beny23
SolarWinds Web Help Desk Unauthenticated Remote Code Execution Vulnerability
Ni8mare – Unauthenticated Remote Code Execution in N8n
Vibe Hacking a Padding Oracle
Re:Webbol: A minimal static web server written in COBOL
on Friday October 03, 2025 @03:08PM (#45466598)
Love this!!! Any tips for learning cobol?
Make it so: GenAI, OpenAPI and ZAP
Re:The 2FA app that tells you when you get `314159`
on Friday March 14, 2025 @01:20PM (#43364812)
Giving a random app your 2FA secrets? Raises eyebrow…
AI Is the Enshittification of Recruitment
XZ backdoor is not the end of open source
Resisting Compliance Is Futile
Re:JavaScript in SVGs
on Wednesday February 07, 2024 @03:31PM (#39293894)
Sounds like an attack vector
Web LLM Attacks
AI-Dvent of Code 2023
AppSec Loves Agile
Re:Will Cyber Security Be Replaced by AI?
on Sunday September 17, 2023 @04:26PM (#37548979)
Betteridge’s Law in action ;-)
Rogue Russian pilot tried to shoot down RAF aircraft in 2022
Functional Programming in MongoDB
ApocalypsAI: Skynet Not Needed
Best Engineers Should Look After the Worst Systems
The Case Against Automatic Dependency Updates
Harvesting Logs for Fun and Profit
Why AppSec Fails
Precision Munitions for Denial of Service
Re:The legend of the ten-times developer
on Saturday November 12, 2022 @03:02AM (#33571100)
Really liked Jon talking about the importance of experience in development. I just wanted to add that it’s also important to consider experience on the system. Even the most talented developers will need time to find their feet if they’ve only worked with a system for a few months.
So don’t treat developers as replaceable resources! If you fire an experienced team because you found some cheaper bums on seats elsewhere, you’ll usually pay the price!
The legend of the ten-times developer
Re:Show HN: Merge to earn, the reward system for open source development
on Wednesday October 26, 2022 @03:46PM (#33348423)
Of course nobody would exploit this by submitting a PR that just deleted the failing test…
Adding money to the mix or automating rewards is asking for abuse and would decrease the quality of the software.
Also, which open source project is awash with money that could afford to pay out?
I think this (monetisation/crypto) is a solution looking for a problem and open source isn’t it…
Re:Jetstack Paranoia: A New Open-Source Tool for Container Image Security
on Tuesday October 18, 2022 @08:24AM (#33246151)
I feel a bit conned by the headline, it would be better to say "verifying CA certs in images"