#bughunting — Public Fediverse posts

Finding a bug in Dummit and Foote's Abstract Algebra

https://kallus.org/blog/dummit_and_foote.html

Comments: https://news.ycombinator.com/item?id=49569748

#HackerNews #Finding #a #bug #in #Dummit #and #Abstract #Algebra #DummitAndFoote #AbstractAlgebra #Mathematics #BugHunting

Zsh history bug-hunters, get ready to 🤦‍♂️ as the author takes you on an epic journey through the wild world of #inotify, #fatrace, and #bpftrace, just to find out where his precious commands went! Spoiler alert: the solution is in the appendix, because who doesn't love a good footgun? 😜✨
https://michael.stapelberg.ch/posts/2026-08-09-zsh-history-truncation-bug/ #ZshHistory #BugHunting #CodingAdventures #HackerNews #ngated

Anthropic’s New AI Model Can Identify More Software Bugs Than Ever. Microsoft Is Struggling To Fix Them Fast Enough.

https://fed.brid.gy/r/https://www.techdirt.com/2026/08/05/anthropics-new-ai-model-can-identify-more-software-bugs-than-ever-microsoft-is-struggling-to-fix-them-fast-enough/

Summ3r Of h4ck 2026: разбор заданий отборочного этапа

C 13 апреля по 10 мая был открыт приём заявок на стажировку Summ3r 0f h4ck 2026 . В этом году на обучающую программу в DSEC by Solar пытались попасть 225 человек – это в несколько раз больше, чем в предыдущие годы! В качестве испытаний в отборочном этапе нужно было решить 10 задач по практической информационной безопасности и пройти интервью. Спасибо всем, кто не только пользовался последними достижениями в области AI, но и активно работал над заданиями сам. Мы это очень ценим! Комментарий от технической команды Summ3r 0f h4ck 2026: « В этом году мы подобрали задания с упором на поиск уязвимостей в веб приложениях, аудиту корпоративной инфраструктуры и поиск уязвимостей в мобильном приложении. В одном из заданий кандидаты расследовали инцидент по логам HTTP-трафика: необходимо было понять, как приложение было взломано, и что смог получить атакующий. Для решения заданий не хватит вузовской программы — нужно активно интересоваться практической ИБ, решать задачи с CTF или лабы по типу Hack The Box. » На стажировку к нам попали 5 участников. Возможно, уже в скором времени они присоединятся к нашей команде. Мы покажем вам решение одного из тестовых заданий. Остальные решения вы можете найти

https://habr.com/ru/companies/dsec/articles/1065452/

#поиск_уязвимостей #vulnerability_research #bughunting #анализ_кода #безопасная_разработка #безопасность_веб_приложений #безопасность_мобильных_приложений #пентест #безопасность_инфраструктуры #active_directory

My day so far

Got up after a good long sleep and decided to add some pictures to my /me page. Decided that the pictures should be hosted on the same domain but that another subdomain was probably okay.

Got sidetracked checking out my many open tabs with the intention of closing some. More tabs are now open.

Browsed places I have previously shared pictures.

Got sidetracked looking at my past photography.

Post the first picture to my social media node (here). Added it to my /me page.

Added a link to my site about my dad as it was relevant.

Got sidetracked updating the code that runs the site. All up to date.

Posted said first post. That’s odd; the manual ping did not send. Sent a ping.

Got sidetracked when I remembered one of my blogs was flooding someone’s website with mentions.

Got sidetracked reading their blog while trying to remember which site I linked to it on.

Remembered and opened the blog in question.

Got sidetracked checking comments held for moderation.

Got sidetracked replying to comments

Got sidetracked following a link in the comments

Got sidetracked reading about ADHD diagnosis options

Got sidetracked messaging my sister about an idea from following the link

Got sidetracked posting a reply thanking for link

Got sidetracked back to bug hunting.

Got sidetracked when asking AI why the pings keep sending; learned I might want to look at the post meta for pings sent. Realised I needed to know the blog ID as it is part of a network.

