proprietary dslr batteries are no surprise, but the variety in standard batteries for all the other things is something else
My father's barn.
Sweden, Uppland.
#NaturePhotography #photography #sverige #flower #flowerphotography #blomma #naturelovers #nature #bokeh
Kudos to whoever this photographer was* for capturing one of the most stark juxtapositions I’ve seen in a good long while.
![]()
(*Edit: the photographer is Maximilien Lamy, otherwise known as shadowsandthecity on Instagram)
"Is this repo manually coded? If it's manually coded you're being left behind."
Ma'am, that is a twenty five thousand LoC slab of C++ code. It targets a console designed twenty two years ago and discontinued twelve years ago. It is an amalgamation of the work of several developers, forked, patched, reformatted, strained, and ultimately inexorably joined in an unholy Make ruleset. Market economics had no hand in the creation of this abhorrence. The fact that this project exists proves that God is either impotent to alter His universe or ignorant to the horrors taking place in his kingdom. This prism of code is more than a story point. It is a physical declaration of mankind's contempt for entropy. It is hubris manifest.
We also have an SDL3 port if you would prefer that.
🙏 New Blog Post
The Pope's official prayer app has an IDOR that lets anyone pull user data for all 719,517 accounts. One GET request per user. No auth check.
What's exposed:
Email addresses
Names
Country
Date of birth (they call it "borned_date" lol)
Account role (it's "PRAYER" for everyone, obviously)
Also found:
Signup endpoint returns the email verification token in the response body, so you can verify accounts without accessing the inbox
Their verification emails fail their own domain's authentication requirements
Reported January 3rd. Emailed 9 people. A journalist also contacted them. Zero responses. Still live six months later. Vow of silence I guess.
Full writeup: https://bobdahacker.com/blog/click-to-pray
#InfoSec #BugBounty #ResponsibleDisclosure #IDOR #Security #CyberSecurity #Privacy #DataExposure #ClickToPray #Vatican #APISecurity
Since a few people asked, here's the setlist for my closing DJ set on Sunday at #EMFCamp #Nullsector.
I had an absolute blast doing this one. In the months running up to EMF I put a shortlist of tunes I wanted to play together, but as soon as I got up there I was like "screw it, I'm just gonna run with whatever feels good" and didn't even look at the list.
Thanks to everyone who came and listened - y'all had so much energy and I can't stop grinning when I think back to it. Amazing experience.
I got to spend the weekend at #emfcamp meeting old friends and making new ones
I love that it is the most accepting place in the country where anyone can express themselves without judgement meet likeminded nerds and come together for the talks, workshops and at the end of the night on the floor in null sector
See you all again in 2028 (or hopefully some in CCC next year)
The best days of the year emf is such a core part of my soul
Steve:
frequent overthinker, compulsive fixer, digester-then-explainer, "why?" question relishing father, minor-irritant partner, excessive disassembler, original-form hacker, high-efficiency googler, borderline-competent car-fixer, expert-level car-breaker, faster-by-qwerty communicator, indiscriminate photo-taker, Leatherman owner.