2024-02-20T23:10:04Z https://yabu.me dethos https://yabu.me/npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 https://m.primal.net/HcUd.jpg https://m.primal.net/HcUd.jpg https://yabu.me/nevent1qqs9mq4vrsyeem4r283tann59vztk8parqwzwhqgaurem20pqkehrjgzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsquqzqud &#34;Microsoft&#39;s GitHub bans security researcher who posted zero-day Windows exploits because company &#39;ruined their life&#39; — expert claims action is vindictive and promises further retaliation&#34;<br/><br/><a href="https://www.tomshardware.com/tech-industry/cyber-security/microsofts-github-bans-security-researcher-who-posted-zero-day-windows-exploits-because-company-ruined-their-life-expert-claims-action-is-vindictive-and-promises-further-retaliation">https://www.tomshardware.com/tech-industry/cyber-security/microsofts-github-bans-security-researcher-who-posted-zero-day-windows-exploits-because-company-ruined-their-life-expert-claims-action-is-vindictive-and-promises-further-retaliation</a><br/><br/>Bad move.<br/><br/>#security #microsoft #cybersecurity #infosec<br/><br/> <br/><br/> 2026-05-29T09:38:32Z https://yabu.me/nevent1qqsv6f6ra9t39ztdvwr6nzruwft5glf5mp0q5n2a0hw5l82fd9hm0gczyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqxk7pe0 &#34;Lock the Ghost: In the software world, “remove” is not equal to &#34;gone.&#34;&#34;<br/><br/><a href="https://www.cert.at/en/blog/2026/3/lock-the-ghost">https://www.cert.at/en/blog/2026/3/lock-the-ghost</a><br/><br/>#pypi #dependencies #supplychain #lockfiles #python <br/><br/> 2026-03-18T14:00:56Z https://yabu.me/nevent1qqsgl6nstp50uptjlzwag5su84v80lggqm8y0a2dztnffh0ms6s6y7qzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqjl69yj &#34;Replacing tox with UV&#34;<br/><br/><a href="https://blog.changs.co.uk/replacing-tox-with-uv.html">https://blog.changs.co.uk/replacing-tox-with-uv.html</a><br/><br/>#python #testing #uv <br/><br/> 2026-03-11T17:55:40Z https://yabu.me/nevent1qqs25kjprxfc038vdfsgznu4ufa9f86cqy2w3jy8qkx6rmjpx4elhgszyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqa7s89v In reply to <a href='/nevent1qqs0jt5zq0lwla6smkydapjlyaxhu5yw9rfde9m3tz73h2ktfr3dvvqpr9mhxue69uhk2umsv4kxsmewva5hy6twduhx7un89u54v0ku'>nevent1q…v0ku</a><br/>_________________________<br/><br/>I get it using the distro&#39;s package manager. That&#39;s it. <br/><br/>If something is not there, or I need a bleeding edge version, I use flatpak.<br/><br/>Overtime I found that this approach works very well for me. <br/><br/> 2026-02-28T12:00:52Z https://yabu.me/nevent1qqs2zuu7v0dn69nyykl5n77x9av07h8wu86rwyufcc3q2lyg78kpr9szyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqqsuu6u &#34;How I Almost Got Hacked By A &#39;Job Interview&#39;&#34;<br/><br/><a href="https://blog.daviddodda.com/how-i-almost-got-hacked-by-a-job-interview">https://blog.daviddodda.com/how-i-almost-got-hacked-by-a-job-interview</a><br/><br/>#security #cybersecurity #developers #programmers <br/><br/> 2025-10-15T16:43:06Z https://yabu.me/nevent1qqsxw58uyms6ydpcj6y4vryvecetlel6ttxhmn462cgtvnxcawn2u6qzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqvnh265 &#34;CamoLeak: Critical GitHub Copilot Vulnerability Leaks Private Source Code&#34;<br/><br/><a href="https://www.legitsecurity.com/blog/camoleak-critical-github-copilot-vulnerability-leaks-private-source-code">https://www.legitsecurity.com/blog/camoleak-critical-github-copilot-vulnerability-leaks-private-source-code</a><br/><br/>#security #cybersecurity #infosec #github #copilot <br/><br/> 2025-10-13T11:20:47Z https://yabu.me/nevent1qqspv6wt23ej0hrk96gc6a25mmssha6z0hyfc43rzc6wd99jv5vmluszyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqv7uuxg &#34;What is &#34;good taste&#34; in software engineering?&#34;<br/><br/><a href="https://www.seangoedecke.com/taste/">https://www.seangoedecke.com/taste/</a><br/><br/>&#34;In other words, most bad taste comes from inflexibility. I will always distrust engineers who justify decisions by saying “it’s best practice”. No engineering decision is “best practice” in all contexts! You have to make the right decision for the specific problem you’re facing.&#34;<br/><br/>#softwaredevelopment #programming #softwareengineering <br/><br/> 2025-10-04T10:45:44Z https://yabu.me/nevent1qqs2sawrejauf2gakfysualqu6hc548z6hjsdtvljga5gwhsvl4scqszyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqzefev0 &#34;Django security releases issued: 5.2.7, 5.1.13, and 4.2.25&#34;<br/><br/><a href="https://www.djangoproject.com/weblog/2025/oct/01/security-releases/">https://www.djangoproject.com/weblog/2025/oct/01/security-releases/</a><br/><br/>#security #python #django <br/><br/> 2025-10-02T12:22:27Z https://yabu.me/nevent1qqsdaef5yhv6aw3tsrefdkdulg3gdw634wvpq5suj5qjz5408fvcwgszyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqpnfudd &#34;... proof-of-concept transparent proxy PyPI mirror that demonstrates how code can be modified inline and pass hash checks&#34;<br/><br/><a href="https://dtm.uk/badpie/">https://dtm.uk/badpie/</a><br/><br/>#python #pypi #security <br/><br/> 2025-09-26T08:33:03Z https://yabu.me/nevent1qqsyjt0mrq7pcyq7yelcurtd6gtsf62u2yfxv7454uzadc8354wjnmczyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqrnc34j &#34;One Token to rule them all - obtaining Global Admin in every Entra ID tenant via Actor tokens&#34;<br/><br/><a href="https://dirkjanm.io/obtaining-global-admin-in-every-entra-id-tenant-with-actor-tokens/">https://dirkjanm.io/obtaining-global-admin-in-every-entra-id-tenant-with-actor-tokens/</a><br/><br/>#security #cybersecurity #infosec #microsoft #entraid <br/><br/> 2025-09-18T09:14:23Z https://yabu.me/nevent1qqsguqjvec7nm7aw68jesrev2zc20h9xutkyzx4494z8rc70e8d05xgzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqhpusx7 &#34;Self-Replicating Worm Hits 180+ Software Packages&#34;<br/><br/><a href="https://krebsonsecurity.com/2025/09/self-replicating-worm-hits-180-software-packages/">https://krebsonsecurity.com/2025/09/self-replicating-worm-hits-180-software-packages/</a><br/><br/>#security #cybersecurity #infosec #npm #supplychain <br/><br/> 2025-09-16T16:28:44Z