dethos
Gonçalo Valério

Full-stack developer with special interest in cybersecurity.

Advocate of a free and safe Internet. Nature admirer and sports enthusiast.

Public Key

npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9

Profile Code

nprofile1qqsvragg6cy4muhjr2ks4gvktp9fed60sp873cvpmteqtmxunf6twqqpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0ds0z5843

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9

Show more details

Last Notes

2026-05-29 09:38:32 UTC

"Microsoft's GitHub bans security researcher who posted zero-day Windows exploits because company 'ruined their life' — expert claims action is vindictive and promises further retaliation"
https://www.tomshardware.com/tech-industry/cyber-security/microsofts-github-bans-security-researcher-who-posted-zero-day-windows-exploits-because-company-ruined-their-life-expert-claims-action-is-vindictive-and-promises-further-retaliation
Bad move.
#security #microsoft #cybersecurity #infosec

2026-03-18 14:00:56 UTC

"Lock the Ghost: In the software world, “remove” is not equal to "gone.""
https://www.cert.at/en/blog/2026/3/lock-the-ghost
#pypi #dependencies #supplychain #lockfiles #python

2026-03-11 17:55:40 UTC

"Replacing tox with UV"
https://blog.changs.co.uk/replacing-tox-with-uv.html
#python #testing #uv

2026-02-28 12:00:52 UTC

- reply

I get it using the distro's package manager. That's it.
If something is not there, or I need a bleeding edge version, I use flatpak.
Overtime I found that this approach works very well for me.

2025-10-15 16:43:06 UTC

"How I Almost Got Hacked By A 'Job Interview'"
https://blog.daviddodda.com/how-i-almost-got-hacked-by-a-job-interview
#security #cybersecurity #developers #programmers

2025-10-13 11:20:47 UTC

"CamoLeak: Critical GitHub Copilot Vulnerability Leaks Private Source Code"
https://www.legitsecurity.com/blog/camoleak-critical-github-copilot-vulnerability-leaks-private-source-code
#security #cybersecurity #infosec #github #copilot

2025-10-04 10:45:44 UTC

"What is "good taste" in software engineering?"
https://www.seangoedecke.com/taste/
"In other words, most bad taste comes from inflexibility. I will always distrust engineers who justify decisions by saying “it’s best practice”. No engineering decision is “best practice” in all contexts! You have to make the right decision for the specific problem you’re facing."
#softwaredevelopment #programming #softwareengineering

2025-10-02 12:22:27 UTC

"Django security releases issued: 5.2.7, 5.1.13, and 4.2.25"
https://www.djangoproject.com/weblog/2025/oct/01/security-releases/
#security #python #django

2025-09-26 08:33:03 UTC

"... proof-of-concept transparent proxy PyPI mirror that demonstrates how code can be modified inline and pass hash checks"
https://dtm.uk/badpie/
#python #pypi #security

2025-09-18 09:14:23 UTC

"One Token to rule them all - obtaining Global Admin in every Entra ID tenant via Actor tokens"
https://dirkjanm.io/obtaining-global-admin-in-every-entra-id-tenant-with-actor-tokens/
#security #cybersecurity #infosec #microsoft #entraid

2025-09-16 16:28:44 UTC

"Self-Replicating Worm Hits 180+ Software Packages"
https://krebsonsecurity.com/2025/09/self-replicating-worm-hits-180-software-packages/
#security #cybersecurity #infosec #npm #supplychain

2025-09-09 08:09:13 UTC

"npm debug and chalk packages compromised"
https://www.aikido.dev/blog/npm-debug-and-chalk-packages-compromised
#security #cybersecurity #infosec #supplychain #npm #javascript

2025-09-03 14:21:23 UTC

"Django security releases issued: 5.2.6, 5.1.12, and 4.2.24"
https://www.djangoproject.com/weblog/2025/sep/03/security-releases/
* CVE-2025-57833: Potential SQL injection in FilteredRelation column aliases
#security #websec #python #django

2025-08-28 08:58:04 UTC

"Supply Chain Security Alert: Popular Nx Build System Package Compromised with Data-Stealing Malware"
https://www.stepsecurity.io/blog/supply-chain-security-alert-popular-nx-build-system-package-compromised-with-data-stealing-malware
#security #cybersecurity #infosec #supplychain #npm #github

