becojo

becojo forcefield

oof this looks rough. see the original gif on tumblr
becojo.tumblr.com/post/7903614...

👀 bsky.app/profile/bsky...

Identifying birds using the Merlin Bird ID is real life Pokémon.

My writeup for @northsec.io CTF 2025's "Containers" reverse track:

merkletr.ee/ctf/2025/nse...

If there's one thing I've learned about covering cybersecurity over the past decade or so, is that the cybersecurity community (the fixers and breakers) and the cybersecurity industry (profits above all else) are two very, very different things.

Model Context Protocol has prompt injection security problems As more people start hacking around with implementations of MCP (the Model Context Protocol, a new standard for making tools available to LLM-powered systems) the security implications of tools built ...

Model Context Protocol has prompt injection security problems
simonwillison.net/2025/Apr/9/m...

👋 Hello Bsky! MontréHack is a bilingual, monthly cybersecurity workshop in Montreal where challenge designers present their CTF challenges and participants solve them.

Fellow cybersecurity folks: Make sure to follow @northsec.bsky.social if you came to bluesky from Twitter! Great conference in Montreal and probably the biggest on-site CTF in the world.

Cyberhaven says it was hacked to publish a malicious update to its Chrome extension | TechCrunch The data-loss startup says it was targeted as part of a "wider campaign to target Chrome extension developers."

New, w/ @lorenzofb.bsky.social: Data-loss prevention startup Cyberhaven was hacked to publish a malicious update to its Chrome extension, affecting potentially thousands of users. A security researcher says other big Chrome extensions were hacked in the same campaign.

techcrunch.com/2024/12/27/c...

Design Space for Code Search Query A review of the design space for code search tools.

Design Space for Code Search Query ast-grep.github.io/blog/code-se...

merci à vous et votre équipe pour ce podcast 🥲 bon succès dans vos projets futurs!

Dying to win: Canadian provinces are expanding legal gambling despite one death every nine days Investigation into gambling-related suicide data shows tracking of deaths lags while governments ignore risks to chase industry profits

Dying to win: Canadian provinces are expanding legal gambling despite ‘one death every nine days.’

Michener-funded investigation into gambling-related suicide data shows tracking of deaths lags, while governments ignore risks to chase industry profits.

ricochet.media/justice/dyin...

#cdnpoli

Bridging the Gap: Elevating Red Team Assessments with Application Security Testing | Google Cloud Blog Red team and targeted external assessments should incorporate application security expertise to better simulate modern adversaries.

I wrote a thing with my colleague Ilyass El Hadi (0xc0ffee_) & Charles Prevost, about how we've been leveraging offensive webapp testing during Red Teams. 4 use cases of external breaches using webapps inside, enjoy! #appsec

cloud.google.com/blog/topics/...

2-Factor Authentication Support · Issue #1071 · bluesky-social/social-app Is your feature request related to a problem? Please describe. 2Factor authentication is generally a very handy feature for security purposes as passwords and logins sometimes fail. 2Factor Authent...

Please vote for better 2FA support on bsky!

github.com/bluesky-soci...

Flatt Security XSS Challenge Execute alert(origin) on each challenge origins.

Been having a ton of fun solving these, only 2/3 done and i'm quite humbled so far
challenge-xss.quiz.flatt.training

add that to the reasons to stop using bash in production pipelines yossarian.net/til/post/som... #security #cicd #appsec

PyPI now supports digital attestations - The Python Package Index Blog Announcing support for PEP 740 on the Python Package Index

PyPI replaces PGP signatures with digital attestation system

blog.pypi.org/posts/2024-1...