kidbomb
Mark Rober demonstrate relay attacks by "stealing a car" [video]
1010220
$75M Crypto Wallet Bulk Hack [video]
All of the above stave off the loneliness.
Also, get a hobby where you mind focus on one thing only. Play a instrument. Draw. Solve puzzles. Jimmy Carr had a similar issue and he started to play with legos.
The best thing is to have the OPTION to either work at home or at the office.
Sometimes, you need the focus. But sometimes, you need to see people.
A year in the life of a Staff Engineer
Prompt Injection Defenses
CVE 2025-23266 (NVIDIAScape) – An update
CVE 2025-23266 (NVIDIAScape) – A Detailed writeup
Contain Me If You Can
I Spy: Escalating to Entra ID's Global Admin with a First-Party App
They also have a lot of different resources, such as Graph API, Entra ID.
Manage identities are simpler, since they are Azure constructions, so they work more or less like a IAM role. But then you try to use them with Entra ID APIs and things fall apart.
Operational Responsibility
GPU-Accelerated TensorFlow
Attacking UEFI
Direct Memory Access Attacks – A Walk Down Memory Lane
Extending our Envoy mesh with staging overrides
Sign In with Apple is allowing you to "create an account"(author's words) on @company.com, which should not be supported in the firat place. Instead, it should rely in a central directory controlled by company.com for authentication
Wait - how is that workflow possible and supported?
In my head, authorization under @company.com would be delegated to a central directory, instead of relying on Apple ID. It is effectively an authentication bypass.
Man-in-the-Middle PCB Unlocks HP Ink Cartridges
Ask HN: Should a risk assessment list all dependent tools?
With the whole Crowdstrike fiasco, I wonder how IT analysts can properly communicate the risks of having a 3rd party service malfunction to leadership.For example, most of us operate in the AWS space, and are aware of the risk of regional failures. While some choose to accept the risk, some instead have multi-regional deployments.Should all these (Saas) tools be listed in a risk assessment...
- CS: Have a staging (production-like) environment for proper validation. It looks like CS has one of these bu they have just skipped it - IT Admins: Have controlled roll-outs, instead of doing everything in a single swoop. - CS: Fuzz test your configuration
Anything I have missed?