2025-08-26 16:30:30 UTC

"Burner Phone 101"
https://rebeccawilliams.info/burner-phone-101/
``
Privacy Tips for All Phones:
* Keep device & OS as updated as possible
* Strong PIN, not biometrics
* Disable cloud backups / use encrypted backups
* Install Signal
* Enforce strict app permissions (deny mic, camera, location) unless needed
* Radios off (GPS/Wi-Fi/Bluetooth) unless needed
* Store minimal sensitive data (including photos)
``
#security #privacy

2025-08-25 09:52:35 UTC

"DOM-based Extension Clickjacking: Your Password Manager Data at Risk"
https://marektoth.com/blog/dom-based-extension-clickjacking/
#security #cybersecurity #infosec #passwordmanagers

2025-08-25 08:19:25 UTC

"ghrc.io Appears to be Malicious"
https://bmitch.net/blog/2025-08-22-ghrc-appears-malicious/
#security #cybersecurity #containers #github

2025-08-24 21:33:00 UTC

"Copilot Broke Your Audit Log, but Microsoft Won’t Tell You"
https://pistachioapp.com/blog/copilot-broke-your-audit-log
#security #cybersecurity #microsoft #ai

2025-08-18 12:07:09 UTC

"SystemD Service Hardening"
https://roguesecurity.dev/blog/systemd-hardening
#linux #systemd #security

2025-08-09 17:04:13 UTC

"Smuggling arbitrary data through an emoji"
https://paulbutler.org/2025/smuggling-arbitrary-data-through-an-emoji/
#emoji #hiddendata #fun

2025-08-08 09:58:06 UTC

"Cracking the Vault: how we found zero-day flaws in authentication, identity, and authorization in HashiCorp Vault"
https://cyata.ai/blog/cracking-the-vault-how-we-found-zero-day-flaws-in-authentication-identity-and-authorization-in-hashicorp-vault/
#security #cybersecurity #infosec #hashicorp #vault

2025-08-07 08:58:54 UTC

"We replaced passwords with something worse"
https://blog.danielh.cc/blog/passwords
#security #passwords #web #authentication

2025-07-27 23:28:32 UTC

- reply

Interesting approach... Probably a better system than the rest. Let's see.

2025-07-02 20:04:16 UTC

"How I Scanned all of GitHub’s “Oops Commits” for Leaked Secrets"
https://trufflesecurity.com/blog/guest-post-how-i-scanned-all-of-github-s-oops-commits-for-leaked-secrets
#git #github #security #infosec

2025-06-23 21:27:44 UTC

"New Linux udisks flaw lets attackers get root on major Linux distros"
https://www.bleepingcomputer.com/news/linux/new-linux-udisks-flaw-lets-attackers-get-root-on-major-linux-distros/
#linux #security

2025-06-23 10:36:02 UTC

"History of the browser user-agent string"
https://webaim.org/blog/user-agent-string-history
#browsers #history #useragent #web

2025-06-19 11:28:22 UTC

"Websites Are Tracking You Via Browser Fingerprinting"
https://engineering.tamu.edu/news/2025/06/websites-are-tracking-you-via-browser-fingerprinting.html
You can have an idea about your case by using: https://www.amiunique.org/
#privacy #security

2025-06-15 15:37:22 UTC

"Optimizing Django Docker Builds with Astral’s `uv`"
https://rob.cogit8.org/posts/optimizing-django-docker-builds-with-astrals-uv/
#python #uv #docker

2025-06-12 15:59:39 UTC

"Mac Contacted 63 Different Apple Owned Domains in One Hour - While Not is Use"
https://appaddict.app/post/my-mac-contacted-63-different-apple-owned-domains-in-one-hour-while-not-is-use
A Pi-hole (or similar setup) is definitely a must in this day and age.
#tech #privacy #localsoftware

2025-06-12 09:28:30 UTC

"Breaking down ‘EchoLeak’, the First Zero-Click AI Vulnerability Enabling Data Exfiltration from Microsoft 365 Copilot"
https://www.aim.security/lp/aim-labs-echoleak-blogpost
#security #cybersecurity #ai #infosec #microsoft #copilot

2025-06-10 16:43:23 UTC

"CVE-2025-47934 – Spoofing OpenPGP.js signature verification"
https://codeanlabs.com/blog/research/cve-2025-47934-spoofing-openpgp-js-signatures/
#security #cybersecurity #infosec #openpgp #openpgpjs

