infosex.exchange <3

You are probably looking for the infosec.exchange Mastodon instance

This host is mostly for my random stuff, and in little part acts like a well-intentioned placeholder for the typosquatted domain.

Discoverability and Archiving

Currently I'm using this host for saving the items from my own feeds to the Wayback Machine and provide in-links for search engines. I hate that I have to do this, but the non-sense ideology of Mastodon pretty much ruined the search feature for Fediverse as a whole, and this wasn't changed by the fact that they owned their mistake and implemented search eventually.

Yes, I (or anyone else) could do similar things with other peoples published feeds, regardless of the tantrum. No, you can't defederate this, because the process doesn't rely on an instance.

Gluttony Section for Search Engines

[RSS] JSON Schema References Considered Harmful

https://www.svix.com/blog/json-schema-external-entities/

While I kind of agree with the title, the article is mostly explaining how hitting their finger is the hammers fault. This is the gist:

"[Rust jsonschema] automatically (and, as of v0.21.0, eagerly) handles dereferencing $ref entries, including fetching arbitrary HTTP Resources and loading files off of disk if a file:/// URI is specified. If a resource doesn't include a valid JSON Schema document, the error message will include fragments of the affected document."

In other words jsonschema follows the spec, which they didn't read before implementing arbitrary schema upload+parsing.
this post | permalink
[RSS] How I Ended Up Turning a 22-Year-Old PostgreSQL Type-Confusion Primitive into RCE (CVE-2026-6460)

https://mehmetince.net/part-3-6-how-i-ended-up-turning-a-22-year-old-postgresql-type-confusion-primitive-into-rce-cve-2026-6460/
this post | permalink
[RSS] System Settings and its last mile problem

https://unsung.aresluna.org/system-settings-and-its-last-mile-problem

#UI #UX
this post | permalink
[RSS] "From digital mischief to outright destruction"

https://unsung.aresluna.org/from-digital-mischief-to-outright-destruction

#virii #vx
this post | permalink
[RSS] Blind trust: stealing credentials through CSP

https://portswigger.net/research/blind-trust-stealing-credentials-through-csp
this post | permalink
[RSS] Hijacking Samsung TV Smart Hub Ads

https://dvratil.cz/2026/11/hijacking-samsung-tv-smart-hub-ads/
this post | permalink
@algernon @shapr You wanted to find a solution, resetting the state of the software is a workaround.
this post | permalink
@pancake swap
this post | permalink
Windows Common Log FileSystem Authentication 0day Local Privilege Escalation Vulnerability

https://github.com/MSNightmare/SignDrop

#NightmareEclipse
this post | permalink
[RSS] I didn't write a program with emoji, but I did use a control character

https://devblogs.microsoft.com/oldnewthing/20261111-00/?p=112848/
this post | permalink
Next Page