Pinned
buherator
buherator
@buherator.bsky.social
"I'm interested in all kinds of astronomy." https://scrapco.de Mostly cross-posting from Fediverse: @buherator@infosec.place
546 followers269 following3.8K posts
A Kentucky man becomes the first humanist granted religious exemption from AI religionnews.com -> Original->
The Last Proof of Human Craft: Forging a Microsoft Edge Full Chain with Logic Bugs Only! blog.orange.tw -> Original->
#IDA 9.5 is out docs.hex-rays.com -> (Also on https://hexrays.su :D ) #ReverseEngineering Original->
[RSS] Security Bulletin: IBM i is Affected By Missing Authorization Vulnerability in Host-Based Printer Subsystem [CVE-2026-77153] www.ibm.com -> Original->
[RSS] Finding panics with Call Graph Analyzer tweedegolf.nl -> #Rust Original->
I just realized how much I like my microwaves design (Gorenje MO20E1W - still on the shelves): - has two dials, one for timing, one for power level - doesn't even have a display - doesn't beep (more importantly, doesn't keep beeping), only has a mechanical ringer Perfection! Original->
[RSS] From Arbitrary File Read to Shell: Yet Another RCE in Telerik tantosec.com -> Original->
[RSS] CVE-2026-35273: SSRF to RCE in Oracle PeopleSoft www.thezdi.com -> Original->
[RSS] Fuzzers vs. AI: Comparing Fuzzilli and BigSleep on JavaScript Engines projectzero.google -> Original->
[RSS] I've proven that you don't need quotes or parentheses in JavaScript blog.ikaes.de -> Original->
*listening to some schranz* *carefully twisting the knob on the microwave to adjust tempo* #DJLife Original->
"The meltdown, tanking the mainland STAR50 index of AI and semiconductor leaders by 40% in less than four months and vaporising some $480 billion in market value" www.reuters.com -> Original->
[RSS] Two parse5 bugs: text turning into HTML, and a two-character crash joshua.hu -> Original->
[RSS] The Limits of Fingerprint Blocklists: A Reproducible Java Certificate Bypass www.sonatype.com -> Original->
[RSS] StealMyBitcoin (php2shell CTF) solution writeup github.com -> Original->
[RSS] Chromecast with Google TV (4K) - Persistent Secure Boot Bypass oddsolutions.github.io -> Original->
[RSS] Puzzling out why a program doesn't work when run from a batch file, but works when double-clicked from Explorer devblogs.microsoft.com -> Original->
[RSS] Imperia CMS SiteActive TEMPLATE Unauthenticated SSTI Remote Code Execution (CVE-2026-110355) www.rcesecurity.com -> Original->
[RSS] This week's "node2shell" Brotli vulnerability (CVE-2026-111497) is exploitable in Python, other consumers of Brotli www.aikido.dev -> Original->
I've always enjoyed cooking but lately I actually do it some more and it's like Original->
I'd like to register a Unicode codepoint Unicum but unfortunately it seems they have these stupid policies and processes instead of just accepting money like normal people :( Original->
Submitting vuln reports to the #Linux kernel looks fun: lkml.iu.edu -> Original->
[RSS] Your AI agent fixed the bug, but what else did it change? blog.trailofbits.com -> Original->
[RSS] CVE-2026-107891: musl libc: multiple integer overflow in regcomp, possibly leading to incorrect allocation sizes and out-of-bounds heap writes www.openwall.com -> Original->
[RSS] Gallery of PHP maintenance pages from today r74n.com -> #art Original->
"it turns out that hacking is the discipline of questioning all of your assumptions all of the time." www.youtube.com -> (Haven't seen this one quoted much so here you go) Original->
#Ghidra 12.2 out with timeless debugging beta + my 1+yo fix for PPC LQ :D github.com -> Original->
otherwise" mode with e.g. #nginx or #caddy? Like you would still serve most of your forum/wiki/blog/... statically, without exposing any attack surface of your webapp engine. 2/2 Original->
Why does the @mozilla homepage has a large "*Try* Firefox" button? This implies that a) you will possibly not like it b) your installation will "expire" in some way like in case of demoware (I should've been a marketer, but went for higher education) Original->
[RSS] Breaking More Encrypted USB Drives with AI binary.ninja -> Original->