i own a relatively new (2025) samsung tv.
i kept getting weirdly targeted ads.
i tried reversing the firmware but it was aes encrypted and no keys unless tear it apart and do uart/jtag magic.
zero days it is. root shell on new samsung TVs!
discovered PRIVACY HORROR. write up?
Drin retweeted
Of course it can. Take all 100,000+ games on steam, scrape their descriptions and metadata, semantically plot them in vector space using embeddings, mathematically choose a location in vector space far away from neighbors, convert that back to a description and metadata, boom, brand new ideas ranked by how unlike any other ideas they are.
Drin retweeted
Two invaluable life skills:
1) Get good at talking to strangers
2) Be comfortable talking to large crowds of strangers
Both involve worrying way less about what others think of you.
very fun!!!
> audit also found a separate concern: its existing lock contains 49 security advisories across 16 packages, including 14 high-severity advisories
🫣
Drin retweeted
Lakebed, Postplan, and Shoo will be down indefinitely until Railway gets their shit fixed and I can actually redeploy them with rolled keys.
Incidents happen. I understand.
Blocking deploys so we can roll keys without downtime is unacceptable. I'm disappointed in Railway.
Replying to @JustLingonberry @ThePHPF
aren't you the moron that exposed your API keys on stream/uploaded your .env files and lost $90,000 and cried about it on your X lol
xitter.cf/JustLingonberry/status…
you're a real dev for sure!
FINALLY found how my key got leaked and got the $90,000 bill from google
Opus 5.5 said codex had PUBLISHED MY ****ING .ENV TO CLOUDFALRE PAGES ‼️
Meanwhile codex couldn't find anything, refused to explain itself and flagged my chat for cybersecurity risk lol
using @AmpCode to do mitigation of php vuln exposure across my different servers 😜
CVE-2026-109618 & CVE-2026-109619
Drin retweeted
PHP sites behind Cloudflare already have an initial set of WAF rules deployed for the known exploit vectors in these vulnerabilities. The rules are available to all customers, including free.
We are seeing early attacks emerging and are updating mitigations as new vectors show up.
This is a STOPGAP only. Patch as soon as @ThePHPF releases the update at 14:00 UTC today.
Replying to @dringrayson @AmpCode
Amp set up his own schedule to run again when the disclosure happens, automatically applying the fixes in addition to the mitigation we just made :D
beautiful.




















