Open Source Software Engineer 👨💻 and Security. Mostly post at 🐘 https://teapaw.org/t.co/RkvderXArs
🇦🇺
Joined April 2008
- Tweets132
- Following400
- Followers319
- Likes130
You have a bash command line of "exec program ..." and you control "..." can you make it do something different? What if it is somewhat sanitised for shell metacharacters? If you can inject $[+] it will make bash error on that line and run the next. 👀 dgl.cx/2025/10/bash-a-newlin…
178
I'll be speaking at BSides Canberra: cfp.bsidescbr.com.au/bsides-… -- this will cover my recent find of an RCE in Git (dgl.cx/2025/07/git-clone-sub…) and how that and some other vulnerabilities could be used against developers.
1
2
358
New blog post: Ghostty 1.0.0 terminal security; dgl.cx/2024/12/ghostty-termi… (CVE-2024-56803)
For once a non-security terminal thing. I'm sure someone else has written this but I couldn't find it; here's a simple script that makes commit IDs in "git log" clickable (in many terminals): gist.github.com/dgl/ef848e75…
Thank you to everyone who attended my @_everythingopen talk, with more of my terminal research. I've published the Docker image PoC that I demoed, see infosec.exchange/@dgl/110019…
@askparamount hi, the contact form on your website isn't working (doesn't submit at all) and I haven't been able to cancel my service before the renewal, can you please advise how to best to contact you?
@untappd_support I'd like to make taps on our kegerator have NFC tags on them, I tried writing the beer QR code url to one but that doesn't work on iOS (it does on Android), any hints as to what an NFC tag should look like? (not seen one in the wild to copy...)
@tarasyoung offical photos as a gif, how progressive! – at Hammersmith and Fulham, England
@matthewbloch we're at the all night cafe next to kfc and eat eating a all-night breakfast. Come find us. Battery dead. -td – at City of London, England
@fosdem fosdem.org's IPv6 address isn't listening on HTTP, just get connection refused.
2