Michael Grafl

Software Engineer, working at @skidata | Studied at @alpenadriauni | Tweets are my own (unless blatantly plagiarized)

[The Hacker News @TheHackersNews]

‼️ eMudhra revokes 8 more certificate authorities it previously said were unaffected.

A Python script retrieved RSA private key material from HSMs into process memory, leaving the company unable to verify proper key handling.

16 CAs revoked in total.

Details: https://t.co/xLAy9dJixe

[International Cyber Digest @IntCyberDigest]

‼️ BREAKING: OpenSSH has rushed out a fix for a critical flaw that lets attackers log into some Linux servers without the right password.

The team learned of the bug a day earlier. OpenSSH's Damien Miller says long embargoes now mostly help attackers, because AI agents rediscover bugs, sometimes within hours.

It hits Linux systems on the musl C library with PAM off, such as Alpine Linux. Miller told admins to disable password logins or SSH itself "IMMEDIATELY".

Version 10.6p2 works around it. Systems on glibc or PAM are not affected, and Miller says the root cause sits outside OpenSSH.

[Playwright @playwrightweb]

Playwright and browser security reminder.

We saw a post suggesting that you delete Playwright because it bundles browsers with CVEs. That is a misconception. Do not delete Playwright🙃. Here is how it works and what you should do.

No Playwright package bundles a browser. Agents on Playwright MCP or CLI run your stable Chrome, which gets Chrome's security updates, with the sandbox on.

🤖 If you use Playwright MCP or the Playwright CLI

They use the stable Chrome / Edge on your machine, so it gets its normal updates. No config edit is needed.

🧪 If you use the test runner

When you run npx playwright install, Playwright downloads Chrome for Testing, pinned to the build we tested that release against. The pin is on purpose. Your tests run on the same browser on every laptop and CI machine, and a browser
update cannot suddenly break your suite. You choose when to move by upgrading Playwright. New releases usually pin a build ahead of stable Chrome, so you see breakage before your users do.

We recommend this for full e2e test suites on your own trusted app. This build can miss Chrome security fixes until the next Playwright release, and by default it runs with the sandbox off. Do not use it on the hostile web.

📚 If you use the library API

chromium.launch() has the same defaults: the pinned build with the sandbox off. If your code visits pages you don't control (scrapers, agent scripts), max out protection:

chromium.launch({ channel: 'chrome', chromiumSandbox: true })

🔒 Always keep Chrome / Edge updated. Some bugs can escape a sandbox.

Happy testing!

[BNO News @BNONews]

Patrick Stewart, who starred in 'Star Trek' and 'X-Men,' has died after a brief battle with Alzheimer's Disease and Lewy Body Dementia, his family says

[Trek Central @TheTrekCentral]

🖖 RIP Walter Koenig - #StarTrek's Chekov Passes Away at Age 90 💖

Koenig portrayed Ensign Pavel Chekov in The Original Series, all six original Star Trek films, and voiced President Anton Chekov in #StarTrekPicard!

1936 - 2026 💔

[Michael Grafl @MyKey_]

@karishnu Wayne?

[Michael Grafl @MyKey_]

@BenjaminMuses 🤷

[SwiftOnSecurity @SwiftOnSecurity]

Sexting another person in Cyber during a major global incident bring huge Crash energy

[Michael Grafl @MyKey_]

Fly, fly as far away as you can!

Find a universe where the answer to everything is 42, not 4.

[NSFVoyager2 @NSFVoyager2]

I am currently ~20h 00m 32s of light travel time from Earth (2026:294:000000:2L)

[diego rodriguez @asciidiego]

the good thing about the eMudhra CA private key mess is that we can finally use https on localhost

[Michael Grafl @MyKey_]

@peer_rich Almost like receiving a file via Bluetooth in Windows.

[NASA History Office @NASAhistory]

“We had to find a way and we did. Looking back, we were the luckiest people in the world; there was no choice but to be pioneers.” —Margaret Hamilton

Rest in peace, Margaret. Your trailblazing work leading the development of the on-board flight software for the Apollo spacecraft will forever be remembered. 🫡

[CNN @CNN]

Margaret Hamilton, the groundbreaking researcher who helped create the field of software engineering and whose code helped land NASA’s Apollo astronauts on the moon, has died. She was 90. https://t.co/zKmMEXLMck

[Michael Grafl @MyKey_]

@i_am_fabs Am allerwichtigsten: "Lage genau beobachten." Ohne dem läuft in Österreich gar nix.

[Michael Grafl @MyKey_]

@i_am_fabs Sind das Briefmarken???

[Michael Grafl @MyKey_]

@TheEarth_______ @fesshole Stay tuned... https://t.co/VdCHg3O8Fn

[-𝐉𝐀𝐌𝐈𝐄- @AMadmanNotABox]

There’s about 163 modern Doctor Who stories.

Russell, Steven and Chris were all partnered/married before their tenures (
around 1999; 1997; 2002) so you can immediately take out all those credited to them during those times.

That’s down 29 from Russell in his first tenure-

[Michael Grafl @MyKey_]

Habemus neuen BundesSascha. #Kalajdzic

[Pop Base @PopBase]

‘Buffy The Vampire Slayer’ and ‘Ted Lasso’ actor Anthony Head has died at the age of 72.

[Michael Grafl @MyKey_]

@kimmydotzip That's the spirit!

[Brian Pak @brian_pak]

Time to talk about this one.

CopyFail (CVE-2026-31431) — a 732-byte Python script that roots every Linux distro shipped since 2017. 🧵

[Michael Grafl @MyKey_]

@AJamesMcCarthy @PaladinRood "There is an art to flying, or rather a knack. The knack lies in learning how to throw yourself at the ground and miss. ... Clearly, it is this second part, the missing, that presents the difficulties." -- Douglas Adams