Pinned Tweet
Interesting vector, ever seen this before @_JohnHammond?
atom retweeted
I hear people want
- fast and cheap VMs for AI agents that...
- start in under 50 ms, suspend automatically...
- have full desktop with browser
orble.tech
hisaabu.yazak.me
You don't need a spreadsheet or a calculator. A notepad should be more than enough.
So I cooked a free notepad that does the math as you type. Mac & Windows. If you ever use it, would love your feedback
2
177
atom retweeted
🥷 Introducing Teclea Ninja! 🎮
What started as a little typing game for my daughter somehow turned into a full-on arcade game! 😄
After plenty of coding, testing, and tweaking, it's finally here!
Here's our little purple ninja in action! 👇
🧵 1/4
atom retweeted
I retired from cybersecurity, I now lay flooring
No more CVEs to worry about, I will go to sleep thinking that my floor is well done, without any worry that my Linux server is going to get hacked 30th time this week
Good luck with your vulnerable servers
What a disaster atlasum.net/blog/cve-2026-98…
liyun.yazak.me
Existing editors supports Dhivehi but it was never intuitive for me, so I cooked an open source editor that catered for my skill issue.
liyun contains templates of Dhivehi documents (letter, invoice, etc) and it also contains Dhivehi spell checker
4
160
4
Announcing 3 Critical vulns for hundreds of millions of IoT, Firewalls, OT, and Military devices including: Palo Alto Networks, Comcast, D-Link, HP, Canon, Honeywell, GE, Oracle, Siemens, Rockwell, Digi, Lockheed Martin, Boeing...
The vulns are with GoAhead Web Server which is a backend library used by these devices. There's a patch available from GoAhead but that doesn't mean there's a patch available for the devices yet -- that's up to the manufacturer.
- TLS traffic over DHE ciphers have a 1-byte secret, "04", meaning anyone can decrypt connections to these devices and steal login credentials and session tokens if the client negotiated with DHE ciphers like the latest TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256, which is extremely likely.
- LibreSSL mTLS has been completely bypassed, meaning anyone can connect over mTLS. If you have one of these devices listening on the internet and are expecting mTLS to protect it from attackers, take it offline or patch asap.
- OpenSSL Certificate Revocation Lists (CRLs) are not enforced, meaning if a user device is stolen or compromised, and you revoke that mTLS cert, nothing actually happens. There are a lot of other attacks this can be used for.
These are critical because these types of devices run our world. Water systems, electricity, military, firewalls, critical infrastructure.
foxio.io/blog/choose-your-ba…
36
atom retweeted
i'm sorry to say folks but unfortunately weekends are ruined , 3 more RCE dropped in last few hours.Patch ASAP .🤯
java2shell.com
node2shell.com
ruby2shell.com
what is going on????
Several Linux Kernel Vulnerabilities Accidentally Posted To Public Kernel Mailing List
As high as CVSS 9.0. Whoops.
phoronix.com/news/LKML-New-T…
1
3
171
Sorry everyone... We're announcing a 0-Day vuln in QUIC that allows anyone to remotely turn off a server running these libraries. I swear we didn't plan this.
foxio.io/blog/header-accordi…
38
🚨 CRITICAL: GitLab flaw (CVSS 10.0) affects 12 years of releases.
CVE-2026-110264 could allow unauthenticated remote code execution on self-managed servers.
Read - thehackernews.com/2026/10/cr…
24
private keys from 8 intermediate CA certs have been compromised (eMudhra)
Happy "Update everything" day to all my pager-carrying friends
emudhra.we-have-a-problem.co…
31

























