Anatolij Vasilev

found an SSRF in @tangled.org that let any AT Protocol user hit localhost of the production server and did a short write-up: r0.fyi/blog/tangled-knotmirror-ssrf fixed in v1.14.0-alpha, which is already live #cybersecurity #infosec #security

Now I'm one of the last steps before the release of GBxCAM Viewer app! UI polishing and user friendliness. Now if have seen the app everyday for several hours and it's very easy to navigate, but new users might need a heads up! #gameboy #uxui

How tf do people vibecode? I just made one prompt to Claude (with a $20 Pro subscription) and it's now researching my code for like 20 minutes and burnt like half of the tokens and isn't even finished yet wtf #vibecoding

In the following days I'll finish features like palette and deleting images directly from the cartridge! #gameboy #insidegadgets #gbcamera

I don't care if you used an LLM to write your PR but if there's a weird new change in the PR and I ask you why it's there, you should be able to answer that question

gm tanglers! its time for the release thread 🧵 ⭐ you can now access CI logs right from your terminal, with plain ol' SSH ⭐ 1. push your changes 2. if CI is triggered, the knot will give you an ssh command 3. paste that into a new shell 4. live tail CI logs! watch to know more: 1/5

I can't get myself to use #atproto Bluesky or Mastodon. It's really hard to find posts I'm interested in. Twitter just gives me the #infosec and #lowlevel programming posts I'm interested in.

I can't have more followers on Github than people that I follow by definition. As I always follow everyone back who's following me T_T

Is it time to reboot my machine yet?

Seeing @madoka.systems .systems domain, I'm now thinking about getting yet another domain. That would be my fourth one 😭

First console played: NES (Dendy) First console owned: GBA First console that made me fall in love with games: GBA (still love it <3) First console that was just mine rather than shared with my family: GBA First console I bought with my own money: 3DS (more than 10yrs after release :D)

Just created my first PR to @bsky.app Wish me luck! #bluesky github.com/bluesky-soci...

Oh that repo is also on tangled, a github alternative running on #atproto tangled.org/tolik518.tng...

With all those CVEs dropping: this years #40c3 will be interesting.

the backend for that graph is a #Rust service that hits the Strong app API and dumps everything into a #ClickHouse DB source: github.com/tolik518/strong-api-workout-sync

my ADHD brain needed to gamify gym consistency, so I made my workout history look like a GitHub contribution graph green squares are weirdly motivating when you built them yourself r0.fyi/projects/str...

Also for sending vulnerability disclosures

bundiff on tangled. no js no gpu.

I don't think anyone actually knows the difference between #fediverse and the #atproto

It's crazy how many CVEs are dropping lately. In the past, not everyone had access to a seasoned security expert, and now we have one LLM right at our fingertips #cybersec #cve

Remember when Ai was just about making tacky images?

The thing I hate most about the Twitter takeover is that now everyone is on different platforms for basically the same thing (Twitter, Bluesky, Mastodon, etc)