2024-02-20T23:10:04Z https://nostr.ae dethos https://nostr.ae/npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 https://m.primal.net/HcUd.jpg https://m.primal.net/HcUd.jpg https://nostr.ae/nevent1qqspkfzw7jurthrnaugkyd7c758f668xehsd98l6pwz7cvraalsn3zszyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsq9u3mdq &#34;Web Security is Too Hard&#34;<br/><br/><a href="https://textslashplain.com/2026/08/04/security-is-hard-yall/">https://textslashplain.com/2026/08/04/security-is-hard-yall/</a><br/><br/>Yes, it is, but sometimes people just make it harder than it needs to be.<br/><br/>#web #security <br/><br/> 2026-08-05T09:05:32Z https://nostr.ae/nevent1qqsqzu4hmagth7prkwjmquqmzscpqngse06hjql5fyl4u0veyk05qyszyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsq83gcds &#34;Massive ChainDrop npm supply-chain attack infects hundreds of packages&#34;<br/><br/><a href="https://www.bleepingcomputer.com/news/security/massive-chaindrop-npm-supply-chain-attack-infects-hundreds-of-packages/">https://www.bleepingcomputer.com/news/security/massive-chaindrop-npm-supply-chain-attack-infects-hundreds-of-packages/</a><br/><br/>#npm #javascript #supplychain #security #infosec <br/><br/> 2026-08-04T19:44:44Z https://nostr.ae/nevent1qqsd59p56dejds76r6feryt3rlsxtgsqf38asgp6mr7hz0t9kgkz0vqzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqq0w7gx &#34;Okay, grok has uploaded my entire user directory to xAI&#39;s servers.&#34;<br/><br/><a href="https://xcancel.com/a_green_being/status/2076598897779020159">https://xcancel.com/a_green_being/status/2076598897779020159</a><br/><br/>Yikes! Some sort of containment appears to be essential to run these tools. Only provide them with access to what they need to do the work, nothing else.<br/><br/>#ai #grok #security #infosec <br/><br/> 2026-07-14T11:39:09Z https://nostr.ae/nevent1qqsr72eup7rk0sad7lspxwnwqzqs5cv3eds4zqwl6ge9gdz0fa58kegzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqh4eyu3 PlayStation Is Deleting 551 Movies From Customers’ Accounts, Reminding Us Nothing Digital Is Ever Truly Ours&#34;<br/><br/><a href="https://kotaku.com/playstation-store-movies-digital-studio-canal-terminator-2000711013">https://kotaku.com/playstation-store-movies-digital-studio-canal-terminator-2000711013</a><br/><br/>Instead of &#34;buy&#34; and &#34;purchase&#34;, companies providing digital content and goods this way should be legally forced to use &#34;rent&#34; or &#34;lease&#34;.<br/><br/>#digitalgoods #movies #music #software <br/><br/> 2026-06-27T10:25:36Z https://nostr.ae/nevent1qqsvq4rkkeqx4rpp9daed2d3t20gkkk8cqpncgwq8va0rv4yxx59v2qzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqhn8pyx &#34;.gitignore Isn’t the Only Way To Ignore Files in Git&#34;<br/><br/><a href="https://nelson.cloud/.gitignore-isnt-the-only-way-to-ignore-files-in-git/">https://nelson.cloud/.gitignore-isnt-the-only-way-to-ignore-files-in-git/</a><br/><br/>#git <br/><br/> 2026-06-18T16:58:27Z https://nostr.ae/nevent1qqs87lr04z75d5e4sq0uef0ll6lr7yzggm8lvqm4xg52rspeeragdvqzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqtkhurh &#34;GitHub Actions Security Checklist for Supply Chain Attacks&#34;<br/><br/><a href="https://corgea.com/learn/github-actions-security-checklist">https://corgea.com/learn/github-actions-security-checklist</a><br/><br/>#security #infosec #github #githubactions #supplychain <br/><br/> 2026-06-16T17:31:33Z https://nostr.ae/nevent1qqstzmx0mn5vey46e7lxjds2qzvv2h9xqx5uvkd5lpcevqrgneek2lgzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqse6326 &#34;1-Click GitHub Token Stealing via a VSCode Bug&#34;<br/><br/><a href="https://blog.ammaraskar.com/github-token-stealing/">https://blog.ammaraskar.com/github-token-stealing/</a><br/><br/>#security #infosec #vscode #github #microsoft <br/><br/> 2026-06-03T08:50:42Z https://nostr.ae/nevent1qqszrejmq3xh85e53q6rdp93vzn3c8ewjl740u4euxdggsw9z6n7vaqzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqx6n3ca &#34;The Newest Instagram &#34;Exploit&#34; is the Goofiest I&#39;ve Seen&#34;<br/><br/><a href="https://www.0xsid.com/blog/meta-account-takeover-fiasco">https://www.0xsid.com/blog/meta-account-takeover-fiasco</a><br/><br/>😂 😑 😓 <br/><br/>#security #infosec #instagram #meta #ai <br/><br/> 2026-06-02T08:14:43Z https://nostr.ae/nevent1qqsrucngrlmtt684j9schjtpskhjlcdfm5rca5kwqp0rz306al6yefszyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsq6x5s6z &#34;Motorola phones have started hijacking the Amazon app to insert affiliate codes&#34;<br/><br/><a href="https://9to5google.com/2026/05/25/motorola-amazon-app-hijacking-behavior/">https://9to5google.com/2026/05/25/motorola-amazon-app-hijacking-behavior/</a><br/><br/>🤦‍♂️ <br/><br/>#enshittification #crap #motorola #android <br/><br/> 2026-05-26T11:42:32Z https://nostr.ae/nevent1qqsf7c94wskdg2k876gk3fenrt9y4umn0use5ajpsqp67xvy2vxdzvczyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsquk70mc OpenSUSE Slowroll just landed on my test machine. Looking and behaving good. 👍 <br/><br/>Strong candidate to replace my main one in the future. 🦎 <br/><br/>#opensuse #slowroll #os #linux <br/><br/> 2026-05-21T18:59:52Z https://nostr.ae/nevent1qqsg9l7a9vust84et2xllel32sahw4s8mg2ly99g843sduwaf9kv0wqzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqjagkgf &#34;Microsoft BitLocker-protected drives can now be opened with just some files on a USB stick — YellowKey zero-day exploit demonstrates an apparent backdoor&#34;<br/><br/><a href="https://www.tomshardware.com/tech-industry/cyber-security/microsoft-bitlocker-protected-drives-can-now-be-opened-with-just-some-files-on-a-usb-stick-yellowkey-zero-day-exploit-demonstrates-an-apparent-backdoor">https://www.tomshardware.com/tech-industry/cyber-security/microsoft-bitlocker-protected-drives-can-now-be-opened-with-just-some-files-on-a-usb-stick-yellowkey-zero-day-exploit-demonstrates-an-apparent-backdoor</a><br/><br/>Yikes... if we even needed more reasons to avoid Windows and Microsoft&#39;s encryption tools.<br/><br/>#security #infosec #windows #bitlocker #microsoft <br/><br/> 2026-05-14T13:20:23Z https://nostr.ae/nevent1qqsqn9ccpwy2pfhc44pa8rqqzrjc28jhxf3vpx69u770gzjht6c5ljczyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqukp2hs Is anyone surprised? 