2025-06-03 16:52:33 UTC

"Disclosure: Covert Web-to-App Tracking via Localhost on Android"
or
Meta and Yandex "native Android apps receive browsers' metadata, cookies and commands from the Meta Pixel and Yandex Metrica scripts embedded on thousands of web sites."
https://localmess.github.io/
#security #android #browsers #privacy

2025-05-30 17:11:15 UTC

Django: Deferred constrain enforcement
Another Friday, another Django related post. I guess this blog is becoming a bit monothematic. I promise the next ones will bring the much-needed diversity of contents, but today let’s explore a very useful feature of the Django’s ORM.
Ok… Ok… it’s more of a feature of PostgreSQL that Django supports, and it isn’t available on the other database backend. But let’s dive in any way. […]
https://blog.ovalerio.net/archives/3160
#Django #djangofridaytips #postgresql #Python

2025-05-28 10:58:41 UTC

"Why are 2025/05/28 and 2025-05-28 different days in JavaScript?"
https://brandondong.github.io/blog/javascript_dates/
🤯
#javascript

2025-05-27 20:04:50 UTC

"Python: The Documentary" [trailer]
https://www.youtube.com/watch?v=pqBqdNIPrbo
#python

2025-05-26 00:07:17 UTC

"Remote Prompt Injection in GitLab Duo Leads to Source Code Theft"
https://www.legitsecurity.com/blog/remote-prompt-injection-in-gitlab-duo
#security #ai #gitlab

2025-05-23 09:58:11 UTC

"Loading Pydantic models from JSON without running out of memory"
https://pythonspeed.com/articles/pydantic-json-memory/
#python #pydantic

2025-05-21 09:28:05 UTC

"Django Security Best Practices: A Comprehensive Guide for Software Engineers"
https://corgea.com/Learn/django-security-best-practices-a-comprehensive-guid-for-software-engineers
#python #django #security

2025-05-20 17:50:16 UTC

"The 18-point secrets management checklist"
https://www.hashicorp.com/en/blog/the-18-point-secrets-management-checklist
#security #cybersecurity #secrets #secretmanagement

2025-05-18 15:55:23 UTC

"Security Vulnerabilities fixed in Firefox 138.0.4"
https://www.mozilla.org/en-US/security/advisories/mfsa2025-36/
* CVE-2025-4920: Out-of-bounds access when resolving Promise objects
* CVE-2025-4921: Out-of-bounds access when optimizing linear sums
#firefox #security

2025-05-16 09:17:02 UTC

"The cryptography behind passkeys"
https://blog.trailofbits.com/2025/05/14/the-cryptography-behind-passkeys/
#authentication #security #passkeys

2025-05-15 10:06:20 UTC

Node.js Security Release
https://nodejs.org/en/blog/vulnerability/may-2025-security-releases
* Improper error handling in async cryptographic operations crashes process
* Improper HTTP header block termination in llhttp
* Corrupted pointer in node::fs::ReadFileUtf8(const FunctionCallbackInfo<Value>& args) when args[0] is a string.
#nodejs #security

2025-05-13 14:02:12 UTC

"Passkeys for Normal People"
https://www.troyhunt.com/passkeys-for-normal-people/
#authentication #passkeys #webauthn #mfa #security

2025-05-11 18:09:56 UTC

"Tech & Non-Tech Stacks to Run Listen Notes (2025)"
https://www.listennotes.com/blog/tech-non-tech-stacks-to-run-listen-notes-2025-113/
#techstack #startups

2025-05-09 14:13:46 UTC

"How to Harden GitHub Actions: The Unofficial Guide"
https://www.wiz.io/blog/github-actions-security-guide
#security #supplychain #github #githubactions

2025-05-05 19:45:44 UTC

"The Beauty Of Having A Pi-hole"
https://den.dev/blog/pihole/
#ads #privacy #dns #tracking #web #iot

2025-05-05 13:05:25 UTC

"Insecure credential storage plagues MCP"
https://blog.trailofbits.com/2025/04/30/insecure-credential-storage-plagues-mcp/
#security #ai #mcp #cybersecurity

2025-05-01 17:11:29 UTC

"I use Zip Bombs to Protect my Server"
https://idiallo.com/blog/zipbomb-protection
#security #spam #bots