Went to the blog’s parent blog to look up its blog ID.

Got sidetracked removing spam from parent blog

Got sidetracked checking which email domains spammers were using and blocking them

Got sidetracked refreshing RSS feeds for the parent site.

Looked up blog ID; opened PHPMyAdmin to look at post meta. Yep, the flooded site is not listed.

Went to GitHub and found someone had opened an issue about this. Posted my findings to the issue.

Got sidetracked browsing the issues on GitHub

Got sidetracked commenting on issues

Got sidetracked when I panicked and thought it was Thursday, and I was running late. I was halfway to getting ready to go out when I realised it was Wednesday.

Got sidetracked writing this post about how often I got distracted today

What do you mean by attention issue?

I guess I will try and find my way back to adding photos to my /me page.

https://www.youtube.com/watch?v=SSUXXzN26zg

Weevil, weevil rock you! Rock you!

#weevil #Bugsdoton #bugs #bughunting

🔍🤯 Oh, the thrill of chasing a barely pubescent bug through the tangled jungle of #SQLite with TLA+! 🐛🕵️‍♂️ Meanwhile, enjoy unwanted pop-ups about Ubuntu updates and futile attempts at unsubscribing—because nothing says "bug hunting" like a barrage of irrelevant notifications! 📬🙄
https://ubuntu.com/blog/hunting-a-16-year-old-sqlite-bug-with-tla-is-dqlite-affected #TLA+ #BugHunting #UbuntuUpdates #TechHumor #HackerNews #ngated

El lado del mal - Feria de Empleo Ciberseguridad & Bug Summit con Hacking en Directo. 20 de Junio en Madrid https://www.elladodelmal.com/2026/06/feria-de-empleo-ciberseguridad-bug.html #Evento #BugHunting #Hacking #Hackers

RT @TheRegister: TRANSLASATION: Linus Torvalds sagt, dass KI-gestützte Bug-Hunter die Linux-Sicherheits-Mailingliste „fast vollständig unmanageable“ gemacht haben.

mehr auf Arint.info

#AI #BugHunting #CyberSecurity #LinusTorvalds #Linux #OpenSource #arint_info

https://x.com/TheRegister/status/2056158625371193418#m

El lado del mal - "Bug Hunter": Guía, herramientas y técnicas del Bug Bounty en la era de Inteligencia Artificial. Nuevo libro en 0xWord https://www.elladodelmal.com/2026/04/bug-hunter-nuevo-libro-en-0xword.html #0xWord #Libro #BugHunting #BugHunter #0xWord

Das @Krokodil, auch bekannt als professionelle Bugjägerin, hat mir ein niedliches kleines Short über ihren Arbeitstag zukommen lassen.

99 little bugs in the code...

🌀 https://youtube.com/shorts/PHw2OuydiOQ?si=wsV6hQYDaCUk7WU0

#programming #programmerslife #bugfix #bughunting #bugs #bugfixes #programmer #code #coding #codecheck

Jenom už narážím na Paretovo pravidlo…

#zpravobot #bughunting

213/338 - takový je stav migrace tweetbotů ze starého do nového systému.

Počty ostatních zdrojů se nemění, neb již aktuálně není co migrovat.

#zpravobot #bughunting

Stav k dnešnímu večeru:

V novém ZBNW-NG je celkem 274 zdrojů rozdělených takto:

118 RSS - nejvíc, hlavní páteř systému
85 Twitter - druhá největší platforma
29 Facebook - významná skupina
17 YouTube - video obsah
14 Bluesky - rostoucí platforma
9 Instagram - vizuální obsah (všechny přes RSS)
2 feed - Bluesky custom feeds

A teď jdu spát. Brou.

#zpravobot #bughunting

Povšechná informace o implementaci Zprávobot.news Next Generation:

Dnes jsem dle všeho dokončil vývoj. Nové featury přidávat nebudu a provádím jen fixy bugů.

