrate, I'm open-sourcing my full PoC exploit for this CoreAudio type confusion vulnerability 🔊
The code is right here! Enjoy: github.com/googleprojectz…
English
combab0 ری ٹویٹ کیا
This is my first Linux kernel exploit for Google kCTF, and the patch commit is now public: git.kernel.org/pub/scm/linux/…
Actually, this bug was found by AI while analyzing 1-day variants, I'd like to share my approach for these AI things to find bug, and exploitation write-up later.
English
combab0 ری ٹویٹ کیا
Today, Project Zero released a 0-click exploit chain for the Pixel 9. While it targets the Pixel, the 0-click bug and exploit techniques we used apply to most other Android devices.
projectzero.google/2026/01/pixel-…
English
@Wiz_Daphne_en korean client stuck on intro! please check!! I saw people have same issue in korea
English
[Upcoming Content: January]
Here's a sneak peek at some of the content planned for #WizardryDaphne in January. Be sure to check it out!
◆Adventurers
- New Legendary Adventurer
- Class Change Options for Raffaello
- New Another Style Adventurer
◆Quests
- New Legendary Adventurer Quest
- New Quest
◆System
- Auto-Move System Improvements in Explored Areas
- Redispatch System Improvements
◆Others
-New Remains Added
#Wizardry
English
@Kamlesh_Paul26 @schanuelmiller @tannerlinsley build(local) - zip(local) - upload(local) - unzip(remote) - run(remote)
it can help you
English
@schanuelmiller @tannerlinsley in VPS with 2Gb RAM when we run bun run build it crash 🥲
English
@tannerlinsley hi can we have bun as bundler option as well nitro is giving me so much pain 🥲
English
combab0 ری ٹویٹ کیا
Annual post unlocked 🔓
Reverse-engineered the Hyperliquid validator binary to see what 'decentralized' actually looks like under the hood.
Spoiler: it's worse than a centralized exchange.
blog.can.ac/2025/12/20/rev…
English
Durable Streams are so cool. And it's all based on HTTP. Wild.
Sam Willis@samwillis
Multimodal GenAI streaming (text + audio) is tricky. Durable Streams makes it resilient! Lose the connection, reconnect, and keep listening from the exact moment you left off - while the model keeps generating. 🚀 🔊 Sound on
English
Another demo — this time processing in real-time the wikipedia events firehose! Durable Streams + TanStack DB + Solid.js handle it with ease
English
New demo of Durable State! A set of building blocks for building real-time syncing systems inside your apps.
github.com/durable-stream…
English
combab0 ری ٹویٹ کیا
An analysis of a recent 0-click exploit targeting Samsung devices:
googleprojectzero.blogspot.com/2025/12/a-look…
English
@cursor_ai opt-in search on type on file explorer is a "BUG".
opt-in search on type on file explorer is a "BUG".
opt-in search on type on file explorer is a "BUG".
opt-in search on type on file explorer is a "BUG".
opt-in search on type on file explorer is a "BUG".
English
@pyrons_ @EffectTS_ yes, we are already building a native Effect driver
English
We've updated our benchmarks 🚀
Drizzle v1.0.0-beta2 vs Prisma 7.1
Node 24.6:
- Drizzle handled 2.13m requests, peaked at 9.4k reqs/s at ~100ms p95 latency
- Prisma handled 668k requests, peaked at 2.3k reqs/s at ~150-200ms p95 latency before throttling
Bun 1.3.4:
- Drizzle handled 2.33m requests, peaked at 11.6k reqs/s at 25-30ms p95 latency
- Prisma handled 678k requests, peaked at 2.3k reqs/s
at ~150-200ms p95 latency before throttling
English
combab0 ری ٹویٹ کیا
There is critical vulnerability in React Server Components disclosed as CVE-2025-55182 that impacts React 19 and frameworks that use it.
A fix has been published in React versions 19.0.1, 19.1.2, and 19.2.1. We recommend upgrading immediately.
react.dev/blog/2025/12/0…
English
New website, new domain, new discount!
Did a complete overhaul for Interactive SVG Animations' landing page, complete with a brand new (and much shorter!) domain.
To celebrate (also as it's BFCM :) ), the entire course will be 20% off until next Friday!
svg.guide
English