7 Tips to Make GitHub CLI (gh) Faster for Linux Automation: https://www.tecmint.com/gh-cli-performance-tips/
Search
1000 results for “infosecdj”
-
👉 For everyone who started #Node2Shell triage over the weekend, we see you and your huge effort! If you need a hand, we just added detection for CVE-2026-111497 to our Network Scanner, in every paid plan. ( ⏭️ Free trial link below.)
The scan tests if your endpoint decodes Brotli with a vulnerable decoder, so you see reachability (not a version guess). Once it completes, you get a PDF report with: 👇
✅ the finding and the request and response behind it
✅ the fixed release for Node.js, Bun, or Envoy
✅ the CVSS score and severity rating
✅ remediation steps you can hand to whoever owns the fix
❗One thing to check before you call it patched: the runtime hides in more places than your package.json shows. Container base images, Envoy and Istio sidecars, and Python services that use the Brotli or brotlicffi packages all carry their own copy of the decoder.
Need to check every service, rescan after each patch, or document findings for compliance? Start Node2Shell detection with the Network Scanner with a free trial. ⬇️ ⬇️ ⬇️
#Node2Shell details: https://pentest-tools.com/vulnerabilities-exploits/node2shell-brotli-decoder-remote-code-execution_29896
Free Pentest-Tools.com trial: https://app.pentest-tools.com/trial/signup
#offensivesecurity #pentesting #vulnerabilitymanagement #ethicalhacking #cybersecurity
-
CW: Politics, taxes
Another election cycle and another proposal to reduce property taxes is on our ballot here in Florida--maybe on yours too.
Remember that reducing property taxes puts money into homeowners' pockets, but your county/state still need that money to fund programs. There will be new taxes to make up the shortfall--whether they are labelled as taxes or not. Those taxes are likely to be regressive.
Voting to reduce property taxes seems like a real "screw you, I've got mine" move. Buying property in a community implies a social contract to support, maintain, and improve that community, even if you don't see a direct benefit.
-
Like Mitch McConnell, Kash Patel often, mostly, has an expression on his face as if he is shocked; like someone fired a revolver next to his head.
-
HN continues to be a comedy goldmine: https://news.ycombinator.com/item?id=50225382
-
🚨 A lot of offensive activities were identified targeting Christoph Vielgrader Relevanssi Plugin (CVE-2026-114704) https://vuldb.com/vuln/426126/cti
-
I setup a small photo booth for the minis…
-
I really know nothing about the folks on the committee aside from some remarkably long tenures, but if the medium is the message, LinkedIn is... not great
-
It's not as if Musk is sitting behind a huge control panel, toggling switches and restricting Starlink access. There are real people who take commands and have no problem executing them unquestioningly.
-
The new human-crafted Apple Music brand matters in an AI world https://arstechnica.com/culture/2026/10/the-new-human-crafted-apple-music-brand-matters-in-an-ai-world/
-
“If we never get it right…. Meet you on the other side.”
https://music.apple.com/us/album/tom-and-jerry/6824422926?i=6824423233
-
Rumor has it that C++26 didn't pass, but I haven't found details of what's at issue. All I have is this stupid LinkedIn link that someone posted on HN. Out in the wild there was plenty of griping about what did pass in C++23.
https://www.linkedin.com/posts/robertseacord_balloting-has-completed-for-c26-unfortunately-activity-7519795140887035918-5PWL -
New blog post by me:
https://nheinz.eu/blog/2026/10/container-vulnerability-management/?ref=mastodon
How I manage my Containers and their Vulnerability Management across infrastructure and how the patching of PHP2SHELL looked like
#selfhosting #selfhosted #container #kubernetes #vulnerability #vulnerabilitymanagement #homelab #renovate #trivy #forgejo #forgejoactions #harbor #security
-
For a discussion elsewhere, I did some back-of-the-envelope calculations about the relative performance of disks and CPUs since the early 2000s. The number of retired instructions per byte of random disk reads between an early 2000s machine and today has changed by at least four orders of magnitude (possibly six, depending on exactly what you're measuring).
I knew disks had become faster, but that's an enormous change. If you wrote something 25 years ago that was entirely disk-I/O-bound and used 5% of the CPU, running today it wouldn't even be close to 1% of disk bandwidth usage but would be pegging the core at 100%. Even making it multithreaded and getting a perfect linear speedup wouldn't have come close to 1% disk-bandwidth usage.
The delta is less pronounced for large sequential reads.
-
It will be a few years yet, but I'm waiting for the leaks that show Palantir execs made sure to scrub themselves personally out of their surveillance dataset-mergy-stuff.
-
Steal my #Bitcoin
There is a bitcoin key hidden on this server worth about $2,014.
It is accessible to the PHP user account through the print-flag binary.
This #PHP version was selected from before the #PHP2SHELL CVEs were released.
-
Pete Townsend - Let My Love Open The Door
https://music.youtube.com/watch?v=9dw29xpA0Qg -
PSA: If you haven't been following @owlsintowels during Owltober, you have been missing out even more than at other times.
-
when San Francisco banned the 1908 launch of the fraudster Morrell balloon, he launched from Oakland instead, and it went about as well as Elon Musk's launch of Tesla driverless.
some things never change
-
RE: https://cyberplace.social/@GossiTheDog/117501034965218129
at this point Silicon Valley just looks more and more like ripoffs and cheats all trying to shortcut the tech industry.
bunch of grifters
-
AI Is Already 'Amplifying the Destruction' of War https://www.404media.co/ai-is-already-amplifying-the-destruction-of-war/
-
RE: https://fed.brid.gy/r/https://bsky.app/profile/did:plc:2rrp7amblhg3xoly5n5huiqv/post/3myod7pi3ds2t
"It's that damn ad."
No, it's not the ad. It's what running and defending the ad say about the person who did those things.
-
did we ever bother to implement stack canaries at scale?
-
People seem pretty salty at Krebs for this https://github.com/pbatard/rufus/issues/3064
He over-reacted, however I can see how this misunderstanding arose. There's a fairly unpleasant bug (issue 3042) and it has been reported in 2021, and the reporter was mocked.
Between maintainer compromises and CI/CD shenanigans, and supply chain dependency issues, "just look at the source bro" doesn't really cut it.
-
Daily Prompt: How do you decide when it's time to refactor versus time to ship?
-
CVE-2026-116067 – HIGH severity path traversal in ananthakumaran paisa (<0.7.8). Unauthenticated attackers can read files & delete backups via crafted '../' filenames. Upgrade to 0.7.8+ ASAP. https://radar.offseq.com/threat/cve-2026-116067-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-in-001c746719f461d8 #OffSeq #PathTraversal #Security #CVE2026_116067
