Carroll

This is my favourite mouse for work

Pulsar for gaming 😌

BugCrowd & Researcher Philosophy Thoughts Organisations Should never use in-house triage, Hunters and researchers should only use them as a payment platform. that's it on a napkin.

Some thoughts on my latest souring @bugcrowd.com experience thecontractor.io/bugcrowd-res...

Synology DSM 7.3.2 Chaining three issues to gain root from a low privileged user.

thecontractor.io/synology-dsm...

HP Aruba Privileged Escalation Dec 2025 The HP Aruba VIA VPN client for Linux contains a local privilege escalation vulnerability that allows any unprivileged local user to gain root access. - CVE-2025-37186

thecontractor.io/hp-aruba-pri...

BugCrowd & Researcher Philosophy Thoughts Organisations Should never use in-house triage, Hunters and researchers should only use them as a payment platform. that's it on a napkin.

thecontractor.io/bugcrowd-res...

Hacklore ... What Hacklore get's wrong. and the precursor to https://lolwifi.network

Last one thecontractor.io/hacklore #wifi … for now ? 😂

What hacklore.org and its signatories misunderstands is that it erroneously attempts to replace contextual advice with foundational advice and then thanks its self for fixing something that never existed, other than suppress conversations that they have failed to put to bed (why?)

And just a week earlier I’d put lolwifi.network online to stop this kind of population-level risk advisory cosplay

And just a week earlier I’d put lolwifi.network online to stop this kind of population-level risk advisory cosplay

The majority of that list will never have access to victim data, it’s pious of them to think they’re in a place to give that advice … or maybe it’s just staying relative with Dunning-Kruger and the gang

GitHub - Splinters-io/ghosted: Ghosted is a Trust Erosion scanner, pulling domains from your CSP checking if they're available to buy. Ghosted is a Trust Erosion scanner, pulling domains from your CSP checking if they're available to buy. - Splinters-io/ghosted

Concerned about trust erosion in your content security policy entries, or just looking for trouble ? I got you github.com/Splinters-io... #appsec

I put this online lolwifi.network just to remind people joining a untrusted #publicwifi isn’t solely about the qualities of TLS (and to gaslight people who take offence to broader views)

I vibe coded a little data jurisdiction app juri.host consider it a highly functional PoC with some artisanal bugs - there’s an onion too if you want to Tor up - for the curious, @anthropic.com’s Claude-code was MVP here

is it the markdown that appeals to you ?

They don’t want you to have MFA as a default baseline (shitty) and there’s a condescending vibe to most of the responses you get from them, I got band from the forums because I was holding up a mirror to their bullshit hah. But … it’s less security overhead than Wordpress…

I use proton, it costs, I know I owe you emails but I had the same issues

Oh dear! I’ll have a good mooch around tomorrow, see if we can suss it out :) thanks for this ^

Hey Emily, thanks for reading, I’ve been using it without incident for some time now with chrome and others, could you get into the specifics ?

Where are those images loaded from?

BREAKING: Bird Flu Hospitalizes Two More in U.S. as Human Cases Rise Slowly, Animal Infections Accelerate.

Former John is furious

I didn’t use Google, I hope you’re feeling happy now.

We are entering a dangerous phase of the H5N1 outbreak.

With spring migration underway, the virus will spread faster, threatening wildlife, livestock, and humans.

Migratory birds will carry the D1.1 (D701N) variant worldwide, raising the risk of mammal outbreaks.

Nice Mo!

BREAKING: New restrictions prohibit CDC from publishing with WHO on disease research.

Scientist eliminates HPV

Todays hero

BREAKING: The USDA has confirmed five additional dairy herds in California have tested positive for the virus, raising the total to 732.

Currently, 74% of the state's dairy herds are infected with H5N1.

Odds of recently discovered asteroid hitting Earth drop nearly to zero — The Washington Post Another night of observations revealed there is little to fear from the football-field-sized Asteroid 2024 YR4.

Sorry. I just couldn’t let you get off that easy.

apple.news/AqjfAq0eXQu6...