Liam 🦆

Liam 🦆

@liamosaur.ragequ.it

Australian hacker. Foghlaimeoir Gaeilge. Tír Bundúchasach. Mar a bhí sí i gcónaí, beidh sí go deo.

291 followers237 following194 posts

Liam 🦆
@liamosaur.ragequ.it

In 2025 I read the Irish language books Dún an Airgid, Cath Fionntrá, a few chapters of Táin Bó Cúailnge (an ongoing project), and I'm halfway through Conaire Mór (only started a week ago!). My low stakes new year's resolution is to finish more than 3 Irish books in 2026

Liam 🦆
@liamosaur.ragequ.it

As a learner, I have 3 modes when reading - one where I just want to read for enjoyment and if I don't know a word, I just guess based on the context and keep reading (Dún an Airgid). Another mode where I look up words that seem critical/interesting (Cath Fionntrá / Conaire Mór), and a dedicated...

Liam 🦆
@liamosaur.ragequ.it

... learning mode where I look up in the dictionary every word that I'm not sure about, then write the word and meaning in a notebook. This is why I've been working away at An Táin Bó Cúailnge for over a year - while satisfying, it's very slow progress. I've been leaning more into the other modes

Liam 🦆
@liamosaur.ragequ.it

This is what happens when editors no longer have younger staff members to run headlines past before publishing. "'Bricked up' means the same thing as 'Bricked', right?" 😏

Liam 🦆
@liamosaur.ragequ.it

"no worries, I can chop all the salad" - the words of a man who thinks he's getting off Xmas meal prep lightly until he remembers that he's in a holiday rental and all the knives are blunt as a hammer

Liam 🦆
@liamosaur.ragequ.it

"If you have a soft backpack, please place it under the seat in front of you" With respect - fuck no. I took the time to check my larger bag. I'm 6'3". The only thing going under the seat in front is my feet. I'm not going to be punished because I didn't bring the biggest allowable cabin bag

Liam 🦆 reposted

Zora O'Neill
@zoraoneill.com

Don’t forget the Segway!

Nicholas Kole@nicholaskole.bsky.social

just a collection of "inevitable" multi-billion dollar tech that was going to be the future of everything until everyone in the audience who was supposed to just get on board said "lol no"

Liam 🦆 reposted

Courtney Milan
@courtneymilan.com

The funny thing is there are absolutely traits skills and characteristics that financially super successful people have and they are: money being born into money knowing other people with money

Jennifer Wright@jenashleywright.bsky.social

Michael C. Rockefeller got shipwrecked in 1963, washed up on an island, and was promptly eaten by cannibals.

Liam 🦆
@liamosaur.ragequ.it

Just in case I'm kicked in the head by a horse in the future and decide I want to revisit the US, this is a pre-emptive declaration that the current administration is insane, harmful and is getting worse. Chilling effects on free speech can get fucked🖕 www.theguardian.com/us-news/2025...

theguardian.comTourists to US would have to reveal five years of social media activity under new Trump planPlan would apply to countries not currently required to get visas to the US, including Britain and France

Liam 🦆 reposted

Katie Moussouris (she/her/she-hulk/she-ra)🌻
@k8em0.bsky.social

We’ve seen other orgs attempt 3rd party bug bounties, thinking it will help their ecosystem become safer. Inevitably, the safety of software depends more on the maturity of the org producing it than how many bugs are reported to it. Bug foie gras isn’t the safest path to maturity

Katie Moussouris (she/her/she-hulk/she-ra)🌻@k8em0.bsky.social

When I started Microsoft Vuln Research in 2008, we found out just how few orgs were ready for vuln disclosure. When I started Microsoft’s 1st bug bounty in 2013, I never imagined it would grow to paying for 3rd party bugs. I hope the 3rd parties were warned & OSS gets tested patches supplied to them

Liam 🦆 reposted

Kat Abughazaleh
@katmabu.bsky.social

Requiring foreign visitors to hand over 5 years of social media isn’t “security,” it’s unchecked government control. All-seeing surveillance systems don’t make us safer. They are in direct opposition to our civil liberties. www.nbcnews.com/politics/tru...

nbcnews.comForeign tourists could be required to disclose 5 years of social media histories under Trump administration planThe Customs and Border Protection proposal would apply even to countries that don't require visas to enter.
Liam 🦆
@liamosaur.ragequ.it

"GenAI images look like shit hurr" isn't a great argument to make. Not because AI slop doesn't look like shit (it does), but because as soon as the tech incrementally improves and looks less like shit, your main complaint has been refuted. GenAI images are shit because they're built on theft

Liam 🦆
@liamosaur.ragequ.it

ASD's social media team launch an attempt to get another category added to the #hacklore "this is not a realistic threat, please stop worrying about this" list 😔 I find this advice inexplicable and hard to align with any real-world threats

Liam 🦆 reposted

Mekka Okereke
@mekka.mekka-tech.com

While US venture capitalists were buying monkey jpegs, and DOGE coins, and figuring out how to get Black women fired, and tweeting about white birthrates, and trying to mandate which bathroom trans kids should use, China was making progress on climate change and taking the lead in a real industry.