https://yabu.me/nevent1qqs0tnpn8cs65qgdsejvawpqud4m8tv66ugaszpk24ekp8xdg8x0tlgzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqr4xyp9 &#34;npm debug and chalk packages compromised&#34;<br/><br/><a href="https://www.aikido.dev/blog/npm-debug-and-chalk-packages-compromised">https://www.aikido.dev/blog/npm-debug-and-chalk-packages-compromised</a><br/><br/>#security #cybersecurity #infosec #supplychain #npm #javascript <br/><br/> 2025-09-09T08:09:13Z https://yabu.me/nevent1qqswtc5d4gtjsfex9nqwfuq8ztpjpfjcdtjl0hsehemsvdgp75dwn6qzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqrtj8l9 &#34;Django security releases issued: 5.2.6, 5.1.12, and 4.2.24&#34;<br/><br/><a href="https://www.djangoproject.com/weblog/2025/sep/03/security-releases/">https://www.djangoproject.com/weblog/2025/sep/03/security-releases/</a><br/><br/>* CVE-2025-57833: Potential SQL injection in FilteredRelation column aliases<br/><br/>#security #websec #python #django <br/><br/> 2025-09-03T14:21:23Z https://yabu.me/nevent1qqs00dstxw88gtjrhqt5pyp0sfx9hxtd3ky2zp0wxmj26d3c4sfhe9szyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsq7dsfwk &#34;Supply Chain Security Alert: Popular Nx Build System Package Compromised with Data-Stealing Malware&#34;<br/><br/><a href="https://www.stepsecurity.io/blog/supply-chain-security-alert-popular-nx-build-system-package-compromised-with-data-stealing-malware">https://www.stepsecurity.io/blog/supply-chain-security-alert-popular-nx-build-system-package-compromised-with-data-stealing-malware</a><br/><br/>#security #cybersecurity #infosec #supplychain #npm #github <br/><br/> 2025-08-28T08:58:04Z https://yabu.me/nevent1qqstl082q6qswrmaugwz8l7sp4ejfr9vwmhgk5aw6daavgfl9xflu6czyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqtkk4ty &#34;Burner Phone 101&#34;<br/><br/><a href="https://rebeccawilliams.info/burner-phone-101/">https://rebeccawilliams.info/burner-phone-101/</a><br/><br/>``<br/>Privacy Tips for All Phones:<br/>* Keep device &amp; OS as updated as possible<br/>* Strong PIN, not biometrics<br/>* Disable cloud backups / use encrypted backups<br/>* Install Signal<br/>* Enforce strict app permissions (deny mic, camera, location) unless needed<br/>* Radios off (GPS/Wi-Fi/Bluetooth) unless needed<br/>* Store minimal sensitive data (including photos)<br/>``<br/><br/>#security #privacy <br/><br/> 2025-08-26T16:30:30Z https://yabu.me/nevent1qqs98f78cuxr8y0lvyzvrwv2jwxfrghas3vpfsy820ewfgn3jnrz2cgzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsq2ze6nx &#34;DOM-based Extension Clickjacking: Your Password Manager Data at Risk&#34;<br/><br/><a href="https://marektoth.com/blog/dom-based-extension-clickjacking/">https://marektoth.com/blog/dom-based-extension-clickjacking/</a><br/><br/>#security #cybersecurity #infosec #passwordmanagers <br/><br/> 2025-08-25T09:52:35Z https://yabu.me/nevent1qqsqkw4xnvy4lnttfa7s335jlhm3evs8593alv4h8m9arw48f6arj7gzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqww3j77 &#34;ghrc.io Appears to be Malicious&#34;<br/><br/><a href="https://bmitch.net/blog/2025-08-22-ghrc-appears-malicious/">https://bmitch.net/blog/2025-08-22-ghrc-appears-malicious/</a><br/><br/>#security #cybersecurity #containers #github <br/><br/> 2025-08-25T08:19:25Z https://yabu.me/nevent1qqs2ek5555zv3mf4ngxpqsgket29g8vm3zsmwu368xs2tvuptxnf9vczyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqjew8l5 &#34;Copilot Broke Your Audit Log, but Microsoft Won’t Tell You&#34;<br/><br/><a href="https://pistachioapp.com/blog/copilot-broke-your-audit-log">https://pistachioapp.com/blog/copilot-broke-your-audit-log</a><br/><br/>#security #cybersecurity #microsoft #ai <br/><br/> 2025-08-24T21:33:00Z https://yabu.me/nevent1qqsdj28jruqv5ehkq7h8uxgtp03mp3tx5f49r58hrpnpadl7lpqd75szyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqv0gs0u &#34;SystemD Service Hardening&#34;<br/><br/><a href="https://roguesecurity.dev/blog/systemd-hardening">https://roguesecurity.dev/blog/systemd-hardening</a><br/><br/>#linux #systemd #security <br/><br/> 2025-08-18T12:07:09Z https://yabu.me/nevent1qqs0rnpca9j00jpn5ld9thd0md89q8j5vnv3529dt00m5gxlwcepctszyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqf2sakz &#34;Smuggling arbitrary data through an emoji&#34;<br/><br/><a href="https://paulbutler.org/2025/smuggling-arbitrary-data-through-an-emoji/">https://paulbutler.org/2025/smuggling-arbitrary-data-through-an-emoji/</a><br/><br/>#emoji #hiddendata #fun <br/><br/> 2025-08-09T17:04:13Z https://yabu.me/nevent1qqsx904um8wj6swp0crd425elgumx4mf6j2mlkrdhrvn4q6qzp4mvrczyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqaajep5 &#34;Cracking the Vault: how we found zero-day flaws in authentication, identity, and authorization in HashiCorp Vault&#34;<br/><br/><a href="https://cyata.ai/blog/cracking-the-vault-how-we-found-zero-day-flaws-in-authentication-identity-and-authorization-in-hashicorp-vault/">https://cyata.ai/blog/cracking-the-vault-how-we-found-zero-day-flaws-in-authentication-identity-and-authorization-in-hashicorp-vault/</a><br/><br/>#security #cybersecurity #infosec #hashicorp #vault <br/><br/> 2025-08-08T09:58:06Z https://yabu.me/nevent1qqsy6f8tshnx9g7qxp235ahk55kzsnqs0utsaaj7nqrh5apehwqd7eszyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqzpzxl4 &#34;We replaced passwords with something worse&#34;<br/><br/><a href="https://blog.danielh.cc/blog/passwords">https://blog.danielh.cc/blog/passwords</a><br/><br/>#security #passwords #web #authentication <br/><br/> 2025-08-07T08:58:54Z https://yabu.me/nevent1qqsqnpsat92leug4g9h28p4jp90u0p5jwjks9p4s9x6ykqgfkq9as4szyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqzdc6jn In reply to <a href='/nevent1qqszejt69yu4z6kpyyhl8dq4cxqmcf3j6dwtl9a2pltugg8x7xm4z7cprfmhxue69uhhq7tjv9kkjepwve5kzar2v9nzucm0d5hszawnpf'>nevent1q…wnpf</a><br/>_________________________<br/><br/>Interesting approach... Probably a better system than the rest. Let&#39;s see. <br/><br/> 2025-07-27T23:28:32Z https://yabu.me/nevent1qqsg7wv9jfzrg08smjymfpj7va2tw8uak3k957njh6ervgy3xchf2pgzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsq9tsmq6 &#34;How I Scanned all of GitHub’s “Oops Commits” for