🧮 USERS:1 FEEDS:2 TWTS:1356 ARCHIVED:87389 CACHE:2690 FOLLOWERS:22 FOLLOWING:14
Apple Store in the Netherlands Temporarily Closing Starting Next Month
Apple has announced that its Den Haag store in the Netherlands will be temporarily closed for renovations starting this Sunday, June 1.
The store is located in The Hague, the capital city of the South Holland province.
First opened in 2014, Apple De Haag is one of the company’s flagship stores, located … ⌘ Read more
‘Mar-a-Lago face’ now the most in-demand plastic surgery — doctor reveals who everyone is requesting to look like
Adriana Diaz, Reporter - New York Post
Stephan: This is a trend, and it is one of the sickest, weirdest in American history.
Credit: GettyPoliticians are leading more than the government — they … ⌘ Read more
GitHub Recon: The Underrated Technique to Discover High-Impact Leaks in Bug Bounty
Master the Art of Finding API Keys, Credentials and Sensitive Data in Public Repositories
[Continue re … ⌘ Read more
nginx 中配置端口轉發 TCP-UDP 流量
ngxstreamcoremodule 模塊從 1.9.0 版本開始出現,默認不包含此模塊,需要通過–with-stream配置。這個模塊可用於 TCP/UDP 流量轉發,和實現負載均衡,配置示例:workerprocesses 1;events { workerconnections 1024;}stream {代理SSH連接 server { listen 10022; ⌘ Read more
10 Quirky, but Necessary, Food Safety Rules of the Past
Long before “hand sanitizer” became a household staple or single-use packaging sparked environmental debates, a series of surprisingly odd—and occasionally ingenious—food-safety laws quietly reshaped what ended up on our plates (and in our hands). From Victorian London’s shared ice-cream glasses that contributed to typhoid outbreaks to postwar Japan’s precision-sealed juice jars, each bizarre reform emerged […]
The post [1 … ⌘ Read more
**Uncovering Amazon S3 Bucket Vulnerabilities: A Comprehensive Guide for Ethical Hackers **
How to Identify, Exploit, and Secure S3 Bucket Misconfigurations
[Continue reading on InfoSec Wr … ⌘ Read more
Logic Flaw: Deleting HackerOne Team Reports Without Access Rights
How a GraphQL Mutation Allowed Unauthorized Report Deletion Across Teams
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/logic-flaw … ⌘ Read more
This One Hacker Trick Got Me Access to an Admin Dashboard ️
Sometimes, it’s not about brute force. It’s about finesse. One header. One oversight. One open door.
— A Hacker’s Mindset 🧠
[Continue reading on InfoSec … ⌘ Read more
Cracking JWTs: A Bug Bounty Hunting Guide [Part 1] ⌘ Read more
Walkthrough — Assessment Methodologies: Information Gathering CTF 1 ⌘ Read more
**Unsafe Redirects = Unlimited Ride: How Open Redirect Led Me to Internal Dashboards **
Hey there!😁
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/unsafe-redirects-unlimi … ⌘ Read more
I Tried 10 Recon Tools for 7 Days — Here’s What Actually Found Bugs
Free Article Link
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/i-tried-10-recon-tools-for-7-days-heres-what-actually-found-bug … ⌘ Read more
🧮 USERS:1 FEEDS:2 TWTS:1355 ARCHIVED:87386 CACHE:2688 FOLLOWERS:22 FOLLOWING:14
Em reacção à enorme quantidade de votos nulos nestas eleições nos votos por correspondência (outra vez) porque os eleitores não entendem o processo de votação, aparece um delegado a dizer “é por isso que o voto eletrónico é urgente!”
Ora, eu fico que é precisamente prova do contrário:
- então o estado ainda não conseguiu implementar o voto por correspondência de forma funcional, e achamos que vai conseguir implementar um sistema de votação que tem um grau de complexidade de uma ofdem altamente superior?
- os eleitores não percebem como funciona o sistema de voto por correspondência, e vão entender o desenho de um sistema de voto eletrónico?
The album is released next sunday, but why wait?
You can already listen to the full new #kokori album - a split with Floating Ashes - either by streaming or download (with a pay as you want - including nothing - option). So… Enjoy!
