cR0wReminder: Security companies exist to protect the wealthy. Community protects community.
tehfishman
- 12 Followers
- 77 Following
- 965 Posts
"professional" peanut gallery for security stuff
Paul Cantrell@cR0w @catsalad @tehfishman @darfplatypus
Full link, still a classic: https://reductress.com/post/quiz-are-you-even-good-enough-to-have-imposter-syndrome/
Full link, still a classic: https://reductress.com/post/quiz-are-you-even-good-enough-to-have-imposter-syndrome/
QUIZ: Are You Even Good Enough to Have Imposter Syndrome?
Imposter Syndrome can be debilitating, especially when you know you’re trying your very best and still feel like you’re coming up short. But consider this: Are you even good enough to actually have Imposter Syndrome? Like, maybe you’re just not worthy and kind of a phony? Take this quiz to find out!
Will Dormann@christopherkunz
I also tested another PoC and it was even more fake. i.e. it didn't even create a CLDAP structure that made sense.
I get that PoC||GTFO is a thing, but we've clearly entered a phase where it needs to be Verified PoC||GTFO. 🤦♂️
Turn any Creative Katana V2X into a rubber ducky over bluetooth. Creative says it's not a security risk, so nbd
nixCraft 🐧TIL, Vim Classic is HERE. A fork of Vim 8.x, built for long-term stability, maintained entirely by humans. No chaos. No breaking changes. Just the editor you trust, kept alive https://vim-classic.org
K. Reid Wightman 
🌻 
Chilly 
pquirrel 
IFIN - The Independent Federated Intelligence NetworkPatches are available for Nginx and Apache against the latest HTTP/2 DoS. Other servers, who knows??
CVE-2026-49975: HTTP/2 Bomb: Remote DoS against most major web servers
Last Updated: 2026-06-03T20:33:07Z (UTC) What’s Happening Another model-discovered vulnerability can shut down most HTTP servers, including Nginx and Apache. Proofs of concept available on GitHub. Actions Apply available patches. Nginx: patched in 1.29.8 Apache: Fixed in mod_http2 v2.0.41 IIS, Cloudflare Pingora, Envoy, (Caddy??): Unknown.
Taggart Fundamentally. Unsecurable.
You can't rid yourself of this vulnerability in LLMs.
https://www.safebreach.com/blog/gemini-voice-assistant-prompt-injection-exploit/