Leaked Secrets&#34;<br/><br/><a href="https://trufflesecurity.com/blog/guest-post-how-i-scanned-all-of-github-s-oops-commits-for-leaked-secrets">https://trufflesecurity.com/blog/guest-post-how-i-scanned-all-of-github-s-oops-commits-for-leaked-secrets</a><br/><br/>#git #github #security #infosec <br/><br/> 2025-07-02T20:04:16Z https://yabu.me/nevent1qqsqvd7y5zzrjhjvhazdm5kne7taa4ph2wcmchx8zjd693gw4f6xc2gzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqsg5wgz &#34;New Linux udisks flaw lets attackers get root on major Linux distros&#34;<br/><br/><a href="https://www.bleepingcomputer.com/news/linux/new-linux-udisks-flaw-lets-attackers-get-root-on-major-linux-distros/">https://www.bleepingcomputer.com/news/linux/new-linux-udisks-flaw-lets-attackers-get-root-on-major-linux-distros/</a><br/><br/>#linux #security <br/><br/> 2025-06-23T21:27:44Z https://yabu.me/nevent1qqsd3j9epc3wguvaaerngvk4jvcfndy0kup0rarvj9u7xq0q74u6gmszyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsq2u6zpk &#34;History of the browser user-agent string&#34;<br/><br/><a href="https://webaim.org/blog/user-agent-string-history">https://webaim.org/blog/user-agent-string-history</a><br/><br/>#browsers #history #useragent #web <br/><br/> 2025-06-23T10:36:02Z https://yabu.me/nevent1qqsg8hvpx4qfregjzwdr9g36vmdkx492r30ft2ry0vwy7384lzup32qzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqz2e2xc &#34;Websites Are Tracking You Via Browser Fingerprinting&#34;<br/><br/><a href="https://engineering.tamu.edu/news/2025/06/websites-are-tracking-you-via-browser-fingerprinting.html">https://engineering.tamu.edu/news/2025/06/websites-are-tracking-you-via-browser-fingerprinting.html</a><br/><br/>You can have an idea about your case by using: <a href="https://www.amiunique.org/">https://www.amiunique.org/</a><br/><br/>#privacy #security 2025-06-19T11:28:22Z https://yabu.me/nevent1qqspqvfnkxflsh7576g3ft9dpzcfwrnrgvuq2acgsqr2st7kzt4w58gzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqr4rq6d &#34;Optimizing Django Docker Builds with Astral’s `uv`&#34;<br/><br/><a href="https://rob.cogit8.org/posts/optimizing-django-docker-builds-with-astrals-uv/">https://rob.cogit8.org/posts/optimizing-django-docker-builds-with-astrals-uv/</a><br/><br/>#python #uv #docker 2025-06-15T15:37:22Z https://yabu.me/nevent1qqsg02sescaujrzx3vwketa667rwez70t9u62p2nym28q0c7nuu2qcqzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqnpnkyt &#34;Mac Contacted 63 Different Apple Owned Domains in One Hour - While Not is Use&#34;<br/><br/><a href="https://appaddict.app/post/my-mac-contacted-63-different-apple-owned-domains-in-one-hour-while-not-is-use">https://appaddict.app/post/my-mac-contacted-63-different-apple-owned-domains-in-one-hour-while-not-is-use</a><br/><br/>A Pi-hole (or similar setup) is definitely a must in this day and age.<br/><br/>#tech #privacy #localsoftware 2025-06-12T15:59:39Z https://yabu.me/nevent1qqsyxhqqmeuxpgz3lhshvlz2n3vdc6z4887d0xdnd27tey6y5f4g60qzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqmfm49t &#34;Breaking down ‘EchoLeak’, the First Zero-Click AI Vulnerability Enabling Data Exfiltration from Microsoft 365 Copilot&#34;<br/><br/><a href="https://www.aim.security/lp/aim-labs-echoleak-blogpost">https://www.aim.security/lp/aim-labs-echoleak-blogpost</a><br/><br/>#security #cybersecurity #ai #infosec #microsoft #copilot 2025-06-12T09:28:30Z https://yabu.me/nevent1qqsyf0jnsf5hh7ewd027gf2mcapmdxt2u0q4un7fl9h9xfacckfh2aszyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsq224gzr &#34;CVE-2025-47934 – Spoofing OpenPGP.js signature verification&#34;<br/><br/><a href="https://codeanlabs.com/blog/research/cve-2025-47934-spoofing-openpgp-js-signatures/">https://codeanlabs.com/blog/research/cve-2025-47934-spoofing-openpgp-js-signatures/</a><br/><br/>#security #cybersecurity #infosec #openpgp #openpgpjs 2025-06-10T16:43:23Z https://yabu.me/nevent1qqsv7segkw56n99anjzuxlevk7jh6nty7nqg2597p2v5jslawnezjzqzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqa28rcu &#34;Disclosure: Covert Web-to-App Tracking via Localhost on Android&#34;<br/><br/>or <br/><br/>Meta and Yandex &#34;native Android apps receive browsers&#39; metadata, cookies and commands from the Meta Pixel and Yandex Metrica scripts embedded on thousands of web sites.&#34;<br/><br/><a href="https://localmess.github.io/">https://localmess.github.io/</a><br/><br/>#security #android #browsers #privacy 2025-06-03T16:52:33Z https://yabu.me/nevent1qqs8t05dhlr65qnhglva7rnkjjjhl3g7njr0a3rkrknvfltlqyclzmgzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqrxqwxn Django: Deferred constrain enforcement<br/><br/>Another Friday, another Django related post. I guess this blog is becoming a bit monothematic. I promise the next ones will bring the much-needed diversity of contents, but today let’s explore a very useful feature of the Django’s ORM. <br/><br/>Ok… Ok… it’s more of a feature of PostgreSQL that Django supports, and it isn’t available on the other database backend. But let’s dive in any way. […]<br/><br/><a href="https://blog.ovalerio.net/archives/3160">https://blog.ovalerio.net/archives/3160</a><br/><br/>#Django #djangofridaytips #postgresql #Python 2025-05-30T17:11:15Z https://yabu.me/nevent1qqs2m89qn24hxnrxlfcx8f0re6jy4qwtfmjjmetutjyfkxj3pr3vwpczyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsq8p3x52 <br/>&#34;Why are 2025/05/28 and 2025-05-28 different days in JavaScript?