Russell Howe
@rhowe212
Followers
310
Following
11K
Media
1K
Statuses
15K
Cycling, eating, LFGSS, gardening. Mostly deleting things. 没有为什么. Also same handle on bsky
London, England
Joined August 2016
The guy writing the TeamPCP/CanisterWorm malware knows me by first name and is leaving little notes in his source code asking me to be nice💀 Somehow, he's finding time to read my ramblings between pushing new versions🙃
8
25
428
I'm amazed at Intel's ability to downplay the severity of published vulnerabilities. They described CVE-2018-3640 (Rogue System Register Read) as simply an ASLR bypass, but this vulnerability in fact allows the CPU internal CRBUS to be read (at least for Goldmont/Plus uarch)
1
13
71
If compliance auditors are too harsh, they’ll just lose business, and nobody will use them anymore, no? “They have a reputation to preserve” ah, the one they’ve built stroking ciso egos and not failing them We’ve built a profitable theater industry, and we are the performing
26
11
162
~150 S3 abandoned buckets. 8M+ requests. Two months. Software updates, binaries, VMs and more. This week, AWS rolled out namespaces for new S3 buckets - finally. This is why offensive security research is so important - to move the needle. https://t.co/PCuioOBL1K
labs.watchtowr.com
Surprise surprise, we've done it again. We've demonstrated an ability to compromise significantly sensitive networks, including governments, militaries, space agencies, cyber security companies,...
5
36
152
Next month codebar will host the codebar Festival - 6 days of virtual deep-dive technical workshops, talks and panels on all things coding, career and well-being. Check it out here ➡️ https://t.co/48izQce74Q
0
2
0
Afroman wins legal battle over songs mocking US police
bbc.com
The rapper was sued after releasing an entire album ridiculing the officers who raided his home.
51
246
2K
If you launch FreeBSD from the @awsmarketplace please be advised that I can now see your "Company name". I never used to be able to see this information, and have no intention of (ab)using it, but this is new. (And, of course, applies similarly with other Marketplace products.)
1
6
79
Federal cyber experts called Microsoft's cloud a "pile of shit," approved it anyway
arstechnica.com
One Microsoft product was approved despite years of concerns about its security.
56
235
1K
I see some weird things but this takes the biscuit. A vulnerability in the Companies House website, that let anyone view the private dashboard of any one of the five million registered companies, see directors' personal details. And modify them.
382
2K
7K
If we could just raise sea levels by 150 meters we get a backup Strait of Hormuz
1K
3K
60K
i thought they already owned a social network for ai agents
BREAKING: META acquires Moltbook, a social network built for AI agents.
79
392
8K
Xint Code discovered a highly exploitable heap-buffer-overflow in PostgreSQL that existed for over 20 years. Our research team exploited this bug to claim $30,000 at ZeroDayCloud in December! Bug details are below
1
22
217
７／１９ 結成十一周年記念LIVE 🇬🇧🌍 【LONDON降臨 -AG! 11th Anniversary Show-】2026 July 19 at Roundhouse, London #ATARASHIIGAKKO11thLONDON General tickets now on available 🔗 https://t.co/wJUQQqg3nJ
12
86
1K
Honestly, this has been my go-to response for years. Whenever someone asks me "how can I get my developers to care about observability and look at production?", I say: ✨"Put them on call!"✨ I have softened in recent years, as I have come to understand that hand-me-down ops
@mipsytipsy For SWEs to care about o11y, teams need to left-shift incident support off of ops, and very few places have actually done that. Until it's waking them up at night they won't care.
12
15
123
🤯 Quarkslab spent five months trying to report vulns to security vendor Avira/Gen Digital but hit a deadlock because Gen Digital would only accept reports through their bug bounty platform (which required an NDA), so Quarkslab eventually just emailed the report and published
1
38
162