Sign in

Clara Leigh

@clara42.bsky.social
1.6K followers 877 following 275 posts

Laravel, VueJS, Cyber Security 🌈

PostsRepliesMedia
Reposted by Clara Leigh
🐈‍⬛💜 phonakins 🍉🌲 @phonakins.com · 27/07/2026
"There were metal shavings found in bread products … products that were supposed to be dairy-free, that were not dairy-free, [which] were only caught by accident because somebody happened to put it together after their child or they themselves got sick, not because the company had worked it out."
abc.net.au
Horse meat has been sold as minced beef or lamb in Australia, documents show
Government documents show hundreds of businesses operating in Australia have breached food safety laws, with one politician warning "you could be eating a minced horse".
031
Clara Leigh @clara42.bsky.social · 11/07/2026
I get it nearly every other message 🫩
“You’re right to push on this” Stewie Griffin in a padded room
010
Clara Leigh @clara42.bsky.social · 10/05/2026
I would argue that natural language is now a type of programming and therefore prompt injection via a skill is absolutely malware
130
Clara Leigh @clara42.bsky.social · 30/04/2026
This is the coolest exploit I've seen on linux for a little while: copy.fail
copy.fail
Copy Fail — 732 Bytes to Root
CVE-2026-31431. 100% Reliable Linux LPE — no race, no per-distro offsets, page-cache write that bypasses on-disk file-integrity tools and crosses containers. Found by Xint Code.
000
Reposted by Clara Leigh
Guardian Australia @australia.theguardian.com · 21/04/2026
Labor under internal pressure on gas tax as influencer says government ‘stopped working for the punters’
theguardian.com
Labor under internal pressure on gas tax as influencer says government ‘stopped working for the punters’
Party’s environment action network tells parliamentary inquiry into gas export tax to consider ‘very substantial’ levy on windfall profits * Follow our Australia news live blog for latest updates * Get our breaking news email, free app or daily news podcast The Albanese government is facing internal pressure to raise taxes on gas companies as a prominent social media influencer warns Labor not to underestimate the scale of public outrage about the existing regime. Labor’s environment action network (LEAN) used evidence to a parliamentary inquiry into the tax settings for the gas sector to encourage the government to consider a “very substantial tax” on windfall profits. Continue reading...
46417
Clara Leigh @clara42.bsky.social · 19/03/2026
Next week: ahh the cyclone hit Darwin therefore gas prices need to go up and therefore electricity prices
130
Clara Leigh @clara42.bsky.social · 12/03/2026
My first #PigeonSky post!!! 🪶 The pigeons where just minding their business and then the magpie came in and gave them a big scare
Two pigeons being scared by a bossy magpie
061
Clara Leigh @clara42.bsky.social · 10/03/2026
Went to read the website, to understand the meme, but got distracted by the cool binary animation that happens when you tap the screen 😅
010
Clara Leigh @clara42.bsky.social · 10/03/2026
Ahhh maybe it’s a northern hemisphere thing. I don’t think I’ve ever heard it here in Brisbane
010
Clara Leigh @clara42.bsky.social · 10/03/2026
I don’t think I’ve ever heard “praa” is this an American thing?
210
Reposted by Clara Leigh
Stephen Rees-Carter @valorin.bsky.social · 25/02/2026
PSA for @statamic.com folks - update your sites ASAP! ⚠️ A CRITICAL vuln was discovered that allows full account takeover via password resets! 😱 All the details: cvereports.com/reports/CVE-...
github.com
CVE-2026-27593 - GitHub Advisory Database
Statamic is vulnerable to account takeover via password reset link injection
096
Clara Leigh @clara42.bsky.social · 23/02/2026
My current task is to reinstate users ability to update their emails. The issue? Their email is technically a stable coin wallet and money is directly linked to their ability to access that email I have a fix but my god this topic hit hard this week
120
Clara Leigh @clara42.bsky.social · 18/02/2026
Shipping spaghetti is still shipping 😭
020
Clara Leigh @clara42.bsky.social · 18/02/2026
Tip I leaned today: Disable networking on your GH Action Tests Even if you block it in code, things could still leak
GitHub Action with the text:
        name: Run tests without networking
        run: |
          sudo unshare --net -- bash -lc '
            ip link set lo up
            php artisan test --exclude-group manual --parallel
          '
000
Clara Leigh @clara42.bsky.social · 13/02/2026
Hmm I wonder if it’s a cpu power limiter then under high load 🤔
010
Clara Leigh @clara42.bsky.social · 13/02/2026
Anyone else's PHP github actions suddenly taking an insane time to complete? Mine are taking 20mins-1hr and I cannot replicate any problem on local or even brand new machines setup
100
Clara Leigh @clara42.bsky.social · 26/01/2026
If at first you don’t succeed, try and try again 🤔
000
Clara Leigh @clara42.bsky.social · 19/01/2026
kinda neat, I saw something else recently but in a code that compiles code that compiles other code nesting egg
010
Reposted by Clara Leigh
Larabelles @larabelles.com · 13/01/2026
We have another giveaway: a ticket to Laracon India 🎉. Since this is a last-minute giveaway, it is only open to people already basedin Ahmedabad, India, and it's only open until January 17th, 2026. Retweet/share for reach, and enter via our website, link below ⬇️.
146
Reposted by Clara Leigh
Patrick C Miller @patrickcmiller.bsky.social · 10/01/2026
Why governments need to treat fraud like cyberwarfare, not customer service cyberscoop.com/industrializ...