🥸 <br/><br/><a href="https://www.theregister.com/2026/05/04/uk_online_safety_act_age_checks_subvert/">https://www.theregister.com/2026/05/04/uk_online_safety_act_age_checks_subvert/</a><br/><br/>#agechecks #ageverification <br/><br/> 2026-05-05T13:37:04Z https://nostr.ae/nevent1qqs9qxrj7vygdv4paxnydukulvd2gvjvcvswtyvx37lpfeevmww9q2qzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsq9est6t Credit Cards Are Vulnerable To Brute Force Kind Attacks&#34;<br/><br/><a href="https://metin.nextc.org/posts/Credit_Cards_Are_Vulnerable_To_Brute_Force_Kind_Attacks.html">https://metin.nextc.org/posts/Credit_Cards_Are_Vulnerable_To_Brute_Force_Kind_Attacks.html</a><br/><br/>#security #creditcards <br/><br/> 2026-05-02T09:56:56Z https://nostr.ae/nevent1qqstz6hqpym6mfx67x4fj5l58way8jfu5ykxnzy5wk4w7cmws9crgaszyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqmaswcg As if you needed more reasons to stop using Windows and other Microsoft products and services.<br/><br/><a href="https://www.bleepingcomputer.com/news/microsoft/microsoft-suspends-dev-accounts-for-high-profile-open-source-projects/">https://www.bleepingcomputer.com/news/microsoft/microsoft-suspends-dev-accounts-for-high-profile-open-source-projects/</a><br/><br/>#microsoft #opensource #softwaredevelopment <br/><br/> 2026-04-10T12:31:51Z https://nostr.ae/nevent1qqsyhlmuunf3m5qsp08efmw6zu7q8qn9p5s8ql8dxhrzkrhca2dmvcszyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqpd53hq A couple of links with tips to help with supply chain security:<br/>* <a href="https://github.com/lirantal/npm-security-best-practices">https://github.com/lirantal/npm-security-best-practices</a><br/>* <a href="https://bernat.tech/posts/securing-python-supply-chain/">https://bernat.tech/posts/securing-python-supply-chain/</a><br/><br/>#python #javascript #pypi #npm #security #infosec #supplychain <br/><br/> 2026-04-09T18:06:29Z https://nostr.ae/nevent1qqsd3x4n795n7yn056hwwylh4a6z2up895dx6vzef7aeul0j0jvcsngzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsquqeh46 &#34;Django security releases issued: 6.0.4, 5.2.13, and 4.2.30&#34;<br/><br/><a href="https://www.djangoproject.com/weblog/2026/apr/07/security-releases/">https://www.djangoproject.com/weblog/2026/apr/07/security-releases/</a><br/><br/>#django #python #security <br/><br/> 2026-04-08T09:12:16Z https://nostr.ae/nevent1qqs2usgefnldxzv56jzqhwwmst5ha2kzdazevh7ydmx3yurmskdeghqzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqxnuwkp In reply to <a href='/nevent1qqsqqqzm6a6948ywdax7pcfgxp8cvtx7nk775vzvtcgjkldfel8ppyqpl4cj8'>nevent1q…4cj8</a><br/>_________________________<br/><br/>Isn&#39;t graphene just a special flavour of android? <br/><br/> 2026-03-31T10:36:28Z https://nostr.ae/nevent1qqspf4zwh4yc9yg4vx9tgpqxu9me3ymggwmmdj7n5sutx82e0sgsfgszyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqcy5x09 &#34;axios Compromised on npm - Malicious Versions Drop Remote Access Trojan&#34;<br/><br/><a href="https://www.stepsecurity.io/blog/axios-compromised-on-npm-malicious-versions-drop-remote-access-trojan">https://www.stepsecurity.io/blog/axios-compromised-on-npm-malicious-versions-drop-remote-access-trojan</a><br/><br/>Just another Tuesday. Developing software is becoming a riskier business by the day.<br/><br/>#npm #javascript #nodejs #security #supplychain <br/><br/> 2026-03-31T10:34:07Z https://nostr.ae/nevent1qqsxzf98jl5z65lq95vfnjj9xnvwmxmxlw8w59zknt9s8rsakxdlrjczyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqm6wa95 &#34;End of “Chat Control”: EU Parliament Stops Mass Surveillance in Voting Thriller – Paving the Way for Genuine Child Protection!&#34;<br/><br/><a href="https://www.patrick-breyer.de/en/end-of-chat-control-eu-parliament-stops-mass-surveillance-in-voting-thriller-paving-the-way-for-genuine-child-protection/">https://www.patrick-breyer.de/en/end-of-chat-control-eu-parliament-stops-mass-surveillance-in-voting-thriller-paving-the-way-for-genuine-child-protection/</a><br/><br/>#eu #chatcontrol <br/><br/> 2026-03-26T19:14:59Z https://nostr.ae/nevent1qqsqemc76462et8hsjdurvakzruuzkunqtlm0twu3urgs5c0zu7lt5czyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqpq82r0 &#34;A YC-Backed Startup Left Production AWS Keys Public for 5 Months. Their VDP Was Silent.&#34;<br/><br/><a href="https://benzimmermann.dev/blog/pump-vdp-silence">https://benzimmermann.dev/blog/pump-vdp-silence</a><br/><br/>#security #infosec #yc #cybersecurity <br/><br/> 2026-03-23T15:12:01Z https://nostr.ae/nevent1qqs24klz0lg3uk22tjgf543kvmcs5qg0euztsd2en55f5wsc40n8t6qzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqr7dz7y Managing SSH keys with KeePassXC is actually quite nice<br/>--------------<br/><br/>It all started with a post on Lobste.rs, someone asking how others manage their SSH keys. It was a question that I had already asked myself multiple times, so I was genuinely interested in reading about what others had to say.<br/>There must be a better way than storing them encrypted on your disk and manually inputting the passphrases while loading them to the agent every morning.<br/><br/>When KeePassXC […]<br/><br/><a href="https://blog.ovalerio.net/archives/3289">https://blog.ovalerio.net/archives/3289</a><br/><br/>#keepassxc #ssh #sshAgent <br/><br/> 2026-03-22T20:43:50Z https://nostr.ae/nevent1qqsv6f6ra9t39ztdvwr6nzruwft5glf5mp0q5n2a0hw5l82fd9hm0gczyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqxk7pe0 &#34;Lock the Ghost: In the software world, “remove” is not equal to &#34;gone.&#34;&#34;<br/><br/><a href="https://www.cert.at/en/blog/2026/3/lock-the-ghost">https://www.cert.at/en/blog/2026/3/lock-the-ghost</a><br/><br/>#pypi #dependencies #supplychain #lockfiles #python <br/><br/> 2026-03-18T14:00:56Z https://nostr.ae/nevent1qqs0kmlpc3hqawuv3agsj34l8xtpx9vv2527wl4glrjyjrljauzy37czyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqjsww9x &#34;Jazzband is sunsetting. New signups are disabled. Project leads will be contacted before PyCon US 2026 to coordinate transfers.&#34;<br/><br/><a href="https://jazzband.co/news/2026/03/14/sunsetting-jazzband">https://jazzband.co/news/2026/03/14/sunsetting-jazzband</a><br/><br/>#python #opensource #jazzband <br/><br/> 2026-03-14T19:15:55Z https://nostr.ae/nevent1qqswxy3eg4zht8qsaw65mnsggvwhcqx3wkhwk34xp9ntdz96x0dyszgzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqtl9arv &#34;Hisense TVs force owners to watch intrusive ads when switching inputs, visiting the home screen, or even changing channels&#34;<br/><br/><a href="https://www.tomshardware.com/tech-industry/big-tech/hisense-tvs-force-owners-to-watch-intrusive-ads-when-switching-inputs-visiting-the-home-screen-or-even-changing-channels-practice-infuriates-consumers-brand-denies-wrongdoing">https://www.tomshardware.com/tech-industry/big-tech/hisense-tvs-force-owners-to-watch-intrusive-ads-when-switching-inputs-visiting-the-home-screen-or-even-changing-channels-practice-infuriates-consumers-brand-denies-wrongdoing</a><br/>This is just garbage. Need to find the brands that still sell actual TVs.<br/><br/>#smarttv #hisense #ads<br/><br/> <br/><br/> 2026-03-12T19:02:29Z https://nostr.ae/nevent1qqsgl6nstp50uptjlzwag5su84v80lggqm8y0a2dztnffh0ms6s6y7qzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqjl69yj &#34;Replacing tox with UV&#34;<br/><br/><a href="https://blog.changs.co.uk/replacing-tox-with-uv.html">https://blog.changs.co.uk/replacing-tox-with-uv.html</a><br/><br/>#python #testing #uv <br/><br/> 2026-03-11T17:55:40Z https://nostr.ae/nevent1qqsrwdd37x8enwfywgca47eqmfedvn2wa0n27e3jsfqcvsmqhyjhkhqzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqksl2rc Chat Control, mass surveillance, and then...<br/><br/><a href="https://mastodon.online/@mullvadnet/116206184902355562">https://mastodon.online/@mullvadnet/116206184902355562</a><br/><br/>#eu #chatcontrol #mullvad <br/><br/> 2026-03-11T17:54:50Z https://nostr.ae/nevent1qqswkme75yyvhqhtay8wxm3awtxutnrp0kwjrwzvfy6rksd7lxfrulgzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqa67uz2 &#34;The AWS Console and Terraform Security Gap&#34;<br/><br/><a href="https://blog.includesecurity.com/2026/02/the-aws-console-and-terraform-security-gap/">https://blog.includesecurity.com/2026/02/the-aws-console-and-terraform-security-gap/</a><br/><br/>#aws #terraform #opentofu #security #infosec <br/><br/> 2026-03-06T13:02:21Z https://nostr.ae/nevent1qqsggekkc0rqhvjzuwyvghqfgyjw2vj6dr66j2fvmqdegaz3s7mcs9szyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqd8kcg0 In reply to <a href='/nevent1qqsfdqtzmr9qumc0lwyz6wmfvuqvem87pkrq4asvd0mrlg652aeshqg9y5r70'>nevent1q…5r70</a><br/>_________________________<br/><br/>When a vendor doesn&#39;t release the software using one of these methods. Curl bash is very common for example. <br/>I usually try to find an alternative. <br/><br/> 2026-03-04T18:18:33Z https://nostr.ae/nevent1qqsxn8elv2t5deufh56czkz0vxzf5ptkha82pwjfke64vtjctrtg7fgzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsq3lnv9r &#34;Claude is an Electron App because we’ve lost native&#34;<br/><br/><a href="https://tonsky.me/blog/fall-of-native/">https://tonsky.me/blog/fall-of-native/</a><br/><br/>#software <br/><br/> 2026-03-04T18:15:19Z https://nostr.ae/nevent1qqs25kjprxfc038vdfsgznu4ufa9f86cqy2w3jy8qkx6rmjpx4elhgszyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqa7s89v In reply to <a href='/nevent1qqs0jt5zq0lwla6smkydapjlyaxhu5yw9rfde9m3tz73h2ktfr3dvvqpr9mhxue69uhk2umsv4kxsmewva5hy6twduhx7un89u54v0ku'>nevent1q…v0ku</a><br/>_________________________<br/><br/>I get it using the distro&#39;s package manager. That&#39;s it. <br/><br/>If something is not there, or I need a bleeding edge version, I use flatpak.<br/><br/>Overtime I found that this approach works very well for me. <br/><br/> 2026-02-28T12:00:52Z https://nostr.ae/nevent1qqs9xllkte6z9ud3lk9tkwmv2z9d7zkmejxfadl3zv2dkwy5arm09fszyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqfnkfkm &#34;Google API Keys Weren&#39;t Secrets. But then Gemini Changed the Rules.&#34;<br/><br/><a href="https://trufflesecurity.com/blog/google-api-keys-werent-secrets-but-then-gemini-changed-the-rules">https://trufflesecurity.com/blog/google-api-keys-werent-secrets-but-then-gemini-changed-the-rules</a><br/><br/>#security #infosec #google <br/><br/> 2026-02-26T09:14:25Z https://nostr.ae/nevent1qqs2tkazzhwpnyd2fy8wagq4kjkmanqlxa9xcs7tv7mcx6v5qtftekczyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqs9pvvh &#34;&#34;Made in EU&#34; - it was harder than I thought.&#34;<br/><br/><a href="https://www.coinerella.com/made-in-eu-it-was-harder-than-i-thought/">https://www.coinerella.com/made-in-eu-it-was-harder-than-i-thought/</a><br/><br/>By the post content, **still worth it**.<br/><br/>#buyfromeu #techstack #cloud #europeanunion #europeanalternatives <br/><br/> 2026-02-20T18:41:51Z https://nostr.ae/nevent1qqszn4szhd5unhxw64y94wuqjq9gmjjn8rlk9l6frm2rym9q94mhuzszyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqlegsg8 &#34;Leaking secrets from the claud&#34;<br/><br/><a href="https://ironpeak.be/blog/leaking-secrets-from-the-claud/">https://ironpeak.be/blog/leaking-secrets-from-the-claud/</a><br/><br/>#security #ai #agents #softwaredevelopment <br/><br/> 2026-02-18T16:42:28Z https://nostr.ae/nevent1qqswh5gpq2uew40uru907x5927l3y8xvxzerf0xhqckspjmvmqtw6vgzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqm9f5nn &#34;Spying Chrome Extensions: 287 Extensions spying on 37M users&#34;<br/><br/><a href="https://qcontinuum.substack.com/p/spying-chrome-extensions-287-extensions-495">https://qcontinuum.substack.com/p/spying-chrome-extensions-287-extensions-495</a><br/><br/>Extensions should be few, installed carefully, and reviewed often.<br/><br/>#security #privacy #browsers #chrome <br/><br/> 2026-02-11T19:20:15Z https://nostr.ae/nevent1qqs2re5904yep376dpcz4ufarn5utvn2cxuep4twv0z9p64e294xywszyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqlt8lrx &#34;We should all be using dependency cooldowns&#34;<br/><br/><a href="https://blog.yossarian.net/2025/11/21/We-should-all-be-using-dependency-cooldowns">https://blog.yossarian.net/2025/11/21/We-should-all-be-using-dependency-cooldowns</a><br/><br/>#supplychain #security <br/><br/> 2026-02-05T16:12:31Z https://nostr.ae/nevent1qqs0aqg4auhzyry9n8jfmw3nsl3y0kf2c5hdk9qk9g32sg2h8vjefwqzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsq48q9uf &#34;Django security releases issued: 6.0.2, 5.2.11, and 4.2.28&#34;<br/><br/><a href="https://www.djangoproject.com/weblog/2026/feb/03/security-releases/">https://www.djangoproject.com/weblog/2026/feb/03/security-releases/</a><br/><br/>#django #python #security <br/><br/> 2026-02-04T14:45:43Z https://nostr.ae/nevent1qqsvamf6y5gxkem8tsv952lqffrgp0djvdg22v6tqpwhsef9q46wy3szyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsq7nqj5r Notepad++ Hijacked by State-Sponsored Hackers<br/><br/><a href="https://notepad-plus-plus.org/news/hijacked-incident-info-update/">https://notepad-plus-plus.org/news/hijacked-incident-info-update/</a><br/><br/>#security #cybersecurity #notepad++ <br/><br/> 2026-02-02T08:42:51Z https://nostr.ae/nevent1qqsqc6ksl5kpw4wdrhn6w0pm6xetwdyc0clt0dwc2gym8984axc00kczyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqxwv4ut &#34;But how to get to that European cloud?&#34;<br/><br/><a href="https://berthub.eu/articles/posts/now-how-to-get-that-european-cloud/">https://berthub.eu/articles/posts/now-how-to-get-that-european-cloud/</a><br/><br/>#buyfromeu #cloud #europe #tech #sovereignty #digitalsovereignty <br/><br/> 2026-01-28T15:29:44Z https://nostr.ae/nevent1qqsxcmyc3l4yvy0a9qf35y5zhfhhg2zkmfmh8wduv43vndrhfrwwgvqzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqyalkuc &#34;Google confirms &#39;high-friction&#39; sideloading flow is coming to Android&#34;<br/><br/><a href="https://www.androidauthority.com/google-sideloading-android-high-friction-process-3633468/">https://www.androidauthority.com/google-sideloading-android-high-friction-process-3633468/</a><br/><br/>Time for alternatives to show up.<br/><br/>#android #mobile #mobiledev <br/><br/> 2026-01-25T20:35:06Z https://nostr.ae/nevent1qqs0nuldpmr29tchrsvz4fzstufkwc09qc35pyt777p6m56c8ftpyjszyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqetwh9k &#34;FOSS for digital sovereignty in the EU&#34;<br/><br/><a href="https://www.more-magic.net/posts/open-source-in-the-eu.html">https://www.more-magic.net/posts/open-source-in-the-eu.html</a><br/><br/>#eu #europe #foss #opensource #sovereignty #software <br/><br/> 2026-01-22T08:53:33Z https://nostr.ae/nevent1qqsxw0zfs3s734urvc4a66a7j9rhma37p9gdz7fsr9setq4jy4c6zyqzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqtstyte &#34;Instagram account takeover via Meta Pixel script abuse&#34;<br/><br/><a href="https://ysamm.com/uncategorized/2026/01/16/leaking-fbevents-ato.html">https://ysamm.com/uncategorized/2026/01/16/leaking-fbevents-ato.html</a><br/><br/>#security #infosec #netsec #meta #instagram <br/><br/> 2026-01-16T14:47:48Z https://nostr.ae/nevent1qqsg9r6d4fnlepfl39mttmj2f3ze0euwvdvmeh3n95j8dcyql4etpeszyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqecxrt2 &#34;Claude Cowork Exfiltrates Files&#34;<br/><br/><a href="https://www.promptarmor.com/resources/claude-cowork-exfiltrates-files">https://www.promptarmor.com/resources/claude-cowork-exfiltrates-files</a><br/><br/>#ai #security #agents #infosec <br/><br/> 2026-01-15T09:53:12Z https://nostr.ae/nevent1qqsfaudenaxkc94jtuhvfeskl9f2cavet6jz260fgdqzvuphqlr4xqqzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqscaejs &#34;European Commission issues call for evidence on open source&#34;<br/><br/><a href="https://lwn.net/Articles/1053107/">https://lwn.net/Articles/1053107/</a><br/><br/>#eu #europe #opensource #sovereignty <br/><br/> 2026-01-10T11:09:18Z https://nostr.ae/nevent1qqs2k5lq4tqxjrmywtaj840t6jf2dl64wmaz948f9fusqrleyj30kgszyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqerd3fp &#34;Safe Django migrations without server errors&#34;<br/><br/><a href="https://www.loopwerk.io/articles/2025/safe-django-db-migrations/">https://www.loopwerk.io/articles/2025/safe-django-db-migrations/</a><br/><br/>#django #softwaredevelopment <br/><br/> 2026-01-09T19:40:09Z https://nostr.ae/nevent1qqs85zflv2m6mswpmkhtj03png5zhyg48gqdhwpu9dcua70ngtq5xwczyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqw57cml &#34;A post-American, enshittification-resistant internet&#34;<br/><br/><a href="https://media.ccc.de/v/39c3-a-post-american-enshittification-resistant-internet">https://media.ccc.de/v/39c3-a-post-american-enshittification-resistant-internet</a><br/><br/>I just had the time to listen to it now. He does indeed have plenty of valid points.<br/><br/>#enshittification #internet #europe #openweb #society <br/><br/> 2026-01-09T19:20:03Z https://nostr.ae/nevent1qqsfa4d78cwl0upxxf0ajd5n4w9zhvvrgus0ngm6k3lk536aktugh4qzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqxhh30k &#34;Google will now only release Android source code twice a year&#34;<br/><br/><a href="https://www.androidauthority.com/aosp-source-code-schedule-3630018/">https://www.androidauthority.com/aosp-source-code-schedule-3630018/</a><br/><br/>And kids, this is just another example of why we need a viable alternative to the existing duopoly.<br/><br/>#android #google #mobile #os #opensource <br/><br/> 2026-01-07T09:22:50Z https://nostr.ae/nevent1qqs0vcqj9nsy8ctwaucmse4vgj9eq5cvsu9exyp5aghdv5ytq7q9cagzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqhc55uc &#34;Bye Bye Big Tech: How I Migrated to an almost All-EU Stack (and saved 500€ per year)&#34;<br/><br/><a href="https://www.zeitgeistofbytes.com/p/bye-bye-big-tech-how-i-migrated-to">https://www.zeitgeistofbytes.com/p/bye-bye-big-tech-how-i-migrated-to</a><br/><br/>#buyfromeu <br/><br/> 2025-12-30T12:19:06Z https://nostr.ae/nevent1qqsr35sepn3ftylw4lm5duppr47vmy0yce0yk34ava4qfswqjgfvrfgzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqv8ntau The books I enjoyed the most in 2025<br/><br/><a href="https://blog.ovalerio.net/archives/3248">https://blog.ovalerio.net/archives/3248</a><br/><br/>#Books <br/><br/> 2025-12-29T10:45:25Z https://nostr.ae/nevent1qqs95x0n8868lw96h26q3wxtl8yqjx4y9cmdvlyey4fxkh6pvjlqmugzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsq3dtw33 &#34;MongoBleed explained simply&#34;<br/><br/><a href="https://bigdata.2minutestreaming.com/p/mongobleed-explained-simply">https://bigdata.2minutestreaming.com/p/mongobleed-explained-simply</a><br/><br/>#security #infosec #netsec #mongodb <br/><br/> 2025-12-29T00:37:07Z https://nostr.ae/nevent1qqsx529989teq5vf5k0f9txr9c8ux7xpc3vlr6frrrymv9fqlup3r6czyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsq0aqh5n &#34;Merry Christmas Day! Have a MongoDB security incident.