Oleg Gantumur

just a digital wanderer

[Oleg Gantumur @olegbnoo]

@thsottiaux dots are soo cool! you can just do things.
i have some feedback though.
1. mobile calls fail sometimes, i once even had my dot to pick up a call, but app was still dialing
2. can we enrich vocab in the call? “let me check” is an answer to almost any inquiry

[Oleg Gantumur @olegbnoo]

@thsottiaux proper ui for questions in codex remote app

[Oleg Gantumur @olegbnoo]

@vxunderground go go smelly

[Oleg Gantumur @olegbnoo]

@uug4na_ he is my grandpa too and i am so happy i can’t express with words

[Oleg Gantumur @olegbnoo]

@mdisec https://t.co/rLKTVA5PuM

[Oleg Gantumur @olegbnoo]

Claude seems to be fixated on FNV-1a hash somehow?

[Oleg Gantumur @olegbnoo]

@NightmaresUwUL @Hacker0x01 I ended up getting API keys of the DB and finding admins’ emails and sending them a letter directly :)

[Oleg Gantumur @olegbnoo]

@i2cjak would they also do a fault injection to extract flash encryption keys?

[Octane Security @octane_security]

https://t.co/JWhWyqqmY0

[Voidwalker @JustWantToQ1]

XD

[Dillon Mulroy @dillon_mulroy]

subagents are sparkling map reduce

[Oleg Gantumur @olegbnoo]

Another day, another n8n RCE: https://t.co/9AyZRJ0IP5

They are cooking bullet-proof protections though

[Behi @Behi_Sec]

Hackerone triager is asking me a lot of questions. It’s a distillation attack, obviously.

[Asian Cyber Security Challenge (ACSC) @acsc_asia]

📣 ICC 2026 Team Asia – Support Call

ICC 2026 will be held in Gold Coast, Australia (May 2026).

Due to various circumstances, ACSC will not be held this year. However, Team Asia will be formed mainly from last year’s members, considering past ACSC results and available support from member organizations.

If you are an individual or organization willing to support Team Asia players, please contact us via the form below.

🔗 Inquiry form: https://t.co/o6pPu3LHv5

#acsc_asia
#ctf
#TeamAsia
#cybersecurity
#ICC
#IC3Games
#InternationalCybersecurityChallenge
#AusCERT
#UQCyber

[Guilherme Delgado @grdelgado7]

Starting with Kotlin 2.4.0, Kotlin Flows can be exported and consumed as Swift AsyncSequences 🥳

Kudos to @mMaxy85 and the team!

https://t.co/Mte5sTG4AQ

#KMP #kotlin #swift #coroutines #swiftConcurrency

[Oleg Gantumur @olegbnoo]

Turns out like 10 people found the same vulnerability :)
I counted 6 different payloads, 5 of them I found independently, 6th one was found by folks from JFrog.
My writeup: https://t.co/zyyYWfOYnZ

[The Hacker News @TheHackersNews]

⚠️ Critical RCE flaw in n8n (CVE-2026-25049, CVSS 9.4) lets authenticated users execute system commands via crafted workflow expressions.

Public webhooks exposed → remote trigger, credential theft, server takeover.

🔗 Exploit path, affected versions, patch details → https://t.co/9qH5J54pao

[Oleg Gantumur @olegbnoo]

@fatihclk01 Great article! I'd like to add a couple of exploits I found when researching CVE-2026-25049: inheritance, variable shadowing and TOCTOU in sanitizer.
https://t.co/zyyYWfOYnZ

[Oleg Gantumur @olegbnoo]

type-checks, linting and limiting cyclomatic complexity are the key for keeping tech debt low

[Oleg Gantumur @olegbnoo]

`git fetch . develop:main` to fast-forward a branch, `git push --all` to push them all

[Oleg Gantumur @olegbnoo]

quick reminder: never decode blurhash on UI thread unless you want lags for free :)