Mastodawn

Now I have seen it all - https://bumsrake.de/

BUMSRAKETE™ — The Most Beautiful, Most Tremendous FreeBSD Vulnerability In The History Of Computing. BELIEVE ME.

BUMSRAKETE is a HUGE, TREMENDOUS, MANY-PEOPLE-ARE-SAYING FreeBSD kTLS-RX page-cache write primitive. The BEST primitive. Some say the best ever.

Cure53🔓4d ago

RE: https://infosec.exchange/@catsalad/116702374049795715

Ma! Yo! There's a stray cat outside

Cure53🔓5d ago

The great thing about LLMs is that they make it possible for anyone to create a crypto messenger. All you need is passion and a few tokens.

Mega-corporations like Signal or PGP can no longer gatekeep and monopolise using their powers - it's finally power to the people!

Cure53🔓May 28

RE: https://hachyderm.io/@evilpie/116652387705118871

Here is how it all started, like, sort of 😅

https://www.youtube.com/watch?v=KIRvxYqk_Wc

Cure53🔓May 28

Show thread

Tom Schuster May 28

The main section is at https://html.spec.whatwg.org/multipage/dynamic-markup-insertion.html#html-sanitization

HTML Standard

Cure53🔓May 28

Tom Schuster May 28

The Sanitizer API is now part of the HTML standard!

https://github.com/whatwg/html/pull/12395

Thanks to Noam for upstreaming and everyone else involved in this multi year saga.

Upstream sanitizer api by noamr · Pull Request #12395 · whatwg/html

Convert the incubated spec in https://wicg.github.io/sanitizer-api/ to the HTML format and make it part of the HTML standard. At least two implementers are interested (and none opposed): Gecko/C...

GitHub

Cure53🔓May 27

RE: https://infosec.exchange/@timb_machine/116647429206728723

This. It's mostly where our last three to four weeks have been spent with for DOMPurify...

Cure53🔓May 27

DOMPurify 3.4.7 is out with again several in-depth improvements.

If you are using the IN_PLACE config option in production, you might want to go for this one soonish. This is where folks seem to use their Claude tokens for at the moment 😅

https://github.com/cure53/DOMPurify/releases/tag/3.4.7

Release DOMPurify 3.4.7 · cure53/DOMPurify

Hardened the handling of Shadow Roots when using IN_PLACE, thanks @GameZoneHacker Removed a problem leading to permanent hook pollution, thanks @offset Refactored the test suite and expanded test c...

GitHub

Cure53🔓May 25

Steve Herman May 25

Pope Leo XIV issues encyclical denouncing the “culture of power” driving the rapid rise of artificial intelligence. https://www.vaticannews.va/en/pope/news/2026-05/pope-leo-xiv-encyclical-magnifica-humanitas-ai.html

Pope Leo’s ‘Magnifica humanitas’: AI must serve humanity not concentrate power - Vatican News

Marking the 135th anniversary of Rerum novarum, Pope Leo XIV releases his first encyclical, entitled ‘Magnifica humanitas: On Safeguarding the Human ...

Cure53🔓May 24

Mike Elgan May 24

Now you can keep track of how many billions the AI companies are losing on AI. (Red is spending, green is revenue.) https://isaiprofitable.com/

#MachineSociety

Website	https://cure53.de/
Github	https://github.com/cure53/
Keybase	https://keybase.io/cure53/
Pronouns	they/them