&#34;<br/><br/><a href="https://doublepulsar.com/merry-christmas-day-have-a-mongodb-security-incident-9537f54289eb">https://doublepulsar.com/merry-christmas-day-have-a-mongodb-security-incident-9537f54289eb</a><br/><br/>#security #infosec #netsec #mongodb <br/><br/> 2025-12-27T18:34:54Z https://nostr.ae/nevent1qqs0ex0w7qgwe7fkh2mtmkdj045tg4phwupw6sjyw2g0cac24auhd6czyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqac5y58 &#34;Help my website is too small&#34;<br/><br/><a href="https://lukeplant.me.uk/blog/posts/help-my-website-is-too-small/">https://lukeplant.me.uk/blog/posts/help-my-website-is-too-small/</a><br/><br/>#funny #bloat #web <br/><br/> 2025-12-24T18:05:27Z https://nostr.ae/nevent1qqsvpkz0c9ytfzq7xjcf5tsgqxeckkqh3za7hx8mf2czqqrafmsgndczyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqqlssqt &#34;NPM Package With 56K Downloads Caught Stealing WhatsApp Messages&#34;<br/><br/><a href="https://www.koi.ai/blog/npm-package-with-56k-downloads-malware-stealing-whatsapp-messages">https://www.koi.ai/blog/npm-package-with-56k-downloads-malware-stealing-whatsapp-messages</a><br/><br/>#security #infosec #nodejs #npm <br/><br/> 2025-12-23T09:59:06Z https://nostr.ae/nevent1qqsppdvefx8tz7y6yhtd5antdxa2vc353yj3rlaug0dmmrg43hv4d9szyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqxclz8l &#34;Over 10,000 Docker Hub images found leaking credentials, auth keys&#34;<br/><br/><a href="https://www.bleepingcomputer.com/news/security/over-10-000-docker-hub-images-found-leaking-credentials-auth-keys/">https://www.bleepingcomputer.com/news/security/over-10-000-docker-hub-images-found-leaking-credentials-auth-keys/</a><br/><br/>#security #infosec #dockerhub <br/><br/> 2025-12-11T18:42:06Z https://nostr.ae/nevent1qqsg39l7wma00s92e5864x32hc2405h5m7dmggqwzgu9sp6yursggsszyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqarkc7v More app recommendations<br/><br/>The good part of having a personal blog is that I can write about whatever comes to my mind. Today I was thinking of how people find the software they use, how many people end up using the same apps because they don’t know any alternatives, and the fact that many creators (especially open-source ones) deserve more recognition.<br/><br/>Over the years I already shared some of the software I use, and I’m […]<br/><br/><a href="https://blog.ovalerio.net/archives/3212">https://blog.ovalerio.net/archives/3212</a><br/><br/>#apps #software #Technology #tools <br/><br/> 2025-12-10T22:37:52Z https://nostr.ae/nevent1qqsf8uu7y69dleahg8gndrqfnx6nj8ft0ntq9hj5md4j6lwp5te7pjgzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqj0dq5k &#34;GitHub Actions Has a Package Manager, and It Might Be the Worst&#34;<br/><br/><a href="https://nesbitt.io/2025/12/06/github-actions-package-manager.html">https://nesbitt.io/2025/12/06/github-actions-package-manager.html</a><br/><br/>#github #githubactions #security #supplychain <br/><br/> 2025-12-09T10:19:45Z https://nostr.ae/nevent1qqst5tx9vn29tfr7t2f6rcu22c8uxzzkzwgvjcukjkd3q40r89jht2czyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqe0ta44 Fairphone open-sources Fairphone 5 and 6 software, and Moments switch<br/><br/><a href="https://www.fairphone.com/en/2025/12/04/were-big-fans-of-open-source-buildable-code-at-fairphone-heres-why/">https://www.fairphone.com/en/2025/12/04/were-big-fans-of-open-source-buildable-code-at-fairphone-heres-why/</a><br/><br/>💪 Nice<br/><br/>#fairphone #mobile #eualternatives #opensource <br/><br/> 2025-12-06T09:50:43Z https://nostr.ae/nevent1qqsycn0p76ck32pnnnsd3p0u6q772x4qxr0lnmj6xmsyccxak685ruqzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsq0vj30h &#34;When Password FieldsAren’t Enough – Client-Side SecretExposure in PagerDuty Cloud Runbook&#34;<br/><br/><a href="https://www.praetorian.com/blog/cve-2025-52493-when-password-fieldsarent-enough-client-side-secretexposure-in-pagerduty-cloud-runbook/">https://www.praetorian.com/blog/cve-2025-52493-when-password-fieldsarent-enough-client-side-secretexposure-in-pagerduty-cloud-runbook/</a><br/><br/>#security #cybersecurity #infosec <br/><br/> 2025-12-05T14:53:00Z https://nostr.ae/nevent1qqs0ny8ku80sthxsvsjql2sxfcl265uma8kxnv6ah547qmkew8zsa2gzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsq0htqrr &#34;Critical Security Vulnerability in React Server Components&#34;<br/><br/><a href="https://react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components">https://react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components</a><br/><br/>#security #infosec #netsec #reaxtjs #javascript #npm <br/><br/> 2025-12-03T17:08:50Z https://nostr.ae/nevent1qqsduqcj7sgkn9waw276hdgqqzrk7r3ggxk4gtew4ks5vegxuwfrzwgzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsq25qpty &#34;Disable network requests when running Pytest&#34;<br/><br/><a href="https://blog.pecar.me/disable-network-requets-when-running-pytest">https://blog.pecar.me/disable-network-requets-when-running-pytest</a><br/><br/>#python #pytest <br/><br/> 2025-12-03T13:48:17Z https://nostr.ae/nevent1qqsyu0weq53nz8en06wypd0ungp87dlngpqah6nrsxq4d9jpvemdxagzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqhpy4j3 &#34;Django security releases issued: 5.2.9, 5.1.15, and 4.2.27&#34;<br/><br/><a href="https://www.djangoproject.com/weblog/2025/dec/02/security-releases/">https://www.djangoproject.com/weblog/2025/dec/02/security-releases/</a><br/><br/>* CVE-2025-13372: Potential SQL injection in FilteredRelation column aliases on PostgreSQL<br/>* CVE-2025-64460: Potential denial-of-service vulnerability in XML serializer text extraction<br/><br/>#python #django #security <br/><br/> 2025-12-02T23:17:58Z https://nostr.ae/nevent1qqs0uyvq8jzyny99txl23tsfg7ahfjjq8adg7x9yy3u6dfp05c335qgzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsq04ddzu &#34;Shai-Hulud Returns: Over 300 NPM Packages infected via Fake Bun Runtime Within Hours&#34;<br/><br/><a href="https://helixguard.ai/blog/malicious-sha1hulud-2025-11-24">https://helixguard.ai/blog/malicious-sha1hulud-2025-11-24</a><br/><br/>#security #infosec #supplychain #cybersecurity #nodejs #npm <br/><br/> 2025-11-24T11:43:06Z https://nostr.ae/nevent1qqsftukumx5q7arq2l2ye065r5sqp2fzp7qpxy6hxma0e3hztgrqlpczyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqmxv7w6 &#34;The privacy nightmare of browser fingerprinting&#34;<br/><br/><a href="https://kevinboone.me/fingerprinting.html">https://kevinboone.me/fingerprinting.html</a><br/><br/>#privacy #web <br/><br/> 2025-11-23T09:55:13Z https://nostr.ae/nevent1qqsglqg6rvnwxt5fcvcjc4ujue2m284lf9a83a753pvm9hjl4clq22qzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqnflft2 &#34;Yes, Steam Machine is optimized for gaming, but it&#39;s still your PC. Install your own apps, or even another operating system. Who are we to tell you how to use your computer?