&#34;<br/><br/><a href="https://brandondong.github.io/blog/javascript_dates/">https://brandondong.github.io/blog/javascript_dates/</a><br/><br/>🤯<br/><br/>#javascript 2025-05-28T10:58:41Z https://yabu.me/nevent1qqsqmjscgn5srtr3p3l9jeeslu0scql8ax4wj6vpvh8q64r7dcgdmtqzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqxtcsfy &#34;Python: The Documentary&#34; [trailer]<br/><br/><a href="https://www.youtube.com/watch?v=pqBqdNIPrbo">https://www.youtube.com/watch?v=pqBqdNIPrbo</a><br/><br/>#python 2025-05-27T20:04:50Z https://yabu.me/nevent1qqszwtgyk94lsujvrdnhz5lumfg4ux7td7kc0866tqx0qy5cgd5n5uqzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqpgt6f5 &#34;Remote Prompt Injection in GitLab Duo Leads to Source Code Theft&#34;<br/><br/><a href="https://www.legitsecurity.com/blog/remote-prompt-injection-in-gitlab-duo">https://www.legitsecurity.com/blog/remote-prompt-injection-in-gitlab-duo</a><br/><br/>#security #ai #gitlab 2025-05-26T00:07:17Z https://yabu.me/nevent1qqsytmqxfg6p2nv4un90c58ahtmjakvrl2805a4sz908gtq8ef2m0rqzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsq622xq3 &#34;Loading Pydantic models from JSON without running out of memory&#34;<br/><br/><a href="https://pythonspeed.com/articles/pydantic-json-memory/">https://pythonspeed.com/articles/pydantic-json-memory/</a><br/><br/>#python #pydantic 2025-05-23T09:58:11Z https://yabu.me/nevent1qqszy4xu8earw5mdkw2qy0d7mxeg3dwk6c6qmd649eq8swz59xd85eczyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqm58u45 &#34;Django Security Best Practices: A Comprehensive Guide for Software Engineers&#34;<br/><br/><a href="https://corgea.com/Learn/django-security-best-practices-a-comprehensive-guid-for-software-engineers">https://corgea.com/Learn/django-security-best-practices-a-comprehensive-guid-for-software-engineers</a><br/><br/>#python #django #security 2025-05-21T09:28:05Z https://yabu.me/nevent1qqs2yqvuehgqcmjsnw6kkhd5mn0vclgr9rhjmaknc3zs63lpj28lu5qzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqp53kzu &#34;The 18-point secrets management checklist&#34;<br/><br/><a href="https://www.hashicorp.com/en/blog/the-18-point-secrets-management-checklist">https://www.hashicorp.com/en/blog/the-18-point-secrets-management-checklist</a><br/><br/>#security #cybersecurity #secrets #secretmanagement 2025-05-20T17:50:16Z https://yabu.me/nevent1qqszcaq7x6n5x89ghwh2ns8tvcsp76sdytglcsfekqyv8qs4le2qteszyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqd4merq &#34;Security Vulnerabilities fixed in Firefox 138.0.4&#34;<br/><br/><a href="https://www.mozilla.org/en-US/security/advisories/mfsa2025-36/">https://www.mozilla.org/en-US/security/advisories/mfsa2025-36/</a><br/><br/>* CVE-2025-4920: Out-of-bounds access when resolving Promise objects<br/>* CVE-2025-4921: Out-of-bounds access when optimizing linear sums<br/><br/>#firefox #security 2025-05-18T15:55:23Z https://yabu.me/nevent1qqs8unp2zmtrruumdj4swga4pwkv49hpgjqt5skjmfnxr3wc3s5mktqzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqty6hy7 &#34;The cryptography behind passkeys&#34;<br/><br/><a href="https://blog.trailofbits.com/2025/05/14/the-cryptography-behind-passkeys/">https://blog.trailofbits.com/2025/05/14/the-cryptography-behind-passkeys/</a><br/><br/>#authentication #security #passkeys 2025-05-16T09:17:02Z https://yabu.me/nevent1qqsqw3jhhvul3yevzkcuq8qfpk4ueptmqq3ewd59hlkew8fpvkm9cmgzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqhqfc2f Node.js Security Release<br/><br/><a href="https://nodejs.org/en/blog/vulnerability/may-2025-security-releases">https://nodejs.org/en/blog/vulnerability/may-2025-security-releases</a><br/><br/>* Improper error handling in async cryptographic operations crashes process<br/>* Improper HTTP header block termination in llhttp <br/>* Corrupted pointer in node::fs::ReadFileUtf8(const FunctionCallbackInfo&lt;Value&gt;&amp; args) when args[0] is a string.<br/><br/>#nodejs #security 2025-05-15T10:06:20Z https://yabu.me/nevent1qqsxx2fx3tr8jnd9ud07vlww83xux95e0w25p29vw4zdpppn9w4s57qzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsq4r2wvm &#34;Passkeys for Normal People&#34;<br/><br/><a href="https://www.troyhunt.com/passkeys-for-normal-people/">https://www.troyhunt.com/passkeys-for-normal-people/</a><br/><br/>#authentication #passkeys #webauthn #mfa #security 2025-05-13T14:02:12Z https://yabu.me/nevent1qqszjnva4rnwy9ugqd3u2kg0rus5gpmyd40fmm6qz8v6lgrl9jyva0czyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqqshj48 &#34;Tech &amp; Non-Tech Stacks to Run Listen Notes (2025)&#34;<br/><br/><a href="https://www.listennotes.com/blog/tech-non-tech-stacks-to-run-listen-notes-2025-113/">https://www.listennotes.com/blog/tech-non-tech-stacks-to-run-listen-notes-2025-113/</a><br/><br/>#techstack #startups 2025-05-11T18:09:56Z https://yabu.me/nevent1qqsv9azg96fh4ystq6xszs0as5f4vvqj476s6qcl4c8hjsms7xcnmmgzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqrd3dmx &#34;How to Harden GitHub Actions: The Unofficial Guide&#34;<br/><br/><a href="https://www.wiz.io/blog/github-actions-security-guide">https://www.wiz.io/blog/github-actions-security-guide</a><br/><br/>#security #supplychain #github #githubactions 2025-05-09T14:13:46Z https://yabu.me/nevent1qqsf4m7gcldve8swfpezgl7qd0f0n37agfrq6mdfl97u5sv2n2qqyzczyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqydu4pa &#34;The Beauty Of Having A Pi-hole&#34;<br/><br/><a href="https://den.dev/blog/pihole/">https://den.dev/blog/pihole/</a><br/><br/>#ads #privacy #dns #tracking #web #iot 2025-05-05T19:45:44Z https://yabu.me/nevent1qqs0zhtr36na697cmy76rg8gszxu8mwxv9yc4rvua7ckrm3zfhwrplczyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqpjxx3h &#34;Insecure credential storage plagues MCP&#34;<br/><br/><a href="https://blog.trailofbits.com/2025/04/30/insecure-credential-storage-plagues-mcp/">https://blog.trailofbits.com/2025/04/30/insecure-credential-storage-plagues-mcp/</a><br/><br/>#security #ai #mcp #cybersecurity 2025-05-05T13:05:25Z https://yabu.me/nevent1qqs8fu64yvsrls8jmdnfdcu90fsk2hh9auy9ktekhf0vetpn3h4h4sgzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqqxvsfd &#34;I use Zip Bombs to Protect my Server&#34;<br/><br/><a href="https://idiallo.com/blog/zipbomb-protection">https://idiallo.com/blog/zipbomb-protection</a><br/><br/>#security #spam #bots 2025-05-01T17:11:29Z https://yabu.me/nevent1qqswtemxc26h8mlrtl8xnx3ml7fqkgf7juwtahagu6g8ctyycpyentczyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqemz6ws &#34;Cross-Site WebSocket Hijacking Exploitation in 2025&#34;<br/><br/><a href="https://blog.includesecurity.com/2025/04/cross-site-websocket-hijacking-exploitation-in-2025/">https://blog.includesecurity.com/2025/04/cross-site-websocket-hijacking-exploitation-in-2025/</a><br/><br/>I remember, a few years ago, finding this kind of issue in a project, that I ended up working on.