Published a quick blog post on a series of tricks to perform CSRF attacks on a very common configuration of Expressjs, as well as exploiting a parser bug in the qs npm package. Let me know what you think of it!
blog.sparrrgh.me/web/2026/02/...
track 4 of my wip ep is now online! would big appreciate if you checked it out :)
soundcloud.com/fyrisme/self...
Front of CCH Building in Hamburg, with its name changed to CCC
Back to Hamburg for #39c3 :3
Manual matchmaking on Discord
There is a lot of demand for digital privacy and security advice out there right now and lots of people are giving advice and writing guides. I beg them to do a few things:
1. Be explicit about the threat model your advice is meant for.
If you are a scientist please consider signing our letter. If you are a concerned citizen (you should be!) you can find here a number of ways to make your voice heard: fightchatcontrol.eu
Here we go again 🙄 we have written an open letter detailing how incredibly misguided is the ChatControl proposal: csa-scientist-open-letter.org/Sep2025
slurpee machine with one crashed screen
I'm drinking the Bios Crash slurpee I hope it crashes my bios I hope I blue screen
Trenches
Ticket platform is live! Get your seat at nohat.it
#nohat2025 #computer #security #conference #community
A meme that says to close ones tab, is to admit you were never truly committed to the journey. there's a costume fox that's faded in the background with a person in the center meditating. in focus is an image of a browser tab with a prompt that says close tab. it looks like a cheesy motivational poster from the 80s and 90s.
Please feel free to cite the Deep Magic to me! I was there when it was written so I love talking about it :)
paper sign in window says: do not dumb here. not dumb area here.
bsky reply etiquette psa
RIP 💀
They don't seem to appreciate the humor of an email address that is also a shell command injection attempt or the time zone of -2456.
Oh yeah, I usually use targeted word lists lo
Or bruteforce all combinations only if I know the password policy is weak enough
It's cheap enough to be worth it almost every time honestly
Also, Bsky is painfully US-centric. Most of the posts talk about US politics and its drama. I think it's an important topic, but it looks like it's the only thing going on over here.
Maybe it's just my discover tho
What was up with all that ninja imagery? It disappeared except for binary ninja, and I'm not sure where it came from
DOM Explorer - a brilliant HTML hacking tool!
yeswehack.github.io/Dom-Explorer/
An Oral-B login screen.
I have been logged out of my toothbrush.
windows 10 bsod screen but it just says "computer" after the sad face
PSA: If you choose to submit a novel research talk to one of the top security conferences in the world, maybe check your proposal text all the way through so "Claude may make mistakes. Please check your answers." isn't the final line.
I'm trying to follow a video course and the fact that I cannot listen to my stupid breakcore music while learning is driving me nuts
