Conversation

Notices

1. Embed this notice
   ✧✦Catherine✦✧ (whitequark@mastodon.social)'s status on Saturday, 15-Nov-2025 07:33:20 JST ✧✦Catherine✦✧

   @joseph_garvin this would be an amazing code golf goal: fit 100 vulns in a nornal, 120 column line of code. I'd love to see someone try

   • Embed this notice
     Zoe : Void -> a (zmz@mastodon.social)'s status on Saturday, 15-Nov-2025 07:49:41 JST Zoe : Void -> a

     in reply to

     @whitequark @joseph_garvin my first thought is: eval(askChatGPT("code for one website please")

   • Embed this notice
     ✧✦Catherine✦✧ (whitequark@mastodon.social)'s status on Saturday, 15-Nov-2025 08:36:18 JST ✧✦Catherine✦✧

     in reply to

     • Billy O'Neal

     @malwareminigun can you rephrase?

   • Embed this notice
     Billy O'Neal (malwareminigun@infosec.exchange)'s status on Saturday, 15-Nov-2025 08:36:19 JST Billy O'Neal

     in reply to

     @whitequark Does the same code in a header resulting in slightly different real exploits by giving attackers a Write-What-Where gadget count?

   • Embed this notice
     Billy O'Neal (malwareminigun@infosec.exchange)'s status on Saturday, 15-Nov-2025 09:55:02 JST Billy O'Neal

     in reply to

     @whitequark Imagine there's an inline function in a header, that has a bug leading to the aforementioned WWW. That header is # included by a hundred other components. Since each component is different, the practical impact of that WWW will be different. But all hundred components need to re-built and re-shipped to fix it

   • Embed this notice
     ✧✦Catherine✦✧ (whitequark@mastodon.social)'s status on Saturday, 15-Nov-2025 09:55:02 JST ✧✦Catherine✦✧

     in reply to

     • Billy O'Neal

     @malwareminigun clever, i'll allow it this once