<br/><br/>#security #websec #web #webdev 2025-05-01T15:36:39Z https://yabu.me/nevent1qqs9pv7plkkgwv88ks0f3799gppayjp68fdct4a6qd4vvv8ca7aqtrqzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqmac28n &#34;Principles for coding securely with LLMs&#34;<br/><br/><a href="https://www.seangoedecke.com/ai-security/">https://www.seangoedecke.com/ai-security/</a><br/><br/>#security #cybersecurity #ai #llm 2025-04-29T19:20:39Z https://yabu.me/nevent1qqs2mpg75uql0ztpl7zkn7fpydzfqhrtequhwfhuv7y985ydq2nrp4czyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqfzdc6t &#34;SSL.com: DCV bypass and issue fake certificates for any MX hostname&#34;<br/><br/><a href="https://bugzilla.mozilla.org/show_bug.cgi?id=1961406">https://bugzilla.mozilla.org/show_bug.cgi?id=1961406</a><br/><br/>ooouuchhh<br/><br/>#security #ssl #tls #ca #cybersecurity #infosec 2025-04-20T09:43:10Z https://yabu.me/nevent1qqsdde50229anaq7jh256akk2klcdqhccsyhswchs3gn7at96syayhgzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqwlpm6j &#34;European Union Vulnerability Database (EUVD)&#34;<br/><br/><a href="https://euvd.enisa.europa.eu/">https://euvd.enisa.europa.eu/</a><br/><br/>🤔<br/><br/>#security #cybersecurity 2025-04-16T13:49:43Z https://yabu.me/nevent1qqswxfke2253eyfd9x597wqaq9g22uuup2f8z9j86nj4uauzdxm59kgzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsq6c652n &#34;Model Context Protocol has prompt injection security problems&#34;<br/><br/><a href="https://simonwillison.net/2025/Apr/9/mcp-prompt-injection/#atom-everything">https://simonwillison.net/2025/Apr/9/mcp-prompt-injection/#atom-everything</a><br/><br/>#mcp #security #cybersecurity #llm #ai<br/> 2025-04-10T09:53:18Z https://yabu.me/nevent1qqswwkn2s77uxv6r24dzu8n2rrllz64p5jg7sg3kualhh7spyue5zhgzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqzr523w &#34;Less htmx is More&#34;<br/><br/><a href="https://unplannedobsolescence.com/blog/less-htmx-is-more/">https://unplannedobsolescence.com/blog/less-htmx-is-more/</a><br/><br/>#html #htmx #webdev #http 2025-04-08T15:58:09Z https://yabu.me/nevent1qqsg4pkwyg9wq3weknkfsqghz0rlwsdt8gxwfsxlfujhay0hm0e6xdszyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqurdkww &#34;CodeQLEAKED – Public Secrets Exposure Leads to Supply Chain Attack on GitHub CodeQL&#34;<br/><br/><a href="https://www.praetorian.com/blog/codeqleaked-public-secrets-exposure-leads-to-supply-chain-attack-on-github-codeql/">https://www.praetorian.com/blog/codeqleaked-public-secrets-exposure-leads-to-supply-chain-attack-on-github-codeql/</a><br/><br/>#github #githubactions #supplychain #security #cicd 2025-04-04T09:50:44Z https://yabu.me/nevent1qqst4ha8wrnth3rgh85nfxzgjdtxknrzlgpkec86vrvkhvyluhxyvzqzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqjqm0aa &#34;The EU Open Source Solutions Catalogue is now live&#34;<br/><br/><a href="https://interoperable-europe.ec.europa.eu/interoperable-europe/news/eu-open-source-solutions-catalogue-now-live">https://interoperable-europe.ec.europa.eu/interoperable-europe/news/eu-open-source-solutions-catalogue-now-live</a><br/><br/>&#34;The EU OSS Catalogue currently hosts over 640 solutions, encompassing both complete solutions and individual building blocks to be used while building your own solution.&#34;<br/><br/>&#34;Designed primarily for public administrations across the EU, the catalogue provides access to reusable solutions across more than 30 key areas relevant to public sector needs.&#34;<br/><br/>👏<br/><br/>#eu #opensource #publiccode 2025-03-31T14:28:52Z https://yabu.me/nevent1qqsylu77yc0ku84cd3kj8prnss3atm77ycmy9y58kduem7t382c8hsszyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqwvc77d &#34;How to report a security issue in an open source project&#34;<br/><br/><a href="https://jacobian.org/2025/mar/27/reporting-security-issues-in-oss/">https://jacobian.org/2025/mar/27/reporting-security-issues-in-oss/</a><br/><br/>#security #cybersecurity #opensource 2025-03-29T22:35:14Z https://yabu.me/nevent1qqs8xd5knu2yeu0xja8msgmn9lgp445r8arfl027emdhtukl4xz6vdgzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsq4z6lz0 &#34;REST in Peace? Django&#39;s Framework Problem&#34;<br/><br/><a href="https://danlamanna.com/posts/rest-in-peace-djangos-framework-problem/">https://danlamanna.com/posts/rest-in-peace-djangos-framework-problem/</a><br/><br/>#django #djangorestframework 2025-03-29T11:14:10Z https://yabu.me/nevent1qqsv7untr5g34fjaf4599fr43fv87secnnwqtwdysa2uh4ujgjmeqtczyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsq79606q &#34;Share Python Scripts Like a Pro: uv and PEP 723 for Easy Deployment&#34;<br/><br/><a href="https://thisdavej.com/share-python-scripts-like-a-pro-uv-and-pep-723-for-easy-deployment/">https://thisdavej.com/share-python-scripts-like-a-pro-uv-and-pep-723-for-easy-deployment/</a><br/><br/>#python #uv 2025-03-28T11:35:15Z https://yabu.me/nevent1qqs8cces5n5knra2p02kazw8gk6z0p7c6xu726fgslxy0kxg2qjwx6szyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsquj2qdy &#34;Whose code am I running in GitHub Actions?&#34;<br/><br/><a href="https://alexwlchan.net/2025/github-actions-audit/">https://alexwlchan.net/2025/github-actions-audit/</a><br/><br/>#security #supplychain #cicd #githubactions 2025-03-27T13:43:24Z https://yabu.me/nevent1qqspjrjvwz88ugcshq9gcsvtftqga6365xhdg2ytfvrwr2hryxpa5ygzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqldd4yd &#34;IngressNightmare: 9.8 Critical Unauthenticated Remote Code Execution Vulnerabilities in Ingress NGINX&#34;<br/><br/><a href="https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities">https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities</a><br/><br/>#security #cybersecurity #kubernetes #nginx 2025-03-25T17:50:46Z https://yabu.me/nevent1qqsq8e8lqa96xyk3eu9k4tq45wgx5tgvg3806qsw780nhgyqeuqedsqzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqlfc005 &#34;Next.js Middleware Exploit: Deep Dive into CVE-2025-29927 Authorization Bypass&#34;<br/><br/><a href="https://zeropath.com/blog/nextjs-middleware-cve-2025-29927-auth-bypass">https://zeropath.com/blog/nextjs-middleware-cve-2025-29927-auth-bypass</a><br/><br/>#security #cybersecurity #nextjs #webdev 2025-03-23T14:51:49Z