&#34;<br/><br/>👏 👏 👏 <br/>A breath of fresh air… given the current status of the industry.<br/><br/>#steam #steammachine <br/><br/> 2025-11-12T22:16:12Z https://nostr.ae/nevent1qqs2t5rv28rv2g9uh4h7rv9a8j6je0g74q93jm9f2we44czj9sl25kczyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqdt6j72 &#34;sudo-rs Affected By Multiple Security Vulnerabilities - Impacting Ubuntu 25.10&#34;<br/><br/><a href="https://www.phoronix.com/news/sudo-rs-security-ubuntu-25.10">https://www.phoronix.com/news/sudo-rs-security-ubuntu-25.10</a><br/><br/>#security #infosec #ubuntu #sudors <br/><br/> 2025-11-12T14:11:54Z https://nostr.ae/nevent1qqsz6sf4m7h0zudcyxxed4jekt780cyzxmlxehndmlllp37gn40zw2qzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsq85pyaj &#34;10 Smart Performance Hacks For Faster Python Code&#34;<br/><br/><a href="https://blog.jetbrains.com/pycharm/2025/11/10-smart-performance-hacks-for-faster-python-code/">https://blog.jetbrains.com/pycharm/2025/11/10-smart-performance-hacks-for-faster-python-code/</a><br/><br/>#python <br/><br/> 2025-11-12T09:50:41Z https://nostr.ae/nevent1qqsqzw88v2vncerxv49pjdat4w224fh4rdxrxtzed7c3u6kv6mypuvszyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqz58ynz &#34;What data do coding agents send, and where to?&#34;<br/><br/><a href="https://chasersystems.com/blog/what-data-do-coding-agents-send-and-where-to/">https://chasersystems.com/blog/what-data-do-coding-agents-send-and-where-to/</a><br/><br/>#ai #privacy #telemetry #codingagents <br/><br/> 2025-11-10T20:49:22Z https://nostr.ae/nevent1qqszduhqc8g884re8nxwjgatqrjy7esdggelm94q22j49kfx808vl8szyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsql9qmwz &#34;7 vulnerabilities in django-allauth enabling account impersonation and token abuse&#34;<br/><br/><a href="https://zeropath.com/blog/django-allauth-account-takeover-vulnerabilities">https://zeropath.com/blog/django-allauth-account-takeover-vulnerabilities</a><br/><br/>#security #python #django #django-allauth #infosec #cybersecurity <br/><br/> 2025-11-08T17:23:19Z https://nostr.ae/nevent1qqsxka4jy9s2kz2yznqk22vmj7rwrtn72ja76sp8wphqt473qdtacqqzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsq532knf &#34;Critical RCE Vulnerability CVE-2025-11953 Puts React Native Developers at Risk&#34;<br/><br/><a href="https://jfrog.com/blog/CVE-2025-11953-critical-react-native-community-cli-vulnerability/">https://jfrog.com/blog/CVE-2025-11953-critical-react-native-community-cli-vulnerability/</a><br/><br/>#security #reactnative #netsec #mobiledev <br/><br/> 2025-11-06T16:53:41Z https://nostr.ae/nevent1qqstfxy4xzg7qzvdwymazxa3wtea84jq6kn887p5zsm08tv2zcy5hzgzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqvly27c &#34;Django security releases issued: 5.2.8, 5.1.14, and 4.2.26&#34;<br/><br/><a href="https://www.djangoproject.com/weblog/2025/nov/05/security-releases/">https://www.djangoproject.com/weblog/2025/nov/05/security-releases/</a><br/><br/>* CVE-2025-64458: Potential denial-of-service vulnerability in HttpResponseRedirect and HttpResponsePermanentRedirect on Windows<br/>* CVE-2025-64459: Potential SQL injection via _connector keyword argument in QuerySet and Q objects<br/><br/>#python #django #security <br/><br/> 2025-11-05T20:46:25Z https://nostr.ae/nevent1qqszdyhsqf5wmafsa35nsct5exh9834j64sx56ny3ggl3fstw0qhflczyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqhftrsc &#34;Samsung makes ads on $3,499 smart fridges official with upcoming software update&#34;<br/><br/><a href="https://arstechnica.com/gadgets/2025/10/samsung-makes-ads-on-3499-smart-fridges-official-with-upcoming-software-update/">https://arstechnica.com/gadgets/2025/10/samsung-makes-ads-on-3499-smart-fridges-official-with-upcoming-software-update/</a><br/><br/>Well… Samsung smart products and appliances are officially banned from my home. 🤷‍♂️<br/><br/>#ads #samsung #iot #smarthome <br/><br/> 2025-10-29T09:49:27Z https://nostr.ae/nevent1qqs2zuu7v0dn69nyykl5n77x9av07h8wu86rwyufcc3q2lyg78kpr9szyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqqsuu6u &#34;How I Almost Got Hacked By A &#39;Job Interview&#39;&#34;<br/><br/><a href="https://blog.daviddodda.com/how-i-almost-got-hacked-by-a-job-interview">https://blog.daviddodda.com/how-i-almost-got-hacked-by-a-job-interview</a><br/><br/>#security #cybersecurity #developers #programmers <br/><br/> 2025-10-15T16:43:06Z https://nostr.ae/nevent1qqs0w9du23pym2ku9mdvthfpsv8zpm6ye87hfkgn2c3gejkmm43emfqzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqxj9ux0 &#34;Pixnapping Attack&#34;<br/><br/>&#34;Anything that is visible when the target app is opened can be stolen by the malicious app using Pixnapping. Chat messages, 2FA codes, email messages, etc. are all vulnerable since they are visible.&#34;<br/><br/><a href="https://www.pixnapping.com/">https://www.pixnapping.com/</a><br/><br/>#security #cybersecurity #infosec #android <br/><br/> 2025-10-15T15:00:46Z https://nostr.ae/nevent1qqsxw58uyms6ydpcj6y4vryvecetlel6ttxhmn462cgtvnxcawn2u6qzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqvnh265 &#34;CamoLeak: Critical GitHub Copilot Vulnerability Leaks Private Source Code&#34;<br/><br/><a href="https://www.legitsecurity.com/blog/camoleak-critical-github-copilot-vulnerability-leaks-private-source-code">https://www.legitsecurity.com/blog/camoleak-critical-github-copilot-vulnerability-leaks-private-source-code</a><br/><br/>#security #cybersecurity #infosec #github #copilot <br/><br/> 2025-10-13T11:20:47Z https://nostr.ae/nevent1qqs958f670a3v4usvsau7qc8y8h8ejqrh9hksy0cawzs2nmmgw4dpqgzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsq2dkdv9 &#34;HTTP/1.1 must die: the desync endgame&#34;<br/><br/><a href="https://portswigger.net/research/http1-must-die">https://portswigger.net/research/http1-must-die</a><br/><br/>#security #http #web #cybersecurity <br/><br/> 2025-10-12T16:24:37Z https://nostr.ae/nevent1qqspv6wt23ej0hrk96gc6a25mmssha6z0hyfc43rzc6wd99jv5vmluszyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqv7uuxg &#34;What is &#34;good taste&#34; in software engineering?