Austin 👾👨‍💻

Coffee is in the system and I got visual studio open on a stormy day as I start my venture into something before my time… the Apple II

a calm and serene git graph

Had to add a copy to my collection 🔥

The Tiny Desk series is amazing

IBM has a video on everything and anything

Was gifted a book stamp so I went through the ol collection and it’s like I came across a pair of OG Jordan 1’s

Anthropic when Chinese companies use Claude to train their own AI models vs Anothropic when they’re stealing everyone’s data to train Claude

a bald man wearing a blue shirt with a shark on it ALT: a bald man wearing a blue shirt with a shark on it

me after a pleasant devEx using pytest for the first time

Spoiled myself and finally got a thinkpad. I had an X1 Carbon for a job and thinkpad’s are my favorite laptop to date (beating out an M2 MacBook Pro back when I was a full time SWE)

Power be to the dynamically typed languages

The strange urge to learn more PowerShell for better corporate IT automation maxxing

Tried to automate checking if a shoe I want is in stock for my size, fell down the sneaker bot rabbit hole. Very interesting AppSec topic!

Creating a deployment pipeline for a VM like it’s a Rails app in 2015 👍

patrick star from spongebob squarepants is holding a hammer and a saw and says now what . ALT: patrick star from spongebob squarepants is holding a hammer and a saw and says now what .

Me when I get user and gotta privesc

Also the rewritten version by Apple Intelligence is giving big “Excuse me, do you have any gray poupon” vibes 🎩

a penguin is sleeping on a crescent moon with the words good night bye written below it ALT: a penguin is sleeping on a crescent moon with the words good night bye written below it

Working through a HTB machine and I get the users FTP creds. There’s nothing beyond the user flag in the user’s home directory and I’m just like “wtf am I gonna do with FTP?” after going through every directory accessible.

Finally, I use the creds and SSH to the machine. Like a normal person.

I tell the Spotify DJ to play some acid and jungle cause I’m about to lock in and it starts w/ this 😐

Context of acronyms for anyone new to cyber:

CVE = Common Vulnerabilities and Exposures (official vuln ID)
PoC = Proof of Concept (demo exploit showing it works)
RCE = Remote Code Execution (lets attackers run code on a target remotely)

Me waiting for the CVE-2026-20841 (Notepad RCE) PoC:

Pop star Bad Bunny needed a Puerto Rican history scholar. UW–Madison had just the one. Bad Bunny collaborated with UW–Madison history professor Jorell Meléndez-Badillo on Puerto Rican narratives that accompany the new album “DeBÍ TiRAR MáS FOToS.”

Not at all surprised to learn that Bad Bunny has a historical adviser. His halftime show was a reminder that our history and culture are deeply intertwined with the rest of the western hemisphere. We should think of his performance as part of #America250. #SuperBowl
news.wisc.edu/pop-star-bad...

Also this is my declaration to fund a Puerto Rican Olympic hockey team in the future

We are kicking Finland’s ASS #USAhockey

Rust at Scale: An Added Layer of Security for WhatsApp WhatsApp has adopted and rolled out a new layer of security for users – built with Rust – as part of its effort to harden defenses against malware threats. WhatsApp’s experience creating and distri…

Meta is now using a Rust component to safely process media files shared on WhatsApp

engineering.fb.com/2026/01/27/s...

Assuming that this’ll take at most 33 minutes (3 reqs/min, 1 min delay to prevent account lockout, 100 possible passwords), time to knock a couple pages outta this bad boy #infosec #dungeoncrawlercarl

I used to love having a MacBook for personal use but now I’ll take any laptop, install Debian, and I’m good as gold. Also saves me about $1k in the process (but I do admire the M-series chips)

Love how I’m seeing this as I’ve got my first ever eye appointment coming up. Will def try these out if it all works out

In past 24h:

❌ 1-click exploit dropped for #OpenClaw: Simply visiting a URL allowed attacker to steal everything: keys & files + take control of the device. Patched.

❌#MoltBook had a vulnerability exposing all users emails, real names etc. Patched. 1/

Takeaway: all gas, no brakes.

AppSec w/ experience in blue teaming (SOC) and software engineering. Feel free to reach out w/ any questions!

Big day for the “I only use VIM” crowd

Notepad++ compromised in supply chain attack from June to December 2025 by “likely Chinese state-sponsored actor”. notepad-plus-plus.org/news/hijacke...