https://yabu.me/nevent1qqsqv6eg2h0xqa80yndclsrxpnj27ypluh9jc66wa0yfmusakqqyv5gzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqzggm76 In reply to <a href='/nevent1qqsqladcqk5dz55ryumrnqpl3eggk4vddrncphhl5rvl4qecg7fhmxspremhxue69uhkvet9v3ejumn0wd68ytnzv9hxgtmvv9hxwtm9dcsc3lqk'>nevent1q…3lqk</a><br/>_________________________<br/><br/>I guess updating your mobile browser would suffice (at least according to the article) 2025-03-21T18:51:35Z https://yabu.me/nevent1qqsty8g93llapzwepmuzcv0hn09stdmayqycdmdxn39y4ml0ewzlpngzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqnmsug4 &#34;CVE-2024-9956 - PassKey Account Takeover in All Mobile Browsers&#34;<br/><br/><a href="https://mastersplinter.work/research/passkey/">https://mastersplinter.work/research/passkey/</a><br/><br/>#security #authentication #passkeys 2025-03-20T13:57:39Z https://yabu.me/nevent1qqstw7el4j4wyqpjpqlqd5mknummq0j73nq5qhs8jql7and3v66657gzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqvgg4kd &#34;Apache Tomcat Vulnerability Actively Exploited Just 30 Hours After Public Disclosure&#34;<br/><br/><a href="https://thehackernews.com/2025/03/apache-tomcat-vulnerability-comes-under.html">https://thehackernews.com/2025/03/apache-tomcat-vulnerability-comes-under.html</a><br/><br/>#java #tomcat #security #cybersecurity #netsec 2025-03-19T11:38:44Z https://yabu.me/nevent1qqs2rcgf0wn4spmulcc2khw967l9m5ygmrf2xj69ehsz7emeejf5t6qzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqfl0m99 &#34;Password reuse is rampant: nearly half of observed user logins are compromised&#34;<br/><br/><a href="https://blog.cloudflare.com/password-reuse-rampant-half-user-logins-compromised/">https://blog.cloudflare.com/password-reuse-rampant-half-user-logins-compromised/</a><br/><br/>#security #cybersecurity #passwords #authentication 2025-03-18T13:08:25Z https://yabu.me/nevent1qqsppnzrlgkemyhr5sflxhyvd0l0r0la832we2kcrrtrhr0hzwngw4czyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqegeg9s GitHub action &#34;tj-actions/changed-files&#34; is compromised<br/><br/><a href="https://www.stepsecurity.io/blog/harden-runner-detection-tj-actions-changed-files-action-is-compromised">https://www.stepsecurity.io/blog/harden-runner-detection-tj-actions-changed-files-action-is-compromised</a><br/><br/>#security #cybersecurity #githubactions #github #cicd<br/> 2025-03-15T10:42:16Z https://yabu.me/nevent1qqspv30a4axnulud76y503j9qv8m2l067ag5w7cgs5hp403zdkatpjqzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsq94t6pz &#34;Everything you say to your Echo will be sent to Amazon starting on March 28&#34;<br/><br/><a href="https://arstechnica.com/gadgets/2025/03/everything-you-say-to-your-echo-will-be-sent-to-amazon-starting-on-march-28/">https://arstechnica.com/gadgets/2025/03/everything-you-say-to-your-echo-will-be-sent-to-amazon-starting-on-march-28/</a><br/><br/>Ouch. The best place for these listening devices is in the garbage.<br/><br/>#amazon #alexa #echo #privacy 2025-03-14T23:03:40Z https://yabu.me/nevent1qqswm93hg6n0gls3nvpvcag620tx8pz3nvxu0pakmk34fflm8e9dufczyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqexx0zu &#34;Django security releases issued: 5.1.7, 5.0.13 and 4.2.20&#34;<br/><br/><a href="https://www.djangoproject.com/weblog/2025/mar/06/security-releases/">https://www.djangoproject.com/weblog/2025/mar/06/security-releases/</a><br/><br/>#security #django #python 2025-03-06T17:31:59Z https://yabu.me/nevent1qqszvnpgkay44udhuks8kfxrs7urdpsve7egre4l5x4lvzahvx7443qzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqst3kza Status of old PyPI projects: archived<br/><br/>Since late January, the python package index (PyPI) supports archiving projects/packages. This is, in fact, a very welcome feature, since it clearly tells without any doubt when a package is no longer maintained and will not receive any further updates. <br/><br/>It makes it easier for the person looking for packages, to know which ones deserve a closer inspection and which ones are there abandoned, […]<br/><br/><a href="https://blog.ovalerio.net/archives/3112">https://blog.ovalerio.net/archives/3112</a><br/><br/>#pypi #Python 2025-03-05T21:08:22Z https://yabu.me/nevent1qqs26nrxveuvcj34zw3c7a545dyn60z0q6kmj2mcn4xtl9qy63ryhxszyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsq02d2xd &#34;Advanced Nginx Hardening&#34;<br/><br/><a href="https://medium.com/@js_9757/advanced-nginx-hardening-15bf96058327">https://medium.com/@js_9757/advanced-nginx-hardening-15bf96058327</a><br/><br/>#nginx 2025-03-03T21:02:24Z https://yabu.me/nevent1qqsz0tch6dj2xtt2hsxflxfdpn09cda3pwjxv2z3zxhxsedkh02fy9gzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqyp3h6u &#34;form-action Content-Security-Policy Bypass And Other Tactics For Dealing With The CSP&#34;<br/><br/><a href="https://nzt-48.org/form-action-content-security-policy-bypass-and-other-tactics-for-dealing-with-the-csp">https://nzt-48.org/form-action-content-security-policy-bypass-and-other-tactics-for-dealing-with-the-csp</a><br/><br/>#security #cybersecurity #browsers #web #csp 2025-03-02T19:26:29Z https://yabu.me/nevent1qqsrrfew39j38dw6823qrlksymrwxgn00ulc69c7zufy0eehg93vdqszyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsq9wq7mt &#34;git checkout -&#34;<br/><br/><a href="https://mathspp.com/blog/til/git-checkout">https://mathspp.com/blog/til/git-checkout</a><br/><br/>#git 2025-03-01T09:21:22Z https://yabu.me/nevent1qqswx7d63lyv4h2s2rpv3dptp77m2uxh7zgmmpg2xrj20cardrsmwsszyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsq078ac2 &#34;Microsoft begins turning off uBlock Origin and other extensions in Edge&#34;<br/><br/><a href="https://www.neowin.net/news/microsoft-begins-turning-off-ublock-origin-and-other-extensions-in-edge/">https://www.neowin.net/news/microsoft-begins-turning-off-ublock-origin-and-other-extensions-in-edge/</a><br/><br/>👎… Use Firefox (or a reputable and actively maintained fork).