tadl

[rekdt @rekdt]

It’s really funny watching companies learn things like patching at high velocity isn’t a cybersecurity silver bullet

The state of cybersecurity is so bad in tech today, they’re recreating defense in depth from first principles

[Jitse Groen @jitsegroen]

Hey @elonmusk please stop auto translating everything. It is very annoying to us Europeans ..

[John Bistline @JEBistline]

This is my favorite climate change chart. Japanese monks, aristocrats, and emperors kept meticulous records of cherry blossom festivals for 1,200 years and accidentally built the world's longest climate dataset.

[tadl @_tadl_]

@robertgraham The image may be wrong but the text is a literal quote from the NYT:
https://t.co/ZZOzPJfR31

[Anvil Secure @anvil_secure]

New blog post: Breaking SAPCAR! 🪓

@Anvil_Secure's Tao Sauvage shares new research on four local privilege escalation bugs in SAPCAR’s SAR parsing. A great example of the deep, methodical work we value at Anvil.

Read it here: https://t.co/kJfhxedD9k

#infosec #SAPSecurity

[tadl @_tadl_]

@_dirkjan Probably the 2025 bug bounty budget is empty.

[tadl @_tadl_]

@dhh Because the annoyance with software that looks amazing but is unusable is infinitely worse than the annoyance with software looks ugly but is efficient

[Dirk-jan @_dirkjan]

I've been researching the Microsoft cloud for almost 7 years now. A few months ago that research resulted in the most impactful vulnerability I will probably ever find: a token validation flaw allowing me to get Global Admin in any Entra ID tenant. Blog: https://t.co/jD6EaGtsn3

[tadl @_tadl_]

@_dirkjan @bookingcom This has been going on for months and @bookingcom does not seem to care about it. Made the news in several countries already, e.g. https://t.co/C33Z9X7tvE