Full-stack developer with special interest in cybersecurity.
Public Key
npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 Profile Code
nprofile1qqsvragg6cy4muhjr2ks4gvktp9fed60sp873cvpmteqtmxunf6twqqpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0ds0z5843
Show more details
Published at
2024-02-20T23:10:04Z Event JSON
{
"id": "f97f6fb332ebed960259ba24b592abecc2999effd95ecaf0ab7bfc1c5cf553a4" ,
"pubkey": "c1f508d6095df2f21aad0aa196584a9cb74f804fe8e181daf205ecdc9a74b700" ,
"created_at": 1708470604 ,
"kind": 0 ,
"tags": [],
"content": "{\"name\":\"dethos\",\"about\":\"Full-stack developer with special interest in cybersecurity.\\n\\nAdvocate of a free and safe Internet. Nature admirer and sports enthusiast.\",\"lud16\":\"[email protected] \",\"display_name\":\"Gonçalo Valério\",\"picture\":\"https://m.primal.net/HcUd.jpg\",\"banner\":\"https://m.primal.net/HcUe.jpg\",\"website\":\"https://ovalerio.net\"}" ,
"sig": "d99ce18fc0ebe30584432155b8c8c9df5b8e34a8996f3146bb2ad18b118e46151cee220960eb92a87936a0e18d8b1a52b8900ddacd1e99e7583b643874a90b4a"
}
Last Notes npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "Web Security is Too Hard" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "Massive ChainDrop npm supply-chain attack infects hundreds of packages" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "Okay, grok has uploaded my entire user directory to xAI's servers." npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos PlayStation Is Deleting 551 Movies From Customers’ Accounts, Reminding Us Nothing Digital Is Ever Truly Ours" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos ".gitignore Isn’t the Only Way To Ignore Files in Git" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "GitHub Actions Security Checklist for Supply Chain Attacks" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "1-Click GitHub Token Stealing via a VSCode Bug" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "The Newest Instagram "Exploit" is the Goofiest I've Seen" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "Motorola phones have started hijacking the Amazon app to insert affiliate codes" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos OpenSUSE Slowroll just landed on my test machine. Looking and behaving good. 👍 npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "Microsoft BitLocker-protected drives can now be opened with just some files on a USB stick — YellowKey zero-day exploit demonstrates an apparent backdoor" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos Is anyone surprised? 🥸 npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos Credit Cards Are Vulnerable To Brute Force Kind Attacks" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos As if you needed more reasons to stop using Windows and other Microsoft products and services. npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos A couple of links with tips to help with supply chain security: npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "Django security releases issued: 6.0.4, 5.2.13, and 4.2.30" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos Isn't graphene just a special flavour of android? npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "axios Compromised on npm - Malicious Versions Drop Remote Access Trojan" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "End of “Chat Control”: EU Parliament Stops Mass Surveillance in Voting Thriller – Paving the Way for Genuine Child Protection!" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "A YC-Backed Startup Left Production AWS Keys Public for 5 Months. Their VDP Was Silent." npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos Managing SSH keys with KeePassXC is actually quite nice npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "Lock the Ghost: In the software world, “remove” is not equal to "gone."" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "Jazzband is sunsetting. New signups are disabled. Project leads will be contacted before PyCon US 2026 to coordinate transfers." npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "Hisense TVs force owners to watch intrusive ads when switching inputs, visiting the home screen, or even changing channels" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "Replacing tox with UV" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos Chat Control, mass surveillance, and then... npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "The AWS Console and Terraform Security Gap" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos When a vendor doesn't release the software using one of these methods. Curl bash is very common for example. npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "Claude is an Electron App because we’ve lost native" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos I get it using the distro's package manager. That's it. npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "Google API Keys Weren't Secrets. But then Gemini Changed the Rules." npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos ""Made in EU" - it was harder than I thought." npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "Leaking secrets from the claud" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "Spying Chrome Extensions: 287 Extensions spying on 37M users" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "We should all be using dependency cooldowns" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "Django security releases issued: 6.0.2, 5.2.11, and 4.2.28" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos Notepad++ Hijacked by State-Sponsored Hackers npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "But how to get to that European cloud?" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "Google confirms 'high-friction' sideloading flow is coming to Android" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "FOSS for digital sovereignty in the EU" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "Instagram account takeover via Meta Pixel script abuse" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "Claude Cowork Exfiltrates Files" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "European Commission issues call for evidence on open source" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "Safe Django migrations without server errors" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "A post-American, enshittification-resistant internet" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "Google will now only release Android source code twice a year" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "Bye Bye Big Tech: How I Migrated to an almost All-EU Stack (and saved 500€ per year)" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos The books I enjoyed the most in 2025 npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "MongoBleed explained simply" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "Merry Christmas Day! Have a MongoDB security incident." npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "Help my website is too small" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "NPM Package With 56K Downloads Caught Stealing WhatsApp Messages" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "Over 10,000 Docker Hub images found leaking credentials, auth keys" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos More app recommendations npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "GitHub Actions Has a Package Manager, and It Might Be the Worst" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos Fairphone open-sources Fairphone 5 and 6 software, and Moments switch npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "When Password FieldsAren’t Enough – Client-Side SecretExposure in PagerDuty Cloud Runbook" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "Critical Security Vulnerability in React Server Components" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "Disable network requests when running Pytest" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "Django security releases issued: 5.2.9, 5.1.15, and 4.2.27" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "Shai-Hulud Returns: Over 300 NPM Packages infected via Fake Bun Runtime Within Hours" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "The privacy nightmare of browser fingerprinting" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "Yes, Steam Machine is optimized for gaming, but it's still your PC. Install your own apps, or even another operating system. Who are we to tell you how to use your computer?" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "sudo-rs Affected By Multiple Security Vulnerabilities - Impacting Ubuntu 25.10" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "10 Smart Performance Hacks For Faster Python Code" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "What data do coding agents send, and where to?" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "7 vulnerabilities in django-allauth enabling account impersonation and token abuse" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "Critical RCE Vulnerability CVE-2025-11953 Puts React Native Developers at Risk" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "Django security releases issued: 5.2.8, 5.1.14, and 4.2.26" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "Samsung makes ads on $3,499 smart fridges official with upcoming software update" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "How I Almost Got Hacked By A 'Job Interview'" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "Pixnapping Attack" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "CamoLeak: Critical GitHub Copilot Vulnerability Leaks Private Source Code" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "HTTP/1.1 must die: the desync endgame" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "What is "good taste" in software engineering?" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "Red Hat confirms security incident after hackers claim GitHub breach" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "Django security releases issued: 5.2.7, 5.1.13, and 4.2.25" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "... proof-of-concept transparent proxy PyPI mirror that demonstrates how code can be modified inline and pass hash checks" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "One Token to rule them all - obtaining Global Admin in every Entra ID tenant via Actor tokens" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "Self-Replicating Worm Hits 180+ Software Packages" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "npm debug and chalk packages compromised" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "Django security releases issued: 5.2.6, 5.1.12, and 4.2.24" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "Supply Chain Security Alert: Popular Nx Build System Package Compromised with Data-Stealing Malware" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "Burner Phone 101" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "DOM-based Extension Clickjacking: Your Password Manager Data at Risk" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "ghrc.io Appears to be Malicious" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "Copilot Broke Your Audit Log, but Microsoft Won’t Tell You" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "SystemD Service Hardening" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "StarDict sends X11 clipboard to remote servers" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "Smuggling arbitrary data through an emoji" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "Cracking the Vault: how we found zero-day flaws in authentication, identity, and authorization in HashiCorp Vault" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "We replaced passwords with something worse" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "Sign in with Google in Chrome" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos Interesting approach... Probably a better system than the rest. Let's see. npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "Python Gotcha: Logging an uncaught exception" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "Design Patterns You Should Unlearn in Python-Part1" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "Evolution Mail Users Easily Trackable" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "CVE-2025-48384: Breaking Git with a carriage return and cloning RCE" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "How to Migrate your Python & Django Projects to uv" npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9 dethos "How I Scanned all of GitHub’s “Oops Commits” for Leaked Secrets"