<br/><br/>#pricavy #ads #web #ublockorigin 2025-02-28T10:15:17Z https://yabu.me/nevent1qqs8aptss66rxrc6vrwzch2srchg6rr4qdhx9pedmp5hj88heavhhhgzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqvdqfcp &#34;It is no longer safe to move our governments and societies to US clouds&#34;<br/><br/><a href="https://berthub.eu/articles/posts/you-can-no-longer-base-your-government-and-society-on-us-clouds/">https://berthub.eu/articles/posts/you-can-no-longer-base-your-government-and-society-on-us-clouds/</a><br/><br/>Guess what? It never was!<br/><br/>#security #cybersecuriy #digitalsoverenity 2025-02-23T17:29:18Z https://yabu.me/nevent1qqs2cns9xdhj9h9ex0p5jyzcacvlvluvj6tr8t4rxdhg6sg8kqprhuczyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqxdqlw5 “A year of uv: pros, cons, and should you migrate”<br/><br/><a href="https://www.bitecode.dev/p/a-year-of-uv-pros-cons-and-should">https://www.bitecode.dev/p/a-year-of-uv-pros-cons-and-should</a><br/><br/>I&#39;ve also been using uv lately, I agree it is a pleasure to use. I still have many projects and other setups that rely on “pyenv”, “pipx”, “poetry”, “pip-tools”, etc. <br/><br/>I was comfortable with my setup, and it served my purposes well, but I&#39;ve to admit that uv is very appealing.<br/><br/>Nevertheless, it will take time to migrate them all (if I decide to go in that direction).<br/><br/>#python #uv #pip 2025-02-19T19:12:52Z https://yabu.me/nevent1qqsya7n4c38fhjtrflhj27xfkq6z6x4mn2lv38a6wshup082rn7ek9czyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsq8m4j0a &#34;Attacks on Maven proxy repositories&#34;<br/><br/><a href="https://github.blog/security/vulnerability-research/attacks-on-maven-proxy-repositories/">https://github.blog/security/vulnerability-research/attacks-on-maven-proxy-repositories/</a><br/><br/>#security #cybersecurity #supplychain #java #maven 2025-02-19T15:01:34Z https://yabu.me/nevent1qqs8ss6p482jpmte479knka2cqajcwjaa42q7vaphcjzdnx4g4xt2tqzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqwccjpp &#34;No, Privacy is Not Dead: Beware the All-or-Nothing Mindset&#34;<br/><br/><a href="https://www.privacyguides.org/articles/2025/02/17/privacy-is-not-dead/">https://www.privacyguides.org/articles/2025/02/17/privacy-is-not-dead/</a><br/><br/>#security #privacy 2025-02-18T11:24:10Z https://yabu.me/nevent1qqszf005suqfja7nn30s8q2qlsnpdzzhcw95pj85a0sjx3d3gu0kkyszyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqr7kf3e &#34;Common OAuth Vulnerabilities&#34;<br/><br/><a href="https://blog.doyensec.com/2025/01/30/oauth-common-vulnerabilities.html">https://blog.doyensec.com/2025/01/30/oauth-common-vulnerabilities.html</a><br/><br/>#security #cybersecurity #auth #oauth 2025-02-14T17:28:54Z https://yabu.me/nevent1qqswh9qttrew7p29edunm0qrdv9m76xzm97fq4aam7gef52gu26s3pczyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqerx0u4 &#34;Nearly a Year Later, Mozilla is Still Promoting OneRep&#34;<br/><br/><a href="https://krebsonsecurity.com/2025/02/nearly-a-year-later-mozilla-is-still-promoting-onerep/">https://krebsonsecurity.com/2025/02/nearly-a-year-later-mozilla-is-still-promoting-onerep/</a><br/><br/>#mozilla #privacy #mozillamonitor 2025-02-14T10:06:21Z https://yabu.me/nevent1qqsw9fw9yv7stlzrd74nqq9fkntux9esud9j8pw6e3kyzv7lfmkvcsszyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsq7ans4x &#34;Leaking the email of any YouTube user for $10,000&#34;<br/><br/><a href="https://brutecat.com/articles/leaking-youtube-emails">https://brutecat.com/articles/leaking-youtube-emails</a><br/><br/>#security #cybersecurity #google 2025-02-12T12:50:26Z https://yabu.me/nevent1qqsrfx4ntd00gw6qzurvyk20hel3dlv7ucfkz4axq82zcy6z48553qczyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqe090ml &#34;Go Supply Chain Attack: Malicious Package Exploits Go Module Proxy Caching for Persistence&#34;<br/><br/><a href="https://socket.dev/blog/malicious-package-exploits-go-module-proxy-caching-for-persistence">https://socket.dev/blog/malicious-package-exploits-go-module-proxy-caching-for-persistence</a><br/><br/>#security #cybersecurity #go #supplychain 2025-02-06T10:35:12Z https://yabu.me/nevent1qqszvv9yjt57ujez9yhm2tg46jlh2m55x8nlf928uwc5c9nsv25pmrszyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqpay0wj &#34;The surprising way to save memory with BytesIO&#34;<br/><br/><a href="https://pythonspeed.com/articles/bytesio-reduce-memory-usage/">https://pythonspeed.com/articles/bytesio-reduce-memory-usage/</a><br/><br/>#python 2025-02-02T21:15:58Z https://yabu.me/nevent1qqsz2xew3jhva0yvwezpxhu0hvw829fanwh4sydzqj4l32urz59fneczyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqapezua &#34;Avoid ISP routers&#34;<br/><br/><a href="https://routersecurity.org/ISProuters.php">https://routersecurity.org/ISProuters.php</a><br/><br/>#security #netsec 2025-02-02T11:53:05Z https://yabu.me/nevent1qqsgevhex7hvnxpual6p6tpsleusvafpfwmk2jvdywdlx7epqewsn0gzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsq9g0wgg &#34;Faster pip installs: caching, bytecode compilation, and uv&#34;<br/><br/><a href="https://pythonspeed.com/articles/faster-pip-installs/">https://pythonspeed.com/articles/faster-pip-installs/</a><br/><br/>#python #pip #uv #ci 2025-01-25T11:06:04Z https://yabu.me/nevent1qqsv83kn549lgfadj35a502s842a4nxxs92222ptdpv8kdpemeqzgfszyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsq9tmw54 &#34;The thing that&#39;s crazy is that if I followed the 2 &#34;best practices&#34; of verifying the phone number + getting them to send an email to you from a legit domain, I would have been compromised.&#34;<br/><br/><a href="https://gist.github.com/zachlatta/f86317493654b550c689dc6509973aa4">https://gist.github.com/zachlatta/f86317493654b550c689dc6509973aa4</a><br/><br/>Wow, this phishing attempt was elaborate indeed.