238 Followers
169 Following
4.8K Posts

Little goblin with catears.

Unfinished projects, complaining about computers, reinventing the wheel (badly), has not fully read any docs since 2015.

Proud bot parent to two failsons:
https://infosec.exchange/@enojifier_bot (WIP)
https://infosec.exchange/@dreizehnzwoelf_bot

All my opinions are that of my employer but they don't know it yet & I am not telling you were I work. Apropos: If you need some idiot to kick computers for purposes of making them secure hmu, this job fucking sucks (vulnerability management, automation/engineering for your soc/isrt, ...).

PFP by a lizard that I am pretty sure transitioned at some point but I kinda lost contact with around the same time so I might only know their deadname & at this point it's too awkward to seek them out & ask. So instead I am going to credit them by their last discord handle I am aware of: fuck, md

LanguagesGerman, English
Pronomen (πŸ‡©πŸ‡ͺ)egal
Pronouns (πŸ‡¬πŸ‡§/πŸ‡ΊπŸ‡Έ)name reference > they/it > whatever
A breakthrough in C/C++ dependency management: https://lcamtuf.coredump.cx/blog/deps/
A breakthrough in C/C++ dependency management

Are you a C or C++ programmer?

Announcing my new bash script, chilly.sh, which has found seven TRILLION vulns across literally EVERY single piece of software known to existence. I'd show you all but its just too dangerous to release. Now everyone write articles basking in my greatness /j
Release the #chillyScript !!! 
I must not  is the mind-killer.  is the  that brings . I will face my . I will permit  to pass over me and through me. And when  has gone past I will turn the inner eye to see 's path. Where the  has gone there will be nothing. Only I will remain.
This does NOT capture cases where jq can't iterate over an empty affected container btw

RE: https://infosec.exchange/@nyanbinary/116470299326205639

Anyway, here is some naively compiled stats for CVEs in the year 2026 so far (top 10 products):

1564 {"vendor":"linux","product":"linux"}
409 {"vendor":"n/a","product":"n/a"}
336 {"vendor":"openclaw","product":"openclaw"}
272 {"vendor":"microsoft","product":"windows server 2025 (server core installation)"}
272 {"vendor":"microsoft","product":"windows server 2025"}
269 {"vendor":"microsoft","product":"windows 11 version 24h2"}
268 {"vendor":"microsoft","product":"windows 11 version 25h2"}
264 {"vendor":"microsoft","product":"windows server 2022, 23h2 edition (server core installation)"}
257 {"vendor":"microsoft","product":"windows 11 version 23h2"}
257 {"vendor":"microsoft","product":"windows 11 version 22h3"}

(naive code: find . -type f | xargs -I'{}' jq -cr '.containers.cna.affected[] | {vendor, product}' '{}' | tr '[:upper:]' '[:lower:]' | sort | uniq -c | sort -hr | head -n 10 )

I should make a website "CPE is going great" in which I just complain about missing product data by the CNAs in CVEs.

Hi. Do you design food packaging? I have three requests for you!

One, please make sure your date format for production/best before date is in a standard format - please dont dd/mm/yyyy!

Two, please make sure the best before date is actually printed somewhere where its actually readable!!

Three, please be specific on instructions. "After opening store refridgerated & consume as soon as possible" doesnt help! If I dont know how quickly this stuff spoils I learn nothing of value. If I already know I also learn nothing of value.

finally using a bullet journal with paper sturdy enough to use watercolor in.

In math 'i^2 == -1'. But computers can only approximate that. Good values for 'i' are then:

int32_t 479772853 squared is -7
int32_t 1667710795 squared is -7
int16_t 16203 squared is -7
int16_t 16565 squared is -7
int8_t 53 squared is -7
int8_t 75 squared is -7

😌