Freddy

Hej!

We are thrilled to announce Hack.lu CTF 2025 starts on Friday, October 17.

Top teams can win prizes from our sponsors: OffensiveCon, Zellic, PortSwigger, Binary Ninja, and HackTheBox.

All information on flu.xxx

Eine riesige Verbesserung der Lebensqualität. Vielen Dank für Ihren Einsatz! An wen schreibe ich einen höflichen Brief, dass die Ladebereiche vielleicht einen abgesenkten Bordstein für einfacheres Entladen bekommen könnten? InfraVelo oder Bezirksamt? Oder reicht hier? ;-)

Text exceeds alt capacity.

I'm in a phenomenal talk on gender inequality in cybersecurity this morrning and this is such a great cheat sheet for intersectional fair employment.

firefox container tabs are lowkey goated when $11/year VPS in dublin w/ socks5 over ssh is the vibe

Wait, container tabs support individual proxy settings?

We just opened the Call-for-Papers for the German OWASP Day 2025. The event will be held November 25th-26th in Düsseldorf.

god.owasp.de/2025/cfp.html

We're looking for all sorts of presentations about web security and beyond for an audience of builders, breakers and defenders.

cut my heap into pieces, this is my crash report:
allocation, no alignment
don't give a fuck if it faults on assignment
this is fatal abort()

CUT MY LIST IN TWO PIECES

THAT’S HOW YOU START QUICKSORT

Closed the 6th floor. 3&4 are still going. Berlin and Toronto are the last offices.

it's still the mozilla office 👋

Echt Hammer, wie schön die Radwege sind. Aber wieso sind diese Fahrrad-Symbole so erhaben. Hätte man die nicht auch in glatt hingekriegt? Frage als absoluter Laie :)

Just watched the talk video. well explained! So sad, that there are so many findings. Would you say most DOM-based XSS is mostly `innerHTML =` or what do people usually do?

thank you!

Do you intend to write it up as a blog post? Unfortunately, it’s not self-explanatory with slides? I am curious:) ps: Reminds me of frederikbraun.de/xss-digital-....

Important changes are coming to Glitch We’ve got an important update for the Glitch community today: We’ll be ending web hosting for your apps on Glitch.

end of an era 💔 blog.glitch.com/post/changes...

I know Glitch is working on project export but if you're git-capable, I built a tool that will mass-git-clone your public glitch projects: github.com/potch/glitch...

This is a complaint about the default. Defaults matter. You should know that.

Pfff, you're four days late. We fixed this already on Saturday 😘

Uh, pwn2own was...today? And we're shipping a bugfix release also today? Cool.

Update your Firefoxes, please :D

blog.mozilla.org/security/202...

We just published @firefox.com updates to fix the exploits used at the Pwn2Own contest yesterday and today. Both contestants achieved RCE in our content process but did not escape the sandbox.
blog.mozilla.org/security/202...

Home Web Engines Hackfest. Contribute to Igalia/webengineshackfest development by creating an account on GitHub.

We have an initial plan for talks and breakout sessions at the Web Engines Hackfest 2025: github.com/Igalia/weben...
• Monday: 9 talks and the W3C Web Apps WG F2F
• Tuesday & Wednesday: 23 breakout sessions in 3 parallel tracks
There might be still small changes, but it gives a good overall picture.

Bavaria - Wikipedia

The blue & white diamonds are the flag of Bavaria, which is very much not Berlin 😉 en.wikipedia.org/wiki/Bavaria

I made this diagram for a talk on encrypted messaging I recently gave, and I didn’t get to use it in the talk. I figured I’d share it here because I think it tells a story.

New blog post: With Carrots & Sticks - Can the browser handle web security? https://frederikbraun.de/madweb-keynote-2025.html - This is the blog version of my keynote from MADWeb 2025 earlier this year. It's about how web security could become the browser's responsibility.

Blog post about the road to HTTPS-First in Firefox.

Early reports show an uptick in encrypted traffic by at least 1.5% for our global users. 😎

attackanddefense.dev/2025/03/31/h...

Based on the traffic I see - Mastodon is number 1, then LinkedIn, then Reddit, then Microsoft Teams, then Google, then BlueSky, then Twitter.

Bon anniversaire 🎈

Nun gut, das probiere ich dann mal :) Ich hoffe auch, dass der heute entdeckte, neu ausgzeichnete Halteplatz für Lieferanten auch noch was bringt. (Oh, Schleppkurve. Da hab ich was gelernt.) Danke!

Die Ampel ist sowas von Verbesserungswürdig. Ich freu mich. Was mir in dem Zug (auch Fußweg der Schüler) noch aufgefallen ist, dass die neuen Pöller an der Kreuzung Rosenheimer zu einer nur einseitigen Verbesserung des Überquerens geführt haben. Autos parken jetzt oft gegenüber im nordwestlichen Eck

Oh, and Firefox 136 also ships vertical tabs. Full release notes here www.mozilla.org/en-US/firefo...