The Economist@economist.com

China has made cheap, clean energy available in huge quantities. The world should take the win econ.st/4oqFszB Photo: Eyevine

Liam 🦆
@liamosaur.ragequ.it

Hot take about the updated OWASP Top10 - it's a great resource, but I have some concerns about the trend in categorisation. If the goal was "create categories that cover the top critical security risks to web applications", the new Top 10 would nail it. But the stated goal is slightly different...

View full thread
Liam 🦆
@liamosaur.ragequ.it

In fact, a developer could invest a bunch of time learning the Top10 in depth, but if asked "what are some common real-world scenarios that devs need to worry about?" would be unlikely to say "Insecure File Uploads", despite them being a common source of critical vulns. This is a problem.

Liam 🦆
@liamosaur.ragequ.it

Hot take about the updated OWASP Top10 - it's a great resource, but I have some concerns about the trend in categorisation. If the goal was "create categories that cover the top critical security risks to web applications", the new Top 10 would nail it. But the stated goal is slightly different...

View full thread
Liam 🦆
@liamosaur.ragequ.it

So which OWASP Top10 category do Insecure File Uploads fall into? Well the answer is "it's complicated and depends...". What it depends on is often the impact - if the file upload leads to XSS, it's an Injection vuln. If it can bypass file type check controls, it's a Security Misconfiguration...

Liam 🦆
@liamosaur.ragequ.it

...if you can upload executables that run on the webserver, it's a Broken Access Control. If I can overwrite a binary, it's a Software Integrity Failure etc. etc. While this categorisation is academically interesting, it's not helpful to a developer trying to understand what they need to worry about

Liam 🦆
@liamosaur.ragequ.it

Hot take about the updated OWASP Top10 - it's a great resource, but I have some concerns about the trend in categorisation. If the goal was "create categories that cover the top critical security risks to web applications", the new Top 10 would nail it. But the stated goal is slightly different...

Liam 🦆
@liamosaur.ragequ.it

...This is OWASP's own summary of the Top10. The goal is not just abstract/academic categorisation - it's to provide an *actionable resource* to devs about what they need to be concerned about. "Be concerned about this abstract category" is not as useful advice as something more concrete would be...

Liam 🦆
@liamosaur.ragequ.it

To give a concrete example - my team did some work earlier in the year analysing data from about 2.5k pentest reports. Looking at critical issues found during webapp pentesting, this mostly matched the OWASP Top10. But there was one standout difference - our #2 issue was File Upload Vulns...

Liam 🦆
@liamosaur.ragequ.it

It seems the "X, but with computers" model needs to be tested with everything, including white-collar crime. As much as some people would like to believe otherwise, algorithms (inc AI), are not an accountability sink. Collusion is still collusion. Crime is still crime

More Perfect Union@moreperfectunion.bsky.social

BREAKING: RealPage is suing New York, challenging a new state law that bans landlords from using algorithms to set rents. RealPage claims that its software, which landlords have used to collude on rents, is protected by the First Amendment.

Liam 🦆
@liamosaur.ragequ.it

I got sick of meetings filling up my day around lunchtime, leaving me without a time to eat, so I wrote a Power Automate flow that detects when I'm close to having no time for lunch and auto-reserves a lunch slot in my calendar

Liam 🦆
@liamosaur.ragequ.it

Before a certain year, Subarus have a 3-way light switch in the roof of the cargo space. It runs in line with the body of the car, so if you're say... unloading cargo (crazy), it's possible to accidentally flick the switch to light-always-on. If you don't notice the light, you flatten your battery.

Liam 🦆
@liamosaur.ragequ.it

Anyway, I just did this for the 3rd time over the space of about a decade (on two different cars!). It's so bloody annoying. Lead acid batteries don't like being fully discharged, so it was new battery time again. I got out some aviation snips and permanently disabled the always-on switch position

Liam 🦆
@liamosaur.ragequ.it

Reminder: GenAI images aren't trash slop because they look bad and generate hands with 6 fingers etc. It's trash because the models are built on content stolen from actual creatives. The quality may improve with time, but it will remain slop derived from a poisoned source

Liam 🦆 reposted

ICIJ
@icij.org

ICIJ's latest investigation The #CoinLaundry is a collaboration of 113 journalists from 38 media partners in 35 countries that exposes how cryptocurrency companies have empowered a shadow economy that lavishly profits from crime. Here are our findings:

Liam 🦆
@liamosaur.ragequ.it

Now accepting funding for my startup that is a world leader in a-djentic AI. Drawing on progressive advances in math core, this highly technical evolution introduces polyrhythms, syncopation and palm muting to the technology space

Liam 🦆
@liamosaur.ragequ.it

Apparently there's a rumour going around that I was actually born with my beard. Absolutely ridiculous. To disprove this slander, here is a photo of me at age 14, sans beard