WorstFit: Unveiling Hidden Transformers in Windows ANSI(blog.orange.tw)

342 points by notmine1337 1 year ago | 126 comments

Orange Tsai's blog post presenting WorstFit, a class of Windows vulnerabilities arising from Best-Fit character conversion between UTF-16 and ANSI code pages.

How I use Kate editor(akselmo.dev)

178 points by todsacerdoti 1 year ago | 56 comments

My security camera shipped a GitHub admin token in its login page(hhh.hn)

630 points by hhh 3 months ago | 211 comments

A blog post describing how firmware analysis of a Hanwha security camera revealed a GitHub admin token embedded in its login page.

My audio interface has SSH enabled by default(hhh.hn)

306 points by hhh 6 months ago | 93 comments

Type-safe HTML templating in Zig(lalinsky.com)

236 points by lukaslalinsky 14 days ago | 84 comments

Blog post by Lukáš Lalinský describing an approach to type-safe HTML templating in the Zig programming language for web development.

Coding Agent VMs on NixOS with Microvm.nix(michael.stapelberg.ch)

95 points by secure 8 months ago | 44 comments