Účty do nového systému migruju postupně dle toho, co zrovna potřebuju testovat. Každopádně jsou přemigrované všechny BS, FB, IG, YT a také RSS z RSS.app. Kromě toho po novu běží i vyšší desítky Xbotů.

A prosím o pomoc s lovem brouků. Pokud najdete něco "divného", dejte mi vědět a mrknu na to. Díky.

#zpravobot #bughunting

Amazing alternative to Sentry: https://www.tinusguichelaar.nl/2026/02/11/amazing-alternative-to-sentry.html

#sentry #laravel #bughunting

Kernel bugs hide for 2 years on average. Some hide for 20

https://pebblebed.com/blog/kernel-bugs

#HackerNews #KernelBugs #HiddenForYears #SoftwareSecurity #TechNews #BugHunting

Анатомия Prompt Injection: Как я вошел в топ-10 глобального рейтинга Lakera Agent Breaker

Как пробить многоуровневую защиту LLM-агента, обученную на 80+ млн атаках? В декабре 2025 я вошел в топ-10 глобального рейтинга Lakera Agent Breaker. В этой статье - не просто обзор решения, а детальный разбор уязвимостей современных LLM-систем и архитектура кастомного фаззинг-пайплайна.

https://habr.com/ru/articles/979476/

#информационная_безопасность #искусственный_интеллект #llm #языковые_модели #хакатон #cybersecurity #ai #leaderboard #ctf #bughunting

Amazon Is Using Specialized AI Agents for Deep Bug Hunting | WIRED https://www.wired.com/story/amazon-autonomous-threat-analysis/ #cybersecurity #AgenticAI #Amazon #BugHunting

🚨BREAKING: Software engineers discover bugs exist in their codebase! 🎉 After a week of bug-hunting, they are shocked—shocked, I say—to learn their roadmap wasn't paved with 189 "Oopsies" all along. Nothing says "progress" like finally realizing your app shouldn't crash on Tuesdays! 🤦‍♂️✨
https://lalitm.com/fixits-are-good-for-the-soul/ #softwareengineering #bughunting #technews #appdevelopment #oopsies #HackerNews #ngated

Hello! I’m building a mentoring platform for aspiring #hackers and security learners who want deeper, non-corporate guidance. It’s for self-taught people and students (OSCP, cybersecurity degrees) who want 1-on-1 help. https://learn2hack.today is almost ready and accounts will open soon. If you're interested, fill this: https://tally.so/r/J9KZkz
#hacking #mentoring #students #hackerculture #hackers #students #cybesecurity #security #redteam #pentesting #hackingisnotacrime #oscp #ctf #bughunting

🚫 403 Forbidden: When your "investigative journalism" turns into a digital knock-knock joke 😆. Apparently, the real bug here is your ability to access anything beyond the error page. 🐞🔍
https://mensfeld.pl/2025/11/ruby-ffi-gc-bug-hash-becomes-string/ #403Forbidden #InvestigativeJournalism #DigitalJoke #AccessIssues #BugHunting #HackerNews #ngated

👽 So, software is the mysterious 'Area 51' of engineering, where developers claim to have seen unicorns (or bugs) no one else can find? 🚀 Apparently, we're all just code conspiracists waiting for our own Roswell moment. 😂
https://codemanship.wordpress.com/2025/11/07/is-software-the-ufology-of-engineering-disciplines/ #softwareengineering #codeconspiracies #techhumor #developerlife #bughunting #HackerNews #ngated

🚨 Breaking news: After years of blissful ignorance, our protagonist discovers that #PyTorch is not, in fact, infallible! 😱 Instead of the usual user error, it turns out the culprit was a PyTorch #bug all along—cue the collective gasp of shock and awe. 🎉 Here's to the next few years of bug-hunting instead of actual learning! 🐛🔍
https://elanapearl.github.io/blog/2025/the-bug-that-taught-me-pytorch/ #Discovery #UserError #BugHunting #MachineLearning #HackerNews #ngated