Marco Bonelli

I like hacking

[mhackeroni @mhackeroni]

Grazie Carola, ci mancherai
https://t.co/fqiYPgvSy5

[Marco Bonelli @mebeim]

-O3 -ffuck-math

[tommy @thmorriss]

gcc flag that sets pi to 3

[Marco Bonelli @mebeim]

@InfraScaler Windows here don't slide open so it's a real pain in the ass to seal the gap if you run a portable AC unit. The plastic/cloth thingy is very inefficient, specially if it gets very hot and the glue of the velcro strip applied to the window frame starts melting 🫠

[Marco Bonelli @mebeim]

Today I have to waste half the morning to go and get a wooden panel to replace half my bedroom window because it's become impossible to sit ad my desk even with a portable A/C unit running since the negative pressure forced hot air back in through its stupid cloth cover… OOF.

[Marco Bonelli @mebeim]

@reallyoptimized @aramh Yeah sure, the USA is huge and it's really amazing how much you can see there.

[Marco Bonelli @mebeim]

@reallyoptimized @aramh Ok, maybe they can go to Canada / Puerto Rico and a couple others (with ID still).

[Marco Bonelli @mebeim]

@reallyoptimized @aramh OP is trying to "gotcha" EU when they literally cannot travel to any other country w/o a passport and we most definitely can. That was the whole point of my reply.

[Marco Bonelli @mebeim]

@reallyoptimized @aramh Changed my reply after doing 1+1 sorry about that. What can I say except you guys are unlucky and all the rest of us can and do travel without a passport :') sorry.

[Marco Bonelli @mebeim]

@reallyoptimized @aramh Alright, you Danes are truly unlucky, I will admit it (if that's what you are hinting at). Doesn't change the fact that a passport is not required nor "encouraged" in any way to cross borders for other Schengen-area EU citizens.

[Marco Bonelli @mebeim]

Got me for a good minute LOL

[Florian Roth ⚡️ @cyb3rops]

This is how you de-escalate

[Marco Bonelli @mebeim]

@ortegaalfredo @ergot86 Like come on now...

[Marco Bonelli @mebeim]

@ortegaalfredo @ergot86 I struggle to see how this makes sense. You just end up with a bunch of code you have no clue about, that makes things slower, harder to maintain, and that could also very well break things or introduce additional bugs in ways that are hard to verify.

[Marco Bonelli @mebeim]

That's it I'm going back to church starting this sunday

[Pope Leo XIV @Pontifex]

Artificial intelligences do not undergo experiences, do not possess a body, do not feel joy or pain, do not mature through relationships, and do not know from within what love, work, friendship or responsibility mean. Nor do they have a moral conscience, since they do not judge good and evil, grasp the ultimate meaning of situations, or bear responsibility for consequences. They may imitate or even simulate, but they do not understand what they produce, for they lack the affective, relational, and spiritual perspective through which human beings grow in wisdom. #MagnificaHumanitas

[wukko @uwukko]

A fresh Brave install in 2026: sponsored ad wallpapers on new tab page by default (opt out). Brave VPN, News, Talk, Leo (AI), Rewards and other revenue-milking bloat is advertised/pinned by default. Analytics and "phoning home" by default. Google as default search engine in most regions by default. Sponsored search engines like Russian Yandex in CIS countries by default: https://t.co/nCK7ZErytG

Brave has an ad branch that handles advertising within the browser: https://t.co/EwJwKKgWxq. Brave does on-device ad targeting based on cohorts and interests, just like what Chrome used to do and what Google was largely hated for (remember FLoC?). This applies to additional (opt-in) rewarded ads, shipped as part of Brave.

Brave has injected referral IDs to crypto-related URLs entered into the omnibox in the past, intentionally, by design:
https://t.co/hovGMDz8Et
https://t.co/3wdWDEV85H
https://t.co/fo1mD75vAF

Brave also uses dark patterns to drive users away from turning off ads in their browser. For example, an article linked from the "opt out" button in the browser has a wall of text making excuses for ads before the actual steps needed to be taken to disable them: https://t.co/dka1EIMtbw

kind of hypocritical for brave to judge firefox for lesser bullshit, don't you think?

[chompie @chompie1337]

MSRC: Either you let us bully you and treat you like garbage or we’ll send you to jail

[Marco Bonelli @mebeim]

@spendergrsec Thanks for all the data!

[Marco Bonelli @mebeim]

@roddux I would be happier with no hype at all but I guess that's better than nothing haha

[Marco Bonelli @mebeim]

The hype around these new Nginx bugs is getting just a little bit ridiculous

[thaidn @XorNinja]

Someone from XBOW claimed that they found 23 nginx configs from GitHub vulnerable to nginx-rift.

It turns out 22 out of the 23 were actually PoCs of nginx-rift itself. Not sure about the remaining one. Good call from @julianor.

Here are the 4K nginx configs that we downloaded from GitHub: https://t.co/Ba27Ob6Ttz

We also did a brief analysis of nginx-poolslip, and couldn't find any vulnerable configs either. There were some close calls though.

We'll download and analyze more configs, and share our results later.

Hopefully from now on, whenever someone publishes a new nginx exploit, they also publish whether it can actually be exploited against configs found in the wild on GitHub.

Absence of evidence is not evidence of absence, but it still gives useful data points about how practical these exploits really are. Of course, people should patch anyway.