I found a GitHub repo distributing malware through fake CVE exploits. On-chain analysis of a Polygon smart contract revealed the full C2 rotation history, and a crib-drag attack on the encrypted dead-drop recovered the StealC binary.»
YAML pipelines, JSON rule engines, XML build files. The recurring pattern of encoding logic in config formats until you've reinvented an untyped, untestable programming language.»
A simple prompt injection challenge demonstrating retrieval-augmented generation (RAG) access control failures on TryHackMe.»
How to consolidate multiple repositories into a monorepo using git-filter-repo while keeping complete git history, blame, and authorship intact»
How I went from 1.2s to 0.15s shell startup by lazy-loading conda»
pnpm now has a built-in sbom command for generating Software Bill of Materials in CycloneDX 1.7 and SPDX 2.3 formats. No external tools needed.»
AI models are trained on our collective knowledge, but owned by a handful of companies running on subsidized pricing. When the real costs hit, the question of who controls the intelligence layer will reshape software development.»
Developers worry about AI producing buggy code. The real problems are weak review processes, security flaws by design, and a governance vacuum that's already causing damage.»
Another prompt injection challenge demonstrating the same fundamental weakness - this time with HealthGPT, a healthcare virtual assistant on TryHackMe.»
A walkthrough of exploiting prompt injection vulnerabilities in BankGPT, a financial assistant CTF challenge on TryHackMe.»
Get better visual overview of open tabs when developing with VS Code»
Tired of your build times are mega slow due to npm?»
Get even more out of Google Chrome DevTools, by checking out the latest features.»
Cache everything and purge it when releasing a new version from Visual Studio Team Services»
Just another blog? Or something more?»