2025-05-01 15:36:39 UTC

"Cross-Site WebSocket Hijacking Exploitation in 2025"
https://blog.includesecurity.com/2025/04/cross-site-websocket-hijacking-exploitation-in-2025/
I remember, a few years ago, finding this kind of issue in a project, that I ended up working on.
#security #websec #web #webdev

2025-04-29 19:20:39 UTC

"Principles for coding securely with LLMs"
https://www.seangoedecke.com/ai-security/
#security #cybersecurity #ai #llm

2025-04-20 09:43:10 UTC

"SSL.com: DCV bypass and issue fake certificates for any MX hostname"
https://bugzilla.mozilla.org/show_bug.cgi?id=1961406
ooouuchhh
#security #ssl #tls #ca #cybersecurity #infosec

2025-04-16 13:49:43 UTC

"European Union Vulnerability Database (EUVD)"
https://euvd.enisa.europa.eu/
🤔
#security #cybersecurity

2025-04-10 09:53:18 UTC

"Model Context Protocol has prompt injection security problems"
https://simonwillison.net/2025/Apr/9/mcp-prompt-injection/#atom-everything
#mcp #security #cybersecurity #llm #ai

2025-04-08 15:58:09 UTC

"Less htmx is More"
https://unplannedobsolescence.com/blog/less-htmx-is-more/
#html #htmx #webdev #http

2025-04-04 09:50:44 UTC

"CodeQLEAKED – Public Secrets Exposure Leads to Supply Chain Attack on GitHub CodeQL"
https://www.praetorian.com/blog/codeqleaked-public-secrets-exposure-leads-to-supply-chain-attack-on-github-codeql/
#github #githubactions #supplychain #security #cicd

2025-03-31 14:28:52 UTC

"The EU Open Source Solutions Catalogue is now live"
https://interoperable-europe.ec.europa.eu/interoperable-europe/news/eu-open-source-solutions-catalogue-now-live
"The EU OSS Catalogue currently hosts over 640 solutions, encompassing both complete solutions and individual building blocks to be used while building your own solution."
"Designed primarily for public administrations across the EU, the catalogue provides access to reusable solutions across more than 30 key areas relevant to public sector needs."
👏
#eu #opensource #publiccode

2025-03-29 22:35:14 UTC

"How to report a security issue in an open source project"
https://jacobian.org/2025/mar/27/reporting-security-issues-in-oss/
#security #cybersecurity #opensource

2025-03-29 11:14:10 UTC

"REST in Peace? Django's Framework Problem"
https://danlamanna.com/posts/rest-in-peace-djangos-framework-problem/
#django #djangorestframework

2025-03-28 11:35:15 UTC

"Share Python Scripts Like a Pro: uv and PEP 723 for Easy Deployment"
https://thisdavej.com/share-python-scripts-like-a-pro-uv-and-pep-723-for-easy-deployment/
#python #uv

2025-03-27 13:43:24 UTC

"Whose code am I running in GitHub Actions?"
https://alexwlchan.net/2025/github-actions-audit/
#security #supplychain #cicd #githubactions

2025-03-25 17:50:46 UTC

"IngressNightmare: 9.8 Critical Unauthenticated Remote Code Execution Vulnerabilities in Ingress NGINX"
https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities
#security #cybersecurity #kubernetes #nginx

2025-03-23 14:51:49 UTC

"Next.js Middleware Exploit: Deep Dive into CVE-2025-29927 Authorization Bypass"
https://zeropath.com/blog/nextjs-middleware-cve-2025-29927-auth-bypass
#security #cybersecurity #nextjs #webdev

2025-03-21 18:51:35 UTC

- reply

I guess updating your mobile browser would suffice (at least according to the article)

2025-03-20 13:57:39 UTC

"CVE-2024-9956 - PassKey Account Takeover in All Mobile Browsers"
https://mastersplinter.work/research/passkey/
#security #authentication #passkeys

2025-03-19 11:38:44 UTC

"Apache Tomcat Vulnerability Actively Exploited Just 30 Hours After Public Disclosure"
https://thehackernews.com/2025/03/apache-tomcat-vulnerability-comes-under.html
#java #tomcat #security #cybersecurity #netsec

2025-03-18 13:08:25 UTC

"Password reuse is rampant: nearly half of observed user logins are compromised"
https://blog.cloudflare.com/password-reuse-rampant-half-user-logins-compromised/
#security #cybersecurity #passwords #authentication