And relember, if you want a physical edition on #CD, you can leave a comment down there and I’ll get you one for 10€, shipping included.
https://anti-demos-cracia.bandcamp.com/album/idiossincrasias-vol-1
MYIR Launches Sub-$100 i.MX 91 Board for Embedded and Industrial Use
MYIR has introduced the MYC-LMX91, a compact SoM powered by NXP’s energy-efficient i.MX 91 processor. Designed for smart devices, the module targets applications such as industrial gateways, EV chargers, smart home systems, medical platforms, and building automation. The MYC-LMX91 is built around the 1.4 GHz Arm Cortex-A55-based i.MX 91 (MIMX9131CVVXJAA) and comes equipped with 1GB […] ⌘ Read more
$500 Bounty: Shopify Referrer Leak: Hijacking Storefront Access with a Single Token
Referrer Header Leaks + Iframe Injection = Storefront Password Bypass
[Continue reading on InfoSec Writ … ⌘ Read more
$750 Bounty: for HTTP Reset Password Link in Mattermost
How an Unsecured Protocol in a Critical Workflow Opened the Door for Network-Based Account Takeovers
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/750-bounty-for … ⌘ Read more
Exploiting Web Cache Poisoning with X-Host Header Using Param Miner
[Write-up] Web Cache Poisoning Using an Unknown Header.
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/exploiting-web-ca … ⌘ Read more
**Header Injection to Hero: How I Hijacked Emails and Made the Server Sing **
Hey there!😁
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/header-injection-to-hero-how-i-hijacked-emails-an … ⌘ Read more
How to seduce someone in a restaurant. Step 1: Flash titties. Step 2: Done ⌘ Read more
🧮 USERS:1 FEEDS:2 TWTS:1354 ARCHIVED:87377 CACHE:2683 FOLLOWERS:22 FOLLOWING:14
Carney says Canada is looking to join major European military buildup by July 1 ⌘ Read more
Beyond best practices: Using OWASP ASVS to bake security into your delivery pipeline for 2025
How to turn a community-driven checklist into a living part of your SDLC.
[Cont … ⌘ Read more
Find Secrets in Hidden Directories Using Fuzzing ️
Free Article Link
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/find-secrets-in-hidden-directories-using-fuzzing-%EF%B8%8F-1666d6f34fd8?source=rss—-7b722bfd1b8d- … ⌘ Read more
Lab: Exploiting server-side parameter pollution in a query string
Server Side parameter pollution
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/lab-exploiting-server-side-parameter-pollution-in-a … ⌘ Read more
Breaking Twitter’s VPN: $20,160 Bounty for a Pre-Auth RCE via Pulse Secure Chain
How Orange Tsai & Meh Chang Combined File Read, Session Hijack, and Admin Injection to Breach Twitter’s Internal … ⌘ Read more
**One Endpoint to Rule Them All: How I Chained 3 Bugs into Full Account Takeover **
Hey there!😁
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/one-endpoint-to-rule-them-all-h … ⌘ Read more
Demystifying Cookies : The Complete Guide for Bug Bounty Hunters — Part 1
Everything you need to know about cookies to expand your attack surface and find real bugs.
[Continue reading on InfoSec Write-ups »](h … ⌘ Read more
**Silent but Deadly: How Blind XSS in Email Notifications Gave Me Root Alerts **
Hey there!😁
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/silent-but-deadly-how-blind-xss-in-email … ⌘ Read more
DFIR: An Introduction | TryHackMe Write-Up | FarrosFR
Here is my article on the walkthrough of a free room: DFIR: An Introduction. Introductory room for the DFIR module. I wrote this in 2025…
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/ … ⌘ Read more
MITM HTTPS Payload with Python
A lightweight MITM tool for monitoring encrypted traffic and detecting threats powered by AI and built in Python
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/mitm-https-payload-with-python-499ebf8e933f?source=rss—-7b722bfd1b8d— … ⌘ Read more
**From CSP to OMG: How a Tiny Misconfigured Header Let Me Run JS Anywhere **
Hey there!😁
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/from-csp-to-omg-how-a-tiny-misconfigured-header-let- … ⌘ Read more
I Gave Myself 60 Minutes to Find a Bug — This Is What Happened
Free Article Link
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/i-gave-myself-60-minutes-to-find-a-bug-this-is-what-happened-e5fa76563a33?so … ⌘ Read more
🧮 USERS:1 FEEDS:2 TWTS:1353 ARCHIVED:87369 CACHE:2680 FOLLOWERS:22 FOLLOWING:14
Maybe you’ll enjoy this as well:
I still have one of my first modems, a Creatix LC 144 VF:
I think this was the modem that I used when I first connected to the internet, but I’m not sure.
I plugged it in again and it still works:
The firmware appears to be from 1994, which sounds about right. I don’t think we had internet access before that. We certainly did use local mailboxes, though. (Or BBS’s, as you might call them.)
I now want to actually use that modem again. For the moment, I can only use a phone to dial into it, I lack a second modem to actually establish a connection. Here’s a video:
Not spectacular, but the modem does answer after me entering ATA.
I bought another cheap old modem on eBay and am now waiting for it to arrive. Once it’s here, I want to simulate an actual dial-up session, hopefully from OS/2 or Windows 3.x.
Trump crashes Russian stock market: minus US$1 billion in few hours ⌘ Read more
Drones hit Russia’s Shahed drone factory 1,200 km from Ukraine again ⌘ Read more
支付寶證書原理和使用 Golang 集成
支付寶證書驗證機制是保障交易安全的核心環節,主要是基於 PKI(公鑰基礎設施)體系構建。其驗證流程包含以下幾個關鍵部分:1,證書體系支付寶使用兩套證書,應用證書和支付寶根證書。應用證書由開發者上傳到支付寶開放平臺,支付寶根證書用於驗證支付寶返回數據的真實性。2,簽名驗證流程請求時,開發者使用私鑰對請求參數簽名,支付寶使用應用公鑰驗證。響應時,支付寶使用私鑰對返回數據簽名,開發者使用支付寶公鑰驗證。 ⌘ Read more
支付寶證書原理和使用 Golang 集成
支付寶證書驗證機制是保障交易安全的核心環節,主要是基於 PKI(公鑰基礎設施)體系構建。其驗證流程包含以下幾個關鍵部分:1,證書體系支付寶使用兩套證書,應用證書和支付寶根證書。應用證書由開發者上傳到支付寶開放平臺,支付寶根證書用於驗證支付寶返回數據的真實性。2,簽名驗證流程請求時,開發者使用私鑰對請求參數簽名,支付寶使用應用公鑰驗證。響應時,支付寶使用私鑰對返回數據簽名,開發者使用支付寶公鑰驗證。 ⌘ Read more
微服務架構:必懂的 5 種設計模式
1. Database per Service (每個服務一個數據庫)目標 / 目的實現微服務之間的松耦合。 增強服務的獨立性、可伸縮性和數據封裝。 關鍵概念 / 工作方式每個微服務管理自己的私有數據庫。 數據庫只能由擁有該服務的服務訪問。 強制執行清晰的邊界並促進單一職責原則。 數據隔離 減少服務之間的依賴。 技術靈活性 服務可以使 ⌘ Read more
From Zero to $1000/Month | Bug Bounty Automation Blueprint
Proven Tactics, Tools, and Code to Automate Your Way to Consistent Bounties
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/from-zero-to-1000-month-bug-boun … ⌘ Read more
️My Top 7 Mistakes as a New Bug Hunter (And How to Avoid Them)
Free Article Link only for you
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/%EF%B8%8Fmy-top-7-mistakes-as-a-new-bug-hunter- … ⌘ Read more
** The Misconfigured Magnet: How Public Buckets Exposed Millions of User Files **
Hey there😁
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/the-misconfigured-magnet-how-public-buck … ⌘ Read more
🧮 USERS:1 FEEDS:2 TWTS:1352 ARCHIVED:87359 CACHE:2686 FOLLOWERS:22 FOLLOWING:14
[47°09′25″S, 126°43′37″W] Reading: 1.51000 PPM
UE1 homebrew 1-bit vacuum computer in action
full series playlist
🧮 USERS:1 FEEDS:2 TWTS:1351 ARCHIVED:87339 CACHE:2704 FOLLOWERS:22 FOLLOWING:14
One of the nicest things about Go is the language itself, comparing Go to other popular languages in terms of the complexity to learn to be proficient in:
- Go:
25keywords (Stack Overflow); CSP-style concurrency (goroutines & channels)
- Python 2:
30keywords (TutorialsPoint); GIL-bound threads & multiprocessing (Wikipedia)
- Python 3:
35keywords (Initial Commit); GIL-bound threads,asyncio& multiprocessing (Wikipedia, DEV Community)
- Java:
50keywords (Stack Overflow); threads +java.util.concurrent(Wikipedia)
- C++:
82keywords (Stack Overflow);std::thread, atomics & futures (en.cppreference.com)
- JavaScript:
38keywords (Stack Overflow); single-threaded event loop &async/await, Web Workers (Wikipedia)
- Ruby:
42keywords (Stack Overflow); GIL-bound threads (MRI), fibers & processes (Wikipedia)
@movq@www.uninformativ.de i feel like when i read go code i’m reading some algebra shit where every part is 1-5 letters long and then there’s weird symbols like := and it’s just infinitely harder for me to parse and infer meaning from lol. it’s such a me problem
More than 1,900 Americans applied for UK citizenship as Trump began second term ⌘ Read more
Tom Homan is costing American taxpayers $1 million a month: reporter
Sarah K. Burris, Senior Digital Editor - Raw Story
_Stephan: Did you know that you and I are spending one million dollars a month protecting the thug Tom Homan, whom aspiring dictator Trump has appointed “Border Czar”? No, neither did I, but we are. As I read this report, all I could think about was how many children would get school lunches for $1,000,000 a month if Trump and the MAGAt … ⌘ Read more
🧮 USERS:1 FEEDS:2 TWTS:1350 ARCHIVED:87332 CACHE:2725 FOLLOWERS:22 FOLLOWING:14
U.S. reports cases of new COVID variant NB.1.8.1 behind surge in China ⌘ Read more
This is one of my attempts: 
$ go build ./cmd/xor/... && ./xor
Generation 95 | Fitness: 0.999964 | Nodes: 9 | Conns: 19
Target reached!
Best network performance:
[0 0] → got=0 exp=0 (raw=0.000) ✅
[0 1] → got=1 exp=1 (raw=0.990) ✅
[1 0] → got=1 exp=1 (raw=0.716) ✅
[1 1] → got=0 exp=0 (raw=0.045) ✅
Overall accuracy: 100.0%
Wrote best.dot – render with `dot -Tpng best.dot -o best.png`
Trump recommends 50% tariff on European Union starting June 1 ⌘ Read more
[47°09′27″S, 126°43′08″W] Reading: 1.15000 PPM
fit 1 $ spin (saw 0.1 * sign fxy) $ rect 0 1 - rect 0 0.99 >> add;#punctual #livecoding #creativecoding #videoart
🧮 USERS:1 FEEDS:2 TWTS:1349 ARCHIVED:87324 CACHE:2738 FOLLOWERS:22 FOLLOWING:14
Five new stable kernels
Greg Kroah-Hartman has announced the release of the 6.14.8, 6.12.30, 6.6.92, 6.1.140, and 5.15.184 stable kernels. As usual, each
contains a long list of important fixes throughout the kernel tree. ⌘ Read more
Adafruit Hit With $36K Tariff Bill on 1,000 lbs of Electronics
Adafruit CEO responds to The Lunduke Journal with details and stays non-political about changing tariffs. ⌘ Read more
6.1.140: longterm
Version:6.1.140 (longterm)Released:2025-05-22Source:linux-6.1.140.tar.xzPGP Signature:linux-6.1.140.tar.signPatch:full ( incremental)ChangeLog:ChangeLog-6.1.140 ⌘ Read more
Review: Satechi’s Foldable 3-in-1 Charger Maximizes Portability
Satechi, known for its range of accessories for Apple products, recently came out with a new series of OntheGo Wireless Chargers that are perfect for bringing along on trips due to their compact size.
There are two models, a 3-in-1 charger and a 2-in-1 charger. The 3-in-1 option has a Qi2 charging surface for an iPhone, an AirPod … ⌘ Read more
[$] LWN.net Weekly Edition for May 22, 2025
Inside this week’s LWN.net Weekly Edition:
Front: Home Assistant; Setuptools; Debian AI GR; DMA-mapping API; BPF CI; OSPM 2025
Briefs: Go audit; Oniux; Asahi progress; Rust in FreeBSD; RHEL 10; Rust 1.87.0; RIP John L. Young; Quote; …
Announcements: Newsletters, conferences, security updates, patches, and more. ⌘ Read more
🧮 USERS:1 FEEDS:2 TWTS:1348 ARCHIVED:87166 CACHE:2773 FOLLOWERS:22 FOLLOWING:14
[47°09′29″S, 126°43′22″W] Reading: 1.45 Sv
[$] Recent disruptive changes from Setuptools
In late March, version 78.0.1 of Setuptools — an important
Python packaging tool — was released. It was scarcely half an hour before
the first bug\
report came in, and it quickly became clear that the change was far
more disruptive than anticipated. Within only about five hours [78.0.2 was\
published to roll back the change](https://setuptools.pypa.io/e … ⌘ Read more
Security updates for Wednesday
Security updates have been issued by AlmaLinux (.NET 8.0, avahi, buildah, compat-openssl10, compat-openssl11, expat, firefox, gimp, git, grafana, libsoup, libxslt, mod_auth_openidc, nginx, nodejs:22, osbuild-composer, php, redis, redis:7, skopeo, thunderbird, vim, webkit2gtk3, xterm, and yelp), Arch Linux (dropbear, freetype2, go, nodejs, nodejs-lts-iron, nodejs-lts-jod, python-django, webkit2gtk, webkit2gtk-4.1, webkitgtk-6.0, and wpewebkit), Debian (mongo-c-driver), Fedora (openssh, … ⌘ Read more
** They Missed This One Tiny Parameter — I Made $500 Instantly**
✨Free Article Link
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/they-missed-this-one-tiny-parameter-i-made-500-instantly-f2f7d1c1c1d9?source=rss—-7 … ⌘ Read more
The Battle for Python’s Soul: How uv is Challenging pip’s Championship Reign
The stadium lights flicker on. The crowd falls silent. In the blue corner, weighing in with over a decade of dominance and … ⌘ Read more
解密轉轉收銀臺背後的路由系統
1 引言—-在電商交易場景中,支付環節是整個用戶購物環節中的關鍵節點。用戶從搜索、推薦、瀏覽、比較、加購、下單,到最終的支付環節,每一步都經歷了層層漏斗的篩選。當用戶到達支付環節時,已經展現出強烈的購買意向,這時的流量價值已經遠超最初環節。支付環節的體驗直接關係到最終的成交轉化,因此收銀臺不僅要確保支付流程的順暢,更要保證支付的安全性和可靠性。隨着業務規模的不斷擴大,支付場景的日益複雜,如何構 ⌘ Read more
如何畫架構圖 - 軟件設計架構師必學的一門課
前言:是時候乾點正事了,架構圖在做架構設計的時候尤爲重要,有了架構圖,很多時候你能給別人講清楚一些技術上的事情。常見架構圖的分類常見架構圖的畫法2.1 業務架構定義:描述系統對用戶提供了什麼業務功能,類似於 4+1 視圖的場景視圖。技巧:通過不同的顏色來標識業務狀態;業務分組管理。示例:2.2 客戶端架構、前端架構定義:客戶端和前端的領域邏輯架構,類似於 4+1 視圖的邏輯視圖。技巧:通過不同顏色 ⌘ Read more
🧮 USERS:1 FEEDS:2 TWTS:1347 ARCHIVED:87160 CACHE:2773 FOLLOWERS:22 FOLLOWING:14
[47°09′01″S, 126°43′44″W] Reading: 1.09000 PPM
$1 Million Tax Payer Grant for “Gender Inclusive Open Source”
A cancelled grant, worth a million bucks, for Oregon State University to create “best practices for fixing gender-bias bugs”. ⌘ Read more
Rabbit Store | TryHackMe Medium
Problems: What is user.txt? What is root.txt? Solution: First of all we get a IP address so I preformed an NMAP scan discovering ports…
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/rabbit-store-tryhackme-medium-f9f5069fbb50?source=r … ⌘ Read more
Mastering SQL Injection Recon: Step-by-Step Guide for Bug Bounty Hunters
A practical guide to uncovering SQL injection flaws using automation, payloads and deep reconnaissance techniques.
[Continue reading … ⌘ Read more
Build Your Own AI SOC — Part 7 Build a Security Knowledge Assistant With RAG + GPT
From Search to Understanding
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/build-you … ⌘ Read more
Exciting Cybersecurity Careers That Don’t Require Coding
Do you believe that cybersecurity is only for programmers who are bent over keyboards, typing code after code to ward off hackers? Rethink…
[Continue reading on InfoSec Write-ups »] … ⌘ Read more
Writing Pentest Reports | TryHackMe Write-Up | FarrosFR
Non-members are welcome to access the full story here. Write-Up by FarrosFR | Cybersecurity
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/writing-pentest-reports-tryhackme-wri … ⌘ Read more
Part 3:1 — Electron-Based App Security Testing Fundamentals - Extract & Analyze .asar ⌘ Read more
Part 1 — Electron-Based App Security Testing Fundamentals — Introduction to Electron Framework ⌘ Read more