Not Afraid

Full time Backend & Postgres.
Part time Infra & Web Security hobbyist!

[Atlas Press @realAtlasPress]

Leonardo da Vinci's greatest paragraph

[Not Afraid @ohyeah_xdd]

+++
Best place to learn with hands on labs. I absolutely recommend everyone to give it a try.

[Ivan Velichko @iximiuz]

LeetCode but for Linux, Docker, Kubernetes, and Networking problems? 🤔

245 hands-on challenges (over half are free) based on real-world scenarios that come with:

- Preconfigured environments
- Automated verification
- Hints and editorial solutions

https://t.co/ZTwhoT3YZx

[Not Afraid @ohyeah_xdd]

Yes.
But their git diff sidebar UI for 500+ lines is way too slow then I expected. That was first time when the screen froze for a few seconds for me.
Hope they'll fix it soon.

[athas.dev @athasdev]

Zed is so fast that for the first time in 2 years I finally saw their loading spinner. I'm flabbergasted

[Not Afraid @ohyeah_xdd]

@deeppp_fr @ItsAditya_xyz @DarthKermi72747 🕊️✌️

[Not Afraid @ohyeah_xdd]

@ArulGandhi69420 Fun read.

ps: use awesome screenshot chrome extension to edit images taken via screenshots.

[Not Afraid @ohyeah_xdd]

@ItsAditya_xyz @DarthKermi72747 These kids are a little too excited, thinking it's all fun n games. But don't realize that, they are playing with fire.

It is absolutely not legal to disclose such stuff. CERT is not taking action, so it's good, else they gonna get so much trouble.

[Het Mehta @hetmehtaa]

Hot take: Kali Linux is not what makes someone a good pentester.

Knowing what command to run is not the same as understanding what it does.

Most people who install Kali and run Metasploit couldn't explain why the exploit works.

The Hacker Recipes
InternalAllTheThings
HackTricks Cloud
https://t.co/uRvDL7oagG

These build understanding.

Kali builds familiarity.
Different things.

[Not Afraid @ohyeah_xdd]

@thetirthparmar Impressive find!

[Not Afraid @ohyeah_xdd]

ref: https://t.co/otayYcy1ir

[Not Afraid @ohyeah_xdd]

Spent whole day trying to debug an issue causing conflicts due to SERIALIZABLE transaction isolation.

Pretty interesting learnings.
- If a query does Seq scan, then Postgres takes a SIREAD lock on whole table and any inserts by other transaction will fail

[Not Afraid @ohyeah_xdd]

Used my simple intuition to comment out all DB calls(15+) and start with just 2 query and incrementally uncomment.

Read more docs and was eventually able to figure it out.

[Not Afraid @ohyeah_xdd]

AI agents were pretty much useless to help me debug the cause.
5.5 high started making some weird assumptions and trying to fix directly.

[Not Afraid @ohyeah_xdd]

Just pointing to CC isn't enough, you need some skills atleast. But yes it would be great if more people learn and report these vulns.

[0x1622 @0x1622]

Pretty sure the amount of hacks on the govt sites gonna increase drastically after this whole cbse drama
Almost everyone has access to codex/claude and they are just a prompt away from getting a RCE

[Not Afraid @ohyeah_xdd]

@ItsAditya_xyz me sir

[Not Afraid @ohyeah_xdd]

@sidharthify Look at his tweets, he's brain dead. Ignore him

[Not Afraid @ohyeah_xdd]

@Kshatriyaputram @thetirthparmar Please feel free to DM me when you get a moment.
this weekend is almost gone and next week I'm oncall. But I'll definitely spend some time the following week :)

Been reading a lot lately related to this stuff.

[Not Afraid @ohyeah_xdd]

@tinopreter That's a cool one, thanks for sharing!

[Son Luong @sluongng]

Codex just found a “workaround” of not having sudo on my pc…

[Not Afraid @ohyeah_xdd]

@ArulGandhi69420 Amazing write-up man. Keep them coming, I'm enjoying all these writeups for OSM, this one 😇

[sidharth @sidharthify]

almost every single OnMark portal built by EduTek is fundamentally insecure, and CBSE is lying to you about the safety of student data.

we found default passwords, URL-based RCEs, and raw MD5 hashes. millions of students are at risk.

read the blog here: https://t.co/D4CXnIadmd