ipanda

lazy , dark circles and always hungry 🐼

[ipanda @ipanda432]

@hetmehtaa I believe this is documented somewhere in their whitehat help center page.

[Pingiskok @pingiskok]

Every JWT writeup online covers 2–3 attacks and stops.
I got tired of jumping between 40 blog posts, so I wrote the whole thing. All in one place.
https://t.co/iCSzQ4GjcS

#infosec #appsec #bugbounty #websec #jwt

[Viswanathan Anand @vishy64theking]

Congratulations @chessvaishali . She showed excellent preparation and resilience. Took the blows & delivered the punches. A proud moment for Indian chess with two Indians to cheer for in the World Championships. Personally proud that our @WacaChess mentee will now have a shot at the world title. Being from Chennai is just another flex !

[Javokhir Sindarov @GMJSindarov]

I won candidates !

[Worty @_Worty]

The #FCSC2026 ended today, my write-ups are now available on my website https://t.co/PbzPBa4dpX, don't hesitate to check them !

[aaron @aarondotdev]

Anthropic themselves found that vibecoding hinders SWEs ability to read, write, debug, and understand code.

not only that, but AI generated code doesn’t result in a statistically significant increase in speed

don’t let your managers scare you into increased productivity. show them this paper straight from Anthropic.

[Critical Thinking - Bug Bounty Podcast @ctbbpodcast]

New research just dropped by @alien2exe on hijacking OAuth popups via predictable window. open() targets.

The chain uses iframe name collision forcing the auth flow into a controlled context, eventually linking an attacker-controlled addon to leak workspace PII and config data

https://t.co/GbimNCyqxx

[Judit Polgar @GMJuditPolgar]

COME ON‼ I am super excited!🤗#QueenOfChess, Rory Kennedy’s new #documentary about my story is available on @netflix ‼
👇 Movie link in the comments - or check the Bio 👆

#ChessConnectsUs #TrueStories #IndieFilm #MoxiePictures #Honored #HumanStory #Socialimpact #InspiringStories #chess #DocumentaryFilm

[James Kettle @albinowax]

I love security research and believe everyone has the potential to do it… which makes screening/rejecting research job applicants one of the hardest parts of my job. Have to remember a rejection is not a judgement of individual potential.

[Intigriti @intigriti]

1. Open your browser console
2. Navigate to the Lighthouse tab
3. Select 'Desktop' as the device and uncheck everything except 'Best Practices' under Categories
4. Finally, click 'Analyze page load', and under the 'Trust and safety' section, you'll find a CSP report with possible bypasses! 🤠

[spaceraccoon | Eugene Lim @spaceraccoonsec]

I don't know who needs to hear this, but: If you're bug bounty hunting, test the main scope. There are far more bugs hiding there than you think...

[Judit Polgar @GMJuditPolgar]

TRAILER premiere! ❤
Rory Kennedy’s new documentary about my life, my way, Queen of Chess releases on @Netflix February 6th.✨
TRAILER👉 https://t.co/Gdmi5INjmM

#ChessConnectsUs #QueenOfChess @Netflix #Sundance2026 #SundanceFilmFestival #SundancePremiere #Netflix #Netflixpremiere #DocumentaryFilm #TrueStories #IndieFilm #MoxiePictures #Honored #WorldPremiere #HumanStory #Socialimpact #InspiringStories #trailer

[Nihal Sarin @NihalSarin]

Won Tata Steel Rapid and finished second in the Blitz.

[React @reactjs]

There is critical vulnerability in React Server Components disclosed as CVE-2025-55182 that impacts React 19 and frameworks that use it.

A fix has been published in React versions 19.0.1, 19.1.2, and 19.2.1. We recommend upgrading immediately.

https://t.co/kue7kd0XEX

[Women's Chess Coverage @OnTheQueenside]

On the podium, Hou Yifan (who took Board 1 silver 🥈) congratulated IM Ulviyya Fataliyeva on her Board 1 gold for Azerbaijan! 🇦🇿🥇🥹

📷: Pavel Dvorkovich

[James Kettle @albinowax]

I've just upgraded Turbo Intruder with a shiny new algorithm called HTTP Anomaly Rank, which automatically finds the most unusual responses in your attack! Here's a quick demo, full details in the writeup below: https://t.co/N53AuKe66x

[Tom Zahavy @TZahavy]

I am excited to share a work we did in the Discovery team at @GoogleDeepMind using RL and generative models to discover creative chess puzzles 🔊♟️♟️ #neurips2025

🎨While strong chess players intuitively recognize the beauty of a position, articulating the precise elements that constitute creativity remains elusive. To address this, we pre-trained generative models on public datasets and then applied reinforcement learning, using novel rewards designed for uniqueness, counter-intuitiveness, realism, and novelty. This approach doubled the number of novel chess puzzles compared to the original training data, while successfully maintaining aesthetic diversity.

Three distinguished experts—International Master of chess compositions Amatzia Avni (author of "Creative Chess"), Grandmaster Jonathan Levitt @JonathanLevitt7 (author of "Secrets of Spectacular Chess"), and Grandmaster Matthew Sadler @gmmds (author of "Game Changer")—evaluated and selected the puzzles they found most compelling. Their preference was for puzzles exhibiting original, paradoxical, surprising, and naturally occurring positions, with particular emphasis on those that integrated aesthetic themes in innovative ways and demonstrated exceptional over-the-board vision.

🧩Try to solve the puzzles @chesscom: https://t.co/qHxXiWC427

[Critical Thinking - Bug Bounty Podcast @ctbbpodcast]

HackerNotes TLDR for episode 144! — https://t.co/FYWKbM9FGR

►⠀Map client-side message flow aggressively: enumerate postMessage sinks, then hunt for JSON.parse followed by Object.assign to force prototype pollution via string-gated branches. Many apps gate on typeof === "string" before parsing. Craft inputs that pass the gate, then flip config flags unreachable to scanners by exploring dead-code paths and lazy-loaded chunks.
►⠀Abuse versioned config to hijack backends: if a version string resolves the WebSocket or API base URL, redirect to attacker-controlled infra.
►⠀Succeeding in LHEs and as a full-time Hunter:
⠀•⠀Optimize for MVH: target impact categories and bonus bug types the host company values.
⠀•⠀Collab with people who have expertise in different areas to cover more ground.
⠀•⠀Keep a tight routine: set fixed hacking blocks, schedule rest and study, and when focus drops, switch tasks instead of forcing it.

[ipanda @ipanda432]

@mksighs 👀👀👀

[joernchen @joernchen]

Today I have a more serious topic than usual, please consider reposting for reach:

My wife and I are urgently looking for a specialist in neuropediatrics or a similar field for our autistic child with a diagnosed, but not further specified, movement disorder [1/3]