2025-03-15 10:42:16 UTC

GitHub action "tj-actions/changed-files" is compromised
https://www.stepsecurity.io/blog/harden-runner-detection-tj-actions-changed-files-action-is-compromised
#security #cybersecurity #githubactions #github #cicd

2025-03-14 23:03:40 UTC

"Everything you say to your Echo will be sent to Amazon starting on March 28"
https://arstechnica.com/gadgets/2025/03/everything-you-say-to-your-echo-will-be-sent-to-amazon-starting-on-march-28/
Ouch. The best place for these listening devices is in the garbage.
#amazon #alexa #echo #privacy

2025-03-06 17:31:59 UTC

"Django security releases issued: 5.1.7, 5.0.13 and 4.2.20"
https://www.djangoproject.com/weblog/2025/mar/06/security-releases/
#security #django #python

2025-03-05 21:08:22 UTC

Status of old PyPI projects: archived
Since late January, the python package index (PyPI) supports archiving projects/packages. This is, in fact, a very welcome feature, since it clearly tells without any doubt when a package is no longer maintained and will not receive any further updates.
It makes it easier for the person looking for packages, to know which ones deserve a closer inspection and which ones are there abandoned, […]
https://blog.ovalerio.net/archives/3112
#pypi #Python

2025-03-03 21:02:24 UTC

"Advanced Nginx Hardening"
https://medium.com/@js_9757/advanced-nginx-hardening-15bf96058327
#nginx

2025-03-02 19:26:29 UTC

"form-action Content-Security-Policy Bypass And Other Tactics For Dealing With The CSP"
https://nzt-48.org/form-action-content-security-policy-bypass-and-other-tactics-for-dealing-with-the-csp
#security #cybersecurity #browsers #web #csp

2025-03-01 09:21:22 UTC

"git checkout -"
https://mathspp.com/blog/til/git-checkout
#git

2025-02-28 10:15:17 UTC

"Microsoft begins turning off uBlock Origin and other extensions in Edge"
https://www.neowin.net/news/microsoft-begins-turning-off-ublock-origin-and-other-extensions-in-edge/
👎… Use Firefox (or a reputable and actively maintained fork).
#pricavy #ads #web #ublockorigin

2025-02-23 17:29:18 UTC

"It is no longer safe to move our governments and societies to US clouds"
https://berthub.eu/articles/posts/you-can-no-longer-base-your-government-and-society-on-us-clouds/
Guess what? It never was!
#security #cybersecuriy #digitalsoverenity

2025-02-19 19:12:52 UTC

“A year of uv: pros, cons, and should you migrate”
https://www.bitecode.dev/p/a-year-of-uv-pros-cons-and-should
I've also been using uv lately, I agree it is a pleasure to use. I still have many projects and other setups that rely on “pyenv”, “pipx”, “poetry”, “pip-tools”, etc.
I was comfortable with my setup, and it served my purposes well, but I've to admit that uv is very appealing.
Nevertheless, it will take time to migrate them all (if I decide to go in that direction).
#python #uv #pip

2025-02-19 15:01:34 UTC

"Attacks on Maven proxy repositories"
https://github.blog/security/vulnerability-research/attacks-on-maven-proxy-repositories/
#security #cybersecurity #supplychain #java #maven

2025-02-18 11:24:10 UTC

"No, Privacy is Not Dead: Beware the All-or-Nothing Mindset"
https://www.privacyguides.org/articles/2025/02/17/privacy-is-not-dead/
#security #privacy

2025-02-14 17:28:54 UTC

"Common OAuth Vulnerabilities"
https://blog.doyensec.com/2025/01/30/oauth-common-vulnerabilities.html
#security #cybersecurity #auth #oauth

2025-02-14 10:06:21 UTC

"Nearly a Year Later, Mozilla is Still Promoting OneRep"
https://krebsonsecurity.com/2025/02/nearly-a-year-later-mozilla-is-still-promoting-onerep/
#mozilla #privacy #mozillamonitor

2025-02-12 12:50:26 UTC

"Leaking the email of any YouTube user for $10,000"
https://brutecat.com/articles/leaking-youtube-emails
#security #cybersecurity #google

2025-02-06 10:35:12 UTC

"Go Supply Chain Attack: Malicious Package Exploits Go Module Proxy Caching for Persistence"
https://socket.dev/blog/malicious-package-exploits-go-module-proxy-caching-for-persistence
#security #cybersecurity #go #supplychain

