Dinko Korunic

Principal Cloud Architect at HAProxy Technologies / Executive Product Manager at Crossvallia

[Dinko Korunic @dkorunic]

I am moving to🦋 due to better and more active community and I implore you to consider the same.

[Dinko Korunic @dkorunic]

My small Proteco MOVER/CAT gate encoder and decoder patch is now part of the latest Flipper Zero Unleashed firmware! A mini-project in the making since 2024: https://t.co/WJvI5NBuFk #FlipperZero #ReverseEngineering

[Dinko Korunic @dkorunic]

BalCCon2k26 - Igor Brkic - Power Analysis Attacks 101 - From Waveform to Private Key: https://t.co/3D08b7oDwE https://t.co/sBJ45ueO7y #security #secops #cryptography

[Dinko Korunic @dkorunic]

A new Flipper Zero app: flipper-proteco -> bringing Proteco MOVER and CAT garage gates remote control protocol support to the Flipper ecosystem. https://t.co/TAIS74uo9t #FlipperZero #Proteco #IoT #ReverseEngineering #OpenSource #HardwareHacking

[Dinko Korunic @dkorunic]

yes, any password. yes. i know. yes. https://t.co/W1ucAYs1hT #security #ssh #sysops

[Dinko Korunic @dkorunic]

CVE-2026-116366: Unauthenticated RCE in ClickHouse Server caused by an out-of-bounds write in the Brotli decoder.
Technical details and PoC: https://t.co/H6spj0Ls9W
#security #cybersecurity #CVE #ClickHouse

[Dinko Korunic @dkorunic]

Introducing zet-rvcard, my open-source project exploring Zagreb's ZET card system through reverse engineering and technical investigation. Check out the code, explore the findings, and follow the project on GitHub: https://t.co/LZpPNXKRxQ #CyberSecurity #InfoSec #OpenSource

[Dinko Korunic @dkorunic]

Given recent developments, perhaps it’s time to consider an alternative to traditional PHP: a Rust-based reimplementation. An interesting project to keep an eye on: https://t.co/inFw7uNnWP
#security #PHP #Rust

[Dinko Korunic @dkorunic]

ECDSA curve origins: https://t.co/VWotntYTm5 #cryptography #ellipticcurves #programming

[Dinko Korunic @dkorunic]

Prompt injection via cloned repo: ponytail’s SessionStart hook piped raw repo text (multi-line export { } lists, odd folder names) into the model’s hidden context. PR: identifier-only export entries + safe-path filter.
https://t.co/zhPYK5mkn3 #security #appsec #aisecurity

[Dinko Korunic @dkorunic]

Planning tonight’s imaging session? astro-recommender now runs client-side as a Go WASM build, so you can rank targets without installing anything. This was my first Go-to-WASM port and it was much smoother than expected: https://t.co/nFHqDhFxrG #astrophotography #golang

[Dinko Korunic @dkorunic]

Spent many sleepless nights on this: astro-recommender, a static binary (Linux/macOS/Win) picking best imaging targets per night/location. Scores clouds, dew, wind, airmass, light pollution, moon, FOV. No subscriptions, no API keys. https://t.co/Ixn0qB6A9n

[Dinko Korunic @dkorunic]

betteralign v0.12.0 is out at https://t.co/gBHttsev0R! A major upgrade for Go developers: improved robustness, faster performance, a completely rewritten & fuzz-tested AST decorator, refreshed docs, and updated benchmarks. Especially effective in large monorepos. #golang #devops

[Iceman @herrmann1001]

I know it is really hard to understand how much better and improved the proxmark3 has become over the years.

Here is a graphic list of the following card technologies that is currently supported in #proxmark.

[Ivan Krstić @radian]

🔺NEW: Formally verified post-quantum ML-KEM and ML-DSA in corecrypto, with correctness proven from the FIPS spec down to hand-optimized ARM64 assembly — a world first at multi-billion device scale. And we're releasing our Isabelle libraries, ARM64 model, and Cryptol-to-Isabelle translator to advance the state of the art in verified cryptography! https://t.co/LZPHFD0ifE

[Dinko Korunic @dkorunic]

betteralign https://t.co/gBHttsev0R: evolved fork of Go's fieldalignment. Preserves field comments through reordering, skips generated files, atomic writes. Months of allocation profiling baked in. Serious struct padding without wrecking your codebase. #golang #devops

[Dinko Korunic @dkorunic]

Spent the weekend nights reviving a 15-year-old toy project of mine: a Linux uptime spoofer. Ported it to modern kernels and refreshed the codebase along the way: https://t.co/Ywl7BFxmuN #linux #kernel #devops #security

[Dinko Korunic @dkorunic]

Tomorrow I’ll be giving a talk at Bsides Varaždin titled "Caveats of Using eBPF in Linux". If you're interested, you can check out the slides here: https://t.co/pmOglnk1cL
Feel free to stop by, listen in, and join the discussion! #ebpf #linux #sysops #kernel

[Dinko Korunic @dkorunic]

Astrophotography has a quiet magic I didn’t expect. Valentina and I have been spending our nights under the stars, and this is what came out of it: ~700 frames, 20s each, capturing Bode’s Galaxy.

Curious to hear what you think ✨

[Iceman @herrmann1001]

The latest Proxmark3 release is called BREAKMEIFYOUCAN!

Not a random name.

That is the actual 3DES factory default key NXP burned into every MIFARE Ultralight C they shipped since 2008.

Somebody finally broke it properly.

The paper drops the keyspace from 2^112 down to 2^28.

Counterfeit cards fall in under 60 seconds from a single card interaction. The tooling is merged: https://t.co/2CYKrRdv22

#Proxmark3 #RFID #NFC #MifareUltralightC #NXP #OpenSource

[Viacheslav Biriukov @brk0v]

🦀 Rust: Deadlock-Free Mutexes

Instead of hoping lock ordering is correct at runtime, Surelock pushes deadlock prevention into the type system:
• invalid lock ordering rejected at compile time
• ergonomics that still feel practical

https://t.co/Q7PIWA7Byh
#rust #rustlang