Filippo Valsorda

filippo.abyssdomain.expert

21 October 2026 14:33

The macOS built-in curl, git, pip, python3, perl, ruby, and openssl all read /etc/ssl/cert.pem, which still has the emSign root, but they don't check revocation like Apple's Secure Transport libraries. This is, uh, a problem. git and pip especially. I added a short-term workaround to this page.

YogSec

yogsec.bsky.social

20 October 2026 14:47

Endpoints hide where the bugs live. My endpoints-extractor script pulls URLs and API endpoints from HTML, JavaScript, and JSON content. Built for bug bounty hunters who want deeper attack surface discovery. Explore it here: github.com/yogsec/endpo... #bugbounty #recon #pentesting #infosec #github

Xint by Theori

xint-io.bsky.social

20 October 2026 14:47

Earlier this month Google stopped taking product vulnerability reports through its open source bug bounty, the OSS VRP. What's interesting is what Google kept open. xint.io/blog/google-...

Dan Darkwell ~Dark Rock Musician

dandarkwell.bsky.social

20 October 2026 11:52

Day 9/100: my unfinished song draft youtube.com/shorts/t_oUz... Day 9/100: this song isn't finished, and I'm showing it to you anyway. #100daychallenge #songwriting #musicproduction #workinprogress #howimadeit

Wolf

duyytrann.bsky.social

19 October 2026 14:16

🐺 Starting my 100-Day Bug Bounty Challenge Broke. Unemployed. Dumb wolf. Noodles + Monster + duplicated dreams. 100 days. Let’s see how many real CVEs I get. Follow to watch a loser suffer. Tracking in mrdarkroot.github.io #BugBounty #100DayChallenge #CyberSecurity