"A security researcher uncovered a Twitter vulnerability in its link shortener. The vulnerability allowed an attacker to craft a malicious URL that, if a user clicked on it, would grant the attacker access to the user's account. The researcher reported the vulnerability to Twitter's bug bounty program, which closed the report as not worthy of a bug bounty. So the researcher published the vulnerability. Immediately Twitter takes its link shortener offline for hours while they fix it.But the press is only reporting on an hours-long X/Twitter link shortener outage, and has completely missed the security issues that led to it.Molly White's coverage of the vulnerability (sorry for the Xitter link but that's just the problem, literally no one else is covering this): https://twitter.com/molly0xFFF/status/1734965774517768471 "
Disclosure: https://x.com/shoucccc/status/1734802168723734764?s=20
(All quoting a friend on a private slack)
like are we all babies now who can't handle a few portals here and there. i know the autonomous policing cars can't cope with this but cities are for the pedestrian, and they don't find this confusing at all. it's actually very easy to leave, you just walk left or right for 10km
"The smallest and silliest MIDI synth yet" by mitxela
https://www.youtube.com/watch?v=bmFmsn6VZSM
@hikari i’ve sometimes thought about similar as “vibes aren’t net zero”- putting out positive energy doesn’t require inflicting negative energy on others, so why not default to joy?
after all, you’re blessed to make it to another day ✨
the EV push really is unbelievable. just throwing away money with astonishingly little oversight, yielding fawn-like to the outdated specter of car culture. we could have trains on electric rail powered by nuclear energy and instead our idea of a green future is "a four-seater sedan that weighs as much as a tank made of 90% smart phone that's certain to fall apart within five years in every home." the cost and emissions of increased road repairs alone will offset all the gains from the EV push
[BRUSSELS, BELGIUM]
EU commission guy who comes up with the logos: ok so this new EU agency is gonna deal with cyber sec right
me, cyber sec expert: yeah
EU guy: okay so i'm drawing a blank. gimme some material here. what is cyber sec is to you
me: well personally it's a crusade against memory unsafety in general and the C programming language in particular
EU guy: what's that
me: [gestures at my dart board made from a copy of K&R]
EU guy: oh perfect. the boss'll love this. cya
me: wait wh—
Trans woman, bisexual, someone's fiancée, forever a programmer, poly, and former total mess
Avatar by mavica