&#34;<br/><br/><a href="https://www.seangoedecke.com/taste/">https://www.seangoedecke.com/taste/</a><br/><br/>&#34;In other words, most bad taste comes from inflexibility. I will always distrust engineers who justify decisions by saying “it’s best practice”. No engineering decision is “best practice” in all contexts! You have to make the right decision for the specific problem you’re facing.&#34;<br/><br/>#softwaredevelopment #programming #softwareengineering <br/><br/> 2025-10-04T10:45:44Z https://nostr.ae/nevent1qqsf4r6teydwyfqvn0pyew897dt63a6c0ma70kwhmn77908z8pwz6yczyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsquv5lfm &#34;Red Hat confirms security incident after hackers claim GitHub breach&#34;<br/><br/><a href="https://www.bleepingcomputer.com/news/security/red-hat-confirms-security-incident-after-hackers-claim-github-breach/">https://www.bleepingcomputer.com/news/security/red-hat-confirms-security-incident-after-hackers-claim-github-breach/</a><br/><br/>#redhat #security #cybersecurity <br/><br/> 2025-10-02T16:19:43Z https://nostr.ae/nevent1qqs2sawrejauf2gakfysualqu6hc548z6hjsdtvljga5gwhsvl4scqszyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqzefev0 &#34;Django security releases issued: 5.2.7, 5.1.13, and 4.2.25&#34;<br/><br/><a href="https://www.djangoproject.com/weblog/2025/oct/01/security-releases/">https://www.djangoproject.com/weblog/2025/oct/01/security-releases/</a><br/><br/>#security #python #django <br/><br/> 2025-10-02T12:22:27Z https://nostr.ae/nevent1qqsdaef5yhv6aw3tsrefdkdulg3gdw634wvpq5suj5qjz5408fvcwgszyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqpnfudd &#34;... proof-of-concept transparent proxy PyPI mirror that demonstrates how code can be modified inline and pass hash checks&#34;<br/><br/><a href="https://dtm.uk/badpie/">https://dtm.uk/badpie/</a><br/><br/>#python #pypi #security <br/><br/> 2025-09-26T08:33:03Z https://nostr.ae/nevent1qqsyjt0mrq7pcyq7yelcurtd6gtsf62u2yfxv7454uzadc8354wjnmczyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqrnc34j &#34;One Token to rule them all - obtaining Global Admin in every Entra ID tenant via Actor tokens&#34;<br/><br/><a href="https://dirkjanm.io/obtaining-global-admin-in-every-entra-id-tenant-with-actor-tokens/">https://dirkjanm.io/obtaining-global-admin-in-every-entra-id-tenant-with-actor-tokens/</a><br/><br/>#security #cybersecurity #infosec #microsoft #entraid <br/><br/> 2025-09-18T09:14:23Z https://nostr.ae/nevent1qqsguqjvec7nm7aw68jesrev2zc20h9xutkyzx4494z8rc70e8d05xgzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqhpusx7 &#34;Self-Replicating Worm Hits 180+ Software Packages&#34;<br/><br/><a href="https://krebsonsecurity.com/2025/09/self-replicating-worm-hits-180-software-packages/">https://krebsonsecurity.com/2025/09/self-replicating-worm-hits-180-software-packages/</a><br/><br/>#security #cybersecurity #infosec #npm #supplychain <br/><br/> 2025-09-16T16:28:44Z https://nostr.ae/nevent1qqs0tnpn8cs65qgdsejvawpqud4m8tv66ugaszpk24ekp8xdg8x0tlgzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqr4xyp9 &#34;npm debug and chalk packages compromised&#34;<br/><br/><a href="https://www.aikido.dev/blog/npm-debug-and-chalk-packages-compromised">https://www.aikido.dev/blog/npm-debug-and-chalk-packages-compromised</a><br/><br/>#security #cybersecurity #infosec #supplychain #npm #javascript <br/><br/> 2025-09-09T08:09:13Z https://nostr.ae/nevent1qqswtc5d4gtjsfex9nqwfuq8ztpjpfjcdtjl0hsehemsvdgp75dwn6qzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqrtj8l9 &#34;Django security releases issued: 5.2.6, 5.1.12, and 4.2.24&#34;<br/><br/><a href="https://www.djangoproject.com/weblog/2025/sep/03/security-releases/">https://www.djangoproject.com/weblog/2025/sep/03/security-releases/</a><br/><br/>* CVE-2025-57833: Potential SQL injection in FilteredRelation column aliases<br/><br/>#security #websec #python #django <br/><br/> 2025-09-03T14:21:23Z https://nostr.ae/nevent1qqs00dstxw88gtjrhqt5pyp0sfx9hxtd3ky2zp0wxmj26d3c4sfhe9szyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsq7dsfwk &#34;Supply Chain Security Alert: Popular Nx Build System Package Compromised with Data-Stealing Malware&#34;<br/><br/><a href="https://www.stepsecurity.io/blog/supply-chain-security-alert-popular-nx-build-system-package-compromised-with-data-stealing-malware">https://www.stepsecurity.io/blog/supply-chain-security-alert-popular-nx-build-system-package-compromised-with-data-stealing-malware</a><br/><br/>#security #cybersecurity #infosec #supplychain #npm #github <br/><br/> 2025-08-28T08:58:04Z https://nostr.ae/nevent1qqstl082q6qswrmaugwz8l7sp4ejfr9vwmhgk5aw6daavgfl9xflu6czyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqtkk4ty &#34;Burner Phone 101&#34;<br/><br/><a href="https://rebeccawilliams.info/burner-phone-101/">https://rebeccawilliams.info/burner-phone-101/</a><br/><br/>``<br/>Privacy Tips for All Phones:<br/>* Keep device &amp; OS as updated as possible<br/>* Strong PIN, not biometrics<br/>* Disable cloud backups / use encrypted backups<br/>* Install Signal<br/>* Enforce strict app permissions (deny mic, camera, location) unless needed<br/>* Radios off (GPS/Wi-Fi/Bluetooth) unless needed<br/>* Store minimal sensitive data (including photos)<br/>``<br/><br/>#security #privacy <br/><br/> 2025-08-26T16:30:30Z https://nostr.ae/nevent1qqs98f78cuxr8y0lvyzvrwv2jwxfrghas3vpfsy820ewfgn3jnrz2cgzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsq2ze6nx &#34;DOM-based Extension Clickjacking: Your Password Manager Data at Risk&#34;<br/><br/><a href="https://marektoth.com/blog/dom-based-extension-clickjacking/">https://marektoth.com/blog/dom-based-extension-clickjacking/</a><br/><br/>#security #cybersecurity #infosec #passwordmanagers <br/><br/> 2025-08-25T09:52:35Z https://nostr.ae/nevent1qqsqkw4xnvy4lnttfa7s335jlhm3evs8593alv4h8m9arw48f6arj7gzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqww3j77 &#34;ghrc.io Appears to be Malicious&#34;<br/><br/><a href="https://bmitch.net/blog/2025-08-22-ghrc-appears-malicious/">https://bmitch.net/blog/2025-08-22-ghrc-appears-malicious/</a><br/><br/>#security #cybersecurity #containers #github <br/><br/> 2025-08-25T08:19:25Z