<br/><br/>#security #google #socialengineering #phishing 2025-01-24T11:59:40Z https://yabu.me/nevent1qqswm4nenv7rk7hetvalgk5v75579eu0jgmsgwhwruq0m8u8n38gx2czyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqxqchx6 New node.js security release<br/><br/><a href="https://nodejs.org/en/blog/vulnerability/january-2025-security-releases">https://nodejs.org/en/blog/vulnerability/january-2025-security-releases</a><br/><br/>- Worker permission bypass via InternalWorker leak in diagnostics (CVE-2025-23083) - (high)<br/>- Path traversal by drive name in Windows environment (CVE-2025-23084) - (medium)<br/>- GOAWAY HTTP/2 frames cause memory leak outside heap (CVE-2025-23085) - (medium)<br/><br/>#security #nodejs 2025-01-21T21:17:08Z https://yabu.me/nevent1qqs8u0e9deh9krxktjgu43ap4797h7rcdkw3jpluczlp8vd7net38ygzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqktglha &#34;Catching memory leaks with your test suite&#34;<br/><br/><a href="https://pythonspeed.com/articles/identifying-resource-leaks-with-pytest/">https://pythonspeed.com/articles/identifying-resource-leaks-with-pytest/</a><br/><br/>#programming #softwaredevelopment #python #pytest 2025-01-21T13:45:11Z https://yabu.me/nevent1qqsg68ex3lswly4v5c39rp6yu93ta4ysz3vshq9uhpvanvxzvg49hrgzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqtq9kwq &#34;Millions of Accounts Vulnerable due to Google’s OAuth Flaw&#34;<br/><br/><a href="https://trufflesecurity.com/blog/millions-at-risk-due-to-google-s-oauth-flaw">https://trufflesecurity.com/blog/millions-at-risk-due-to-google-s-oauth-flaw</a><br/><br/>I wonder if any other OAuth providers have similar issues and how they solve it.<br/><br/>#security #cybersecurity #infosec #oauth #googe 2025-01-17T16:12:43Z https://yabu.me/nevent1qqsdya7cxzx6p85yzc5evx25ljgx8u8q33mzqpdtmka03fgfk9crfqqzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqws5dfp &#34;Don’t Use Session (Signal Fork)&#34;<br/><br/><a href="https://soatok.blog/2025/01/14/dont-use-session-signal-fork/">https://soatok.blog/2025/01/14/dont-use-session-signal-fork/</a><br/><br/>#security #infosec #signal #session #cybersecurity 2025-01-16T09:35:21Z https://yabu.me/nevent1qqspyc9p8xx4j0xmujkmqr4fusax7r53u3ak2y3xmspuc0z5h754degzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqfdvn64 &#34;Two independent groups of researchers have identified a total of 6<br/>vulnerabilities in rsync. In the most severe CVE, an attacker only requires<br/>anonymous read access to a rsync server, such as a public mirror, to<br/>execute arbitrary code on the machine the server is running on.&#34;<br/><br/><a href="https://seclists.org/oss-sec/2025/q1/16">https://seclists.org/oss-sec/2025/q1/16</a><br/><br/>#security #cybersecurity #rsync 2025-01-15T11:00:29Z https://yabu.me/nevent1qqsre0lsn5ddsflpu9txzmkueu0swd0z9ae9wwzqa2lfq4c7ntxghfgzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqxk7m72 &#34;Django security releases issued: 5.1.5, 5.0.11, and 4.2.18&#34;<br/><br/><a href="https://www.djangoproject.com/weblog/2025/jan/14/security-releases/">https://www.djangoproject.com/weblog/2025/jan/14/security-releases/</a><br/><br/>* CVE-2024-56374: Potential denial-of-service vulnerability in IPv6 validation<br/><br/>#security #django 2025-01-14T16:44:05Z https://yabu.me/nevent1qqswhmtyflj93s5js7qnhcn8ac56k8a32gnvud7jn4asw32m662f2gszyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqyar00j &#34;Container capabilities: a short tour&#34;<br/><br/><a href="https://padlock.argh.in/2024/12/15/container-capabilities.html">https://padlock.argh.in/2024/12/15/container-capabilities.html</a><br/><br/>#security #containers #docker 2025-01-14T10:11:04Z https://yabu.me/nevent1qqs98nc0mdt78efr70djl6ulv2mcps4ndxtrlxpug0qpvguq7j5fgrczyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqfcd6rn &#34;Database optimization isn&#39;t always obvious&#34;<br/><br/><a href="https://kenwhitesell.github.io/2025/01/01/Database-optimization-is-not-alway-obvious.html">https://kenwhitesell.github.io/2025/01/01/Database-optimization-is-not-alway-obvious.html</a><br/><br/>#sql #databases 2025-01-09T20:49:10Z https://yabu.me/nevent1qqspxsaaagem4yu75jftc2p0l69n7asyd6pjlvfr4zw9ud6apxhxdeqzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsq5yxhqc &#34;Effective Python Developer Tooling in December 2024&#34;<br/><br/><a href="https://pydevtools.com/blog/effective-python-developer-tooling-in-december-2024/">https://pydevtools.com/blog/effective-python-developer-tooling-in-december-2024/</a><br/><br/>#python #programming #softwaredevelopment 2025-01-09T20:31:36Z https://yabu.me/nevent1qqsvwfapjyqk0er7u8rltrng33tl39tzvesx097m4kmv94qr0g4k4kczyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsq8qe4ug &#34;Getting Started Contributing to Django&#34;<br/><br/><a href="https://www.better-simple.com/django/2024/12/25/getting-started-contributing-django/">https://www.better-simple.com/django/2024/12/25/getting-started-contributing-django/</a><br/><br/>#python #django 2025-01-08T18:09:21Z https://yabu.me/nevent1qqs23ka3g7l7jl8gea8rnuc6et7jw4uyrlz7zt77h2s02h9eyacmznczyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqa80c7k &#34;Hat Trick: AWS introduced same RCE vulnerability three times in four years&#34;<br/><br/><a href="https://giraffesecurity.dev/posts/amazon-hat-trick/">https://giraffesecurity.dev/posts/amazon-hat-trick/</a><br/><br/>#security #cybersecurity #aws #supplychain 2025-01-04T14:24:27Z https://yabu.me/nevent1qqs9dw9gzul3c3wtq4jkpt0rjnmupuu450ytzrws4j57tshnldsqpggzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqgefsuu Passkey technology is elegant, but it’s most definitely not usable security<br/><br/><a href="https://arstechnica.com/security/2024/12/passkey-technology-is-elegant-but-its-most-definitely-not-usable-security/">https://arstechnica.com/security/2024/12/passkey-technology-is-elegant-but-its-most-definitely-not-usable-security/</a><br/><br/>Yet<br/><br/>#passwors #passkeys #webauthn #authentication 2024-12-31T00:12:09Z https://yabu.me/nevent1qqspnwwn5de28skqfp0mkxutsdltw9vw7e79cvg7y3g5h9r5adjl3dgzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqj7dqy6 &#34;A Tour of WebAuthn&#34;<br/><br/>HTML version of the book<br/><br/><a href="https://www.imperialviolet.org/tourofwebauthn/tourofwebauthn.html">https://www.imperialviolet.org/tourofwebauthn/tourofwebauthn.html</a><br/><br/>#webauthn #passkeys #authentication #2FA #security #cybersecurity 2024-12-28T12:13:25Z https://yabu.me/nevent1qqsd5rp6y2q8fyh8a60d53czlev8lv0s35ms64pcf93e6kz78wdwp0gzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqcn4m4m &#34;Small teams&#34;<br/><br/><a href="https://www.proofofconcept.pub/p/small-teams">https://www.proofofconcept.pub/p/small-teams</a> 2024-12-27T16:16:12Z