Blogroll

• Jun 6, 2025, blog.pkh.me Sharing everything I could understand about gradient noise

• Jun 3, 2025, seclists.org Defense in depth -- the Microsoft way (part 89): user group policies don't deserve tamper protection

• Jun 3, 2025, seclists.org CVE-2025-45542: Time-Based Blind SQL Injection in CloudClassroom PHP Project v1.0

• Jun 3, 2025, seclists.org ERPNext v15.53.1 Stored XSS in bio Field Allows Arbitrary Script Execution in Profile Page

• Jun 2, 2025, insights.sei.cmu.edu Delivering Resilient Software Capability to the Warfighter at the Speed of Relevance

• May 30, 2025, security.googleblog.com Sustaining Digital Certificate Security - Upcoming Changes to the Chrome Root Store

• May 23, 2025, security.googleblog.com Tracking the Cost of Quantum Factoring

• May 21, 2025, insights.sei.cmu.edu A 5-Stage Process for Automated Testing and Delivery of Complex Software Systems

• May 15, 2025, insights.sei.cmu.edu Stop Imagining Threats, Start Mitigating Them: A Practical Guide to Threat Modeling

• May 13, 2025, security.googleblog.com What’s New in Android Security and Privacy in 2025

• Apr 30, 2025, portswigger.net Drag and Pwnd: Leverage ASCII characters to exploit VS Code

• Apr 23, 2025, portswigger.net Document My Pentest: you hack, the AI writes it up!

• Mar 20, 2025, blog.codinghorror.com The Road Not Taken is Guaranteed Minimum Income

• Mar 18, 2025, portswigger.net SAML roulette: the hacker always wins

• Mar 6, 2025, blog.codinghorror.com Let's Talk About The American Dream

• Feb 21, 2025, seclists.org Windows 10/11: Ncat: A message sent on a datagram socket was larger than the internal message buffer ...

• Feb 14, 2025, seclists.org Reverse DNS (issue #3007)

• Feb 12, 2025, seclists.org Re: Mail stoppage

• Jan 7, 2025, blog.codinghorror.com Stay Gold, America

• May 18, 2024, blog.pkh.me Fixing the iterative damping interpolation in video games

• Jun 6, 2023, blog.pkh.me Hacking window titles to help OBS