2025-02-02 21:15:58 UTC

"The surprising way to save memory with BytesIO"
https://pythonspeed.com/articles/bytesio-reduce-memory-usage/
#python

2025-02-02 11:53:05 UTC

"Avoid ISP routers"
https://routersecurity.org/ISProuters.php
#security #netsec

2025-01-25 11:06:04 UTC

"Faster pip installs: caching, bytecode compilation, and uv"
https://pythonspeed.com/articles/faster-pip-installs/
#python #pip #uv #ci

2025-01-24 11:59:40 UTC

"The thing that's crazy is that if I followed the 2 "best practices" of verifying the phone number + getting them to send an email to you from a legit domain, I would have been compromised."
https://gist.github.com/zachlatta/f86317493654b550c689dc6509973aa4
Wow, this phishing attempt was elaborate indeed.
#security #google #socialengineering #phishing

2025-01-21 21:17:08 UTC

New node.js security release
https://nodejs.org/en/blog/vulnerability/january-2025-security-releases
- Worker permission bypass via InternalWorker leak in diagnostics (CVE-2025-23083) - (high)
- Path traversal by drive name in Windows environment (CVE-2025-23084) - (medium)
- GOAWAY HTTP/2 frames cause memory leak outside heap (CVE-2025-23085) - (medium)
#security #nodejs

2025-01-21 13:45:11 UTC

"Catching memory leaks with your test suite"
https://pythonspeed.com/articles/identifying-resource-leaks-with-pytest/
#programming #softwaredevelopment #python #pytest

2025-01-17 16:12:43 UTC

"Millions of Accounts Vulnerable due to Google’s OAuth Flaw"
https://trufflesecurity.com/blog/millions-at-risk-due-to-google-s-oauth-flaw
I wonder if any other OAuth providers have similar issues and how they solve it.
#security #cybersecurity #infosec #oauth #googe

2025-01-16 09:35:21 UTC

"Don’t Use Session (Signal Fork)"
https://soatok.blog/2025/01/14/dont-use-session-signal-fork/
#security #infosec #signal #session #cybersecurity

2025-01-15 11:00:29 UTC

"Two independent groups of researchers have identified a total of 6
vulnerabilities in rsync. In the most severe CVE, an attacker only requires
anonymous read access to a rsync server, such as a public mirror, to
execute arbitrary code on the machine the server is running on."
https://seclists.org/oss-sec/2025/q1/16
#security #cybersecurity #rsync

2025-01-14 16:44:05 UTC

"Django security releases issued: 5.1.5, 5.0.11, and 4.2.18"
https://www.djangoproject.com/weblog/2025/jan/14/security-releases/
* CVE-2024-56374: Potential denial-of-service vulnerability in IPv6 validation
#security #django

2025-01-14 10:11:04 UTC

"Container capabilities: a short tour"
https://padlock.argh.in/2024/12/15/container-capabilities.html
#security #containers #docker

2025-01-09 20:49:10 UTC

"Database optimization isn't always obvious"
https://kenwhitesell.github.io/2025/01/01/Database-optimization-is-not-alway-obvious.html
#sql #databases

2025-01-09 20:31:36 UTC

"Effective Python Developer Tooling in December 2024"
https://pydevtools.com/blog/effective-python-developer-tooling-in-december-2024/
#python #programming #softwaredevelopment

2025-01-08 18:09:21 UTC

"Getting Started Contributing to Django"
https://www.better-simple.com/django/2024/12/25/getting-started-contributing-django/
#python #django

2025-01-04 14:24:27 UTC

"Hat Trick: AWS introduced same RCE vulnerability three times in four years"
https://giraffesecurity.dev/posts/amazon-hat-trick/
#security #cybersecurity #aws #supplychain

2024-12-31 00:12:09 UTC

Passkey technology is elegant, but it’s most definitely not usable security
https://arstechnica.com/security/2024/12/passkey-technology-is-elegant-but-its-most-definitely-not-usable-security/
Yet
#passwors #passkeys #webauthn #authentication

2024-12-28 12:13:25 UTC

"A Tour of WebAuthn"
HTML version of the book
https://www.imperialviolet.org/tourofwebauthn/tourofwebauthn.html
#webauthn #passkeys #authentication #2FA #security #cybersecurity

2024-12-27 16:16:12 UTC

"Small teams"
https://www.proofofconcept.pub/p/small-teams