https://nostr.ae/nevent1qqs2ek5555zv3mf4ngxpqsgket29g8vm3zsmwu368xs2tvuptxnf9vczyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqjew8l5 &#34;Copilot Broke Your Audit Log, but Microsoft Won’t Tell You&#34;<br/><br/><a href="https://pistachioapp.com/blog/copilot-broke-your-audit-log">https://pistachioapp.com/blog/copilot-broke-your-audit-log</a><br/><br/>#security #cybersecurity #microsoft #ai <br/><br/> 2025-08-24T21:33:00Z https://nostr.ae/nevent1qqsdj28jruqv5ehkq7h8uxgtp03mp3tx5f49r58hrpnpadl7lpqd75szyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqv0gs0u &#34;SystemD Service Hardening&#34;<br/><br/><a href="https://roguesecurity.dev/blog/systemd-hardening">https://roguesecurity.dev/blog/systemd-hardening</a><br/><br/>#linux #systemd #security <br/><br/> 2025-08-18T12:07:09Z https://nostr.ae/nevent1qqs0f5wwrmjl9hltxus9y6xpzhqn4er2dagfzyndzuckppvfzcm72fszyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsq2ewqm6 &#34;StarDict sends X11 clipboard to remote servers&#34;<br/><br/><a href="https://lwn.net/SubscriberLink/1032732/3334850da49689e1/">https://lwn.net/SubscriberLink/1032732/3334850da49689e1/</a><br/><br/>😱  A past exploration just came back to my mind: <a href="https://blog.ovalerio.net/archives/2346">https://blog.ovalerio.net/archives/2346</a><br/><br/>#security #cybersecurity #linux #x11 <br/><br/> 2025-08-12T09:27:15Z https://nostr.ae/nevent1qqs0rnpca9j00jpn5ld9thd0md89q8j5vnv3529dt00m5gxlwcepctszyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqf2sakz &#34;Smuggling arbitrary data through an emoji&#34;<br/><br/><a href="https://paulbutler.org/2025/smuggling-arbitrary-data-through-an-emoji/">https://paulbutler.org/2025/smuggling-arbitrary-data-through-an-emoji/</a><br/><br/>#emoji #hiddendata #fun <br/><br/> 2025-08-09T17:04:13Z https://nostr.ae/nevent1qqsx904um8wj6swp0crd425elgumx4mf6j2mlkrdhrvn4q6qzp4mvrczyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqaajep5 &#34;Cracking the Vault: how we found zero-day flaws in authentication, identity, and authorization in HashiCorp Vault&#34;<br/><br/><a href="https://cyata.ai/blog/cracking-the-vault-how-we-found-zero-day-flaws-in-authentication-identity-and-authorization-in-hashicorp-vault/">https://cyata.ai/blog/cracking-the-vault-how-we-found-zero-day-flaws-in-authentication-identity-and-authorization-in-hashicorp-vault/</a><br/><br/>#security #cybersecurity #infosec #hashicorp #vault <br/><br/> 2025-08-08T09:58:06Z https://nostr.ae/nevent1qqsy6f8tshnx9g7qxp235ahk55kzsnqs0utsaaj7nqrh5apehwqd7eszyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqzpzxl4 &#34;We replaced passwords with something worse&#34;<br/><br/><a href="https://blog.danielh.cc/blog/passwords">https://blog.danielh.cc/blog/passwords</a><br/><br/>#security #passwords #web #authentication <br/><br/> 2025-08-07T08:58:54Z https://nostr.ae/nevent1qqs02a3vm97tczyphk2f969e907693sjdclsa2eac6j60282aqdvuxqzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqdhe47r &#34;Sign in with Google in Chrome&#34;<br/><br/><a href="https://underpassapp.com/news/2025/7/5.html">https://underpassapp.com/news/2025/7/5.html</a><br/><br/>🚯<br/><br/>#web #browsers <br/><br/> 2025-07-29T19:00:33Z https://nostr.ae/nevent1qqsqnpsat92leug4g9h28p4jp90u0p5jwjks9p4s9x6ykqgfkq9as4szyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqzdc6jn In reply to <a href='/nevent1qqszejt69yu4z6kpyyhl8dq4cxqmcf3j6dwtl9a2pltugg8x7xm4z7cprfmhxue69uhhq7tjv9kkjepwve5kzar2v9nzucm0d5hszawnpf'>nevent1q…wnpf</a><br/>_________________________<br/><br/>Interesting approach... Probably a better system than the rest. Let&#39;s see. <br/><br/> 2025-07-27T23:28:32Z https://nostr.ae/nevent1qqsw5p4rgp83q8y2uukxsygkmrre3fp4eg9g0trvv75dlcss9r64heszyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqe6eqjd &#34;Python Gotcha: Logging an uncaught exception&#34;<br/><br/><a href="https://andrewwegner.com/python-gotcha-logging-uncaught-exception.html">https://andrewwegner.com/python-gotcha-logging-uncaught-exception.html</a><br/><br/>#python #programming <br/><br/> 2025-07-24T19:11:17Z https://nostr.ae/nevent1qqsgzkajcyk8khegstu5yuf0rn0d940v7zqumr5y3y4dswhyd988taszyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsqwx6ehl &#34;Design Patterns You Should Unlearn in Python-Part1&#34;<br/><br/><a href="https://www.lihil.cc/blog/design-patterns-you-should-unlearn-in-python-part1">https://www.lihil.cc/blog/design-patterns-you-should-unlearn-in-python-part1</a><br/><br/>#python <br/><br/> 2025-07-24T19:06:43Z https://nostr.ae/nevent1qqsgwcdq8ftm6stcryv2mukdwn6xkdv5upflandjvdpjlxzxfd4fvyqzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsq5hp6j6 &#34;Evolution Mail Users Easily Trackable&#34;<br/><br/><a href="https://www.grepular.com/Evolution_Mail_Users_Easily_Trackable">https://www.grepular.com/Evolution_Mail_Users_Easily_Trackable</a><br/><br/>#email #evolution #security #privacy <br/><br/> 2025-07-09T21:35:06Z https://nostr.ae/nevent1qqs072c45spsv0vfcy5gvgfudvxwmqw8ngyxwmzxu5a3khxmayjlweszyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsq6f9xrj &#34;CVE-2025-48384: Breaking Git with a carriage return and cloning RCE&#34;<br/><br/><a href="https://dgl.cx/2025/07/git-clone-submodule-cve-2025-48384">https://dgl.cx/2025/07/git-clone-submodule-cve-2025-48384</a><br/><br/>#security #git #rce <br/><br/> 2025-07-09T10:46:32Z https://nostr.ae/nevent1qqs28zecrs0zgcna3euhp4gfcr4qh3qwy65zx2u9u7v6a6qdpch2feszyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsq4kyue9 &#34;How to Migrate your Python &amp; Django Projects to uv&#34;<br/><br/><a href="https://www.caktusgroup.com/blog/2025/06/11/migrating-python-django-projects-uv/">https://www.caktusgroup.com/blog/2025/06/11/migrating-python-django-projects-uv/</a><br/><br/>#python #uv #django <br/><br/> 2025-07-08T20:30:28Z https://nostr.ae/nevent1qqsg7wv9jfzrg08smjymfpj7va2tw8uak3k957njh6ervgy3xchf2pgzyrql2zxkp9wl9us64592r9jcf2wtwnuqfl5wrqw67gz7ehy6wjmsq9tsmq6 &#34;How I Scanned all of GitHub’s “Oops Commits” for Leaked Secrets&#34;<br/><br/><a href="https://trufflesecurity.com/blog/guest-post-how-i-scanned-all-of-github-s-oops-commits-for-leaked-secrets">https://trufflesecurity.com/blog/guest-post-how-i-scanned-all-of-github-s-oops-commits-for-leaked-secrets</a><br/><br/>#git #github #security #infosec <br/><br/> 2025-07-02T20:04:16Z