Calle Svensson

Security Engineer @ XTX. MSc in eng. physics & CompSci, dev & gamer. ❤️ music & long distance running. Wanna do a PhD sometime. Same U/N on all other sites

[Calle Svensson @ZetaTwo]

@LiveOverflow You're also wording it deliberately provocative. Compare with "I find everything in cybersecurity that isn't vulnerabilities boring as fuck" so the reactions are hardly surprising.

[Calle Svensson @ZetaTwo]

Awww yeah! Huge congratulations to everyone involved this year. Really cool to see how Sweden went from not participating to winning in a short time. My contributions this year were small but I am proud having contributed throughout the years to the build up towards this.

[European Cybersecurity Challenge @ECSC_openECSC]

After an incredible week of challenges, teamwork and intense competition, we are proud to announce the ECSC 2026 champions: Team Sweden! 🇸🇪 🇪🇺 A special thank you to Schwarz Digits for supporting ECSC 2026 and for handing over the first prize to our champions! 🏆

[Calle Svensson @ZetaTwo]

@LiveOverflow That's exactly why I said it's closely related but not the same.

[Calle Svensson @ZetaTwo]

@LiveOverflow It's closely related to (but not exactly the same as) why you should not put any kind of (long-lived) secret in a URL (path, query, etc)

[Calle Svensson @ZetaTwo]

@LiveOverflow The reason UUID is not a proper fix to IDOR is not because you can guess the ID (you can't) but because A) it does not address the root cause and B) they have different semantics and an ID risk ending up in non-private contexts: links, history, cache, etc.

[Calle Svensson @ZetaTwo]

@SaffronOlive A bit of an edge case but at my previous work we used it for asynchronous tournaments. Everyone buys their packs, builds decks and schedule matches over a period of time. We also added that you added an extra booster every other round of matches.

[Calle Svensson @ZetaTwo]

@ozeniken @0x0SojalSec @lauriewired Yeah and it would have taken 1 minute to Google FlareOn and go to the scoreboard which is live right now, or if that's too much work, search FlareOn here in Twitter where people, including the people who actually were among the fastest have posted about it.

[Calle Svensson @ZetaTwo]

@lauriewired @0x0SojalSec The post is garbage, but this year's FlareOn was completely slaughtered by AI. First clear in 65 min. I gave the challenges to Opus 5.5 with Binary Ninja but no extra prompting or techniques and it cleared it in like 2 hours

[Calle Svensson @ZetaTwo]

@jrozner Yeah, I'm not really taking that negatively impacted by it but I really do feel like if everyone just put in a tiny bit more effort into it, it could be a much better experience for everyone. I don't even mind the rejections much. I mind people not being clear and polite about it

[Calle Svensson @ZetaTwo]

Back on the dating apps since a few weeks back and I feel like this could be a much less painful experience if people afforded each other just a modicum of treating each other like actual living people.

[Calle Svensson @ZetaTwo]

@jrozner Nothing terrible and I'm having a decent experience overall but it's many tiny things where people are still behaving like they're 19, not 35. Ex. I went on a date. She was nice but clearly not a match. I texted later thanking for the date and let her know. No reply

[Calle Svensson @ZetaTwo]

@OwariDa Yeah I think so too. I'm working on that. It's also more fun to be out and about in general, even when it doesn't lead to such things.

[Calle Svensson @ZetaTwo]

@LiveOverflow @namedXbird Containers were not initially created to be a security boundary but a portability and deployment tool but it still does provide some level of separation. It's similar to how NAT was not created to be a security mechanism but turned out to be one.

[arXiv.org @arxiv]

arXiv has received a 17.2 million investment from three leading philanthropic organizations. Thank you to Simons Foundation International, Siegel Family Endowment, and XTX Markets for your support of arXiv!

Read more: https://t.co/pn54fllzLJ

[Calle Svensson @ZetaTwo]

@T90Official It's a moose in American English and an en Elk in British English. The thing you call an Elk in American English is a different animal altogether.

[Calle Svensson @ZetaTwo]

@LiveOverflow This is why I prefer terms like "coordinated disclosure" where we describe actions instead of ascribing morality. Same reason I dislike "ethical hacker". A person is not "ethical" but performs actions which are ethical or not relative to someone's morals.

[Calle Svensson @ZetaTwo]

@bl4sty Mix of Swedish and English. I will probably publish them at some point but I need to find the right framing or something to give me plausible deniability. :D

[Calle Svensson @ZetaTwo]

I have recovered my old site including my poems that I wrote in my teens. I'm torn on what to do about this because on one hand, some of them are not completely terrible but on the other hand, the themes are exactly what you would expect from an awkward and edgy teenager. :D

[Calle Svensson @ZetaTwo]

@LiveOverflow Terms are meaningless in a vacuum. Define what the purpose of the distinction is and the answer falls out as an obvious consequence of it.

[Calle Svensson @ZetaTwo]

@es3n1n That's old school. I should have one of those.