Rebaneback in 2022 i found a bug that would let me, with no user interaction, turn any chromium-based browser into a permanent js botnet member
in edge, you wouldn't even notice anything out-of-place, and would stay connected to the c2 even after closing the browser
@robbiev
- 29 Followers
- 162 Following
- 41 Posts
Andrew Kelley"I wish it need not have happened in my time," said Frodo.
"So do I," said Gandalf, "and so do all who live to see such times. But that is not for them to decide. All we have to decide is what to do with the time that is given us."
"So do I," said Gandalf, "and so do all who live to see such times. But that is not for them to decide. All we have to decide is what to do with the time that is given us."
We don't talk enough about the dangers of WhatsApp completely dominating in many places. I have kids and we have to use it or be left out. There's a parents group for school, there's a group for nursery, groups for after-school activities, groups everywhere.
I've realised that I'm a chiseler, if that's even a word. I work out a rough implementation that's terrible in most respects but works. Sculpting the rough shape of it. Once I've got something working I know enough to either start over or chisel until I'm happy.
I logged in to https://arbor-education.com/ to pay for my kid's school trip, only to be greeted by "Passwords last for 180 days, and yours has now expired.". So I had to change it immediately. I then had to enter my payment card info to pay for the trip. Probably the most dangerous thing I'll do this week.
Arbor - the UK's most popular cloud MIS - Arbor
The UK’s most popular MIS and school management software With Arbor, over 12,500 schools and trusts reclaim hours every week, see the data that matters clearly, and support their staff with the tools, time and insight to work at their best. School MIS Bring your whole school together Arbor’s School MIS is the heart of […]
Mitchell HashimotoGhostty 1.3 is now out! Scrollback search, native scrollbars, click-to-move cursor, rich clipboard copy, AppleScript, split drag/drop, Unicode 17 and international text improvements, massive performance improvements, and hundreds more changes. https://ghostty.org/docs/install/release-notes/1-3-0
Last year I quit my job after years of security engineering. Here's an idea I come back to a lot: how can I say yes? https://garbagecollected.org/2026/02/19/how-can-i-say-yes/
Steam Phone when
This reminds me of an incident at work some time ago where a JSON message grew over time and got so large the system started rejecting it. As a first dumb idea I thought we should check if it was pretty printing the JSON. And yep, it was. Literally changed a true to a false somewhere.