cyberscoop.com
Why governments need to treat fraud like cyberwarfare, not customer service
Fraud has become industrialized and weaponized by syndicates and hostile states. This op-ed argues it’s a global security threat and outlines a new US-UK-backed public-private task force to fight it.
021
Reposted by Clara Leigh
maia arson crimew 🏴 @crimew.gay · 27/12/2025
gpg.fail
724761
Clara Leigh @clara42.bsky.social · 24/12/2025
There should be a “same product, same features” law If a country forces a company to have better privacy options or allow third party app stores or whatever it might be, you should be forced to offer that same feature here in Australia
020
Clara Leigh @clara42.bsky.social · 12/12/2025
By all means use it, but don't assume its telling the truth. Investigate and confirm what its said is true before you go off and ask someone else to verify its claims for you
000
Clara Leigh @clara42.bsky.social · 12/12/2025
Reminder folks, chatgpt is designed to agree with you and "solve" issues so it rarely tells you that you're misunderstanding things. It will absolutely mislead you or say its found the issue when really it's just giving its best guess Getting tired of seeing low quality github issues hey
251
Clara Leigh @clara42.bsky.social · 04/12/2025
Stay safe friends
231
Clara Leigh @clara42.bsky.social · 01/12/2025
My favourite part of the city is the KP cliffs. Absolutely stunning views 😍 Whenever I need time to myself, this is where I go
View of Brisbane city at night
040
Clara Leigh @clara42.bsky.social · 30/11/2025
I’m really hating the “I know but it’s still so cute” crowd of fb simps 😭
010
Clara Leigh @clara42.bsky.social · 24/11/2025
Ted has to be the worst of them all 🤢 Never met a more disgusting lib in my life
100
Clara Leigh @clara42.bsky.social · 17/11/2025
Wrong regex in the vite file? Css in script tags? Does it refresh but not do the thing? I feel you, I’ve had to hunt this bug down a few times
010
Clara Leigh @clara42.bsky.social · 14/11/2025
Have they finally got the DB driver working well again?!? I’ll have to check it out I remember checking in 2 years ago with the mongo team and it was not quite ready for production usage, but it worked in some areas
000
Clara Leigh @clara42.bsky.social · 05/11/2025
Yeah fr. In my paper I compare it to the CD/USB autorun drama of the 00s. Except instead of just inserting 1 device, we pull in 10,000 from the internet and assume it’s all gucci
010
Clara Leigh @clara42.bsky.social · 04/11/2025
The first step is tackling npm autorun. Explicit approval for any post install/update script with insights Next would be SBOMs with behaviour attached. And notices when deps grow, scripts change etc. and a move away from the habit of using deps for tiny tasks. + much more. I could rant for a while
010
Clara Leigh @clara42.bsky.social · 04/11/2025
In npm world it’s a little tricky rn. Personally I don’t update a pkg until it’s 2-3 wks old (unless it’s a security patch). This gives community run static/dynamic analysis tools time to find and flag things. There are SBOM tools that help too The real solution would require community change… 1/2
110
Clara Leigh @clara42.bsky.social · 04/11/2025
I wrote a research paper on this topic just last month This issue is entirely preventable. The only reason we keep seeing this style of attack is because our industry keeps repeating the same mistakes over and over again 😔
150
Reposted by Clara Leigh
Joe Tannenbaum @joe.codes · 04/11/2025
Whoa this is stunning
061
Clara Leigh @clara42.bsky.social · 02/11/2025
I knew the good talks with China could only last so long. Guessing it’s a proxy war sorta thing? I haven’t read into it yet
000
Clara Leigh @clara42.bsky.social · 29/10/2025
It’s the small things that keep me on Mac. Like I remember my yubikey being a pain with git commits on Linux and other little small things that take hours to fix properly I do miss my Linux daily driver tho 🥲
110
Clara Leigh @clara42.bsky.social · 27/10/2025
✨Microsoft security✨
000
Reposted by Clara Leigh
DESIGN THINKING! Comic @designthinking.lol · 20/10/2025
With the AWS outage, now‘s as good a time as any to post this old strip.
1526431042
Clara Leigh @clara42.bsky.social · 14/10/2025
Looking forward to see how they deal with the debanking crew that’ll target them next
000
Clara Leigh @clara42.bsky.social · 09/10/2025
Working on Crypto in the #laravel world? Hit me up, I want to see what you're doing! I've got solana stablecoin p2p, offramps to banks and more going on over here 😍
010
Clara Leigh @clara42.bsky.social · 05/10/2025
Once upon a time, USBs and CDs could auto run. That’s how worms like stuxnet and Agent.BTZ spread everywhere We learned the hard way and killed autorun Now we `npm install` 1,000 different dependencies from the internet and consider it “safe”, forgetting that it does the exact same thing
050
Clara Leigh @clara42.bsky.social · 01/10/2025
10 second deploys is quite a feat! I remember getting my server setup and install time down to 15secs at my last startup (business in a box for web) and I thought that was the coolest thing ever but no one batted an eye back then 😭 maybe I was just too early
120
Clara Leigh @clara42.bsky.social · 01/10/2025
Lmao I bet he just found out you’re not allowed to edit your own wiki 😂
030
Reposted by Clara Leigh
Joe Tannenbaum @joe.codes · 30/09/2025
Curious what it looks like to implement the new Inertia Infinite Scroll component? Have 3 minutes? That's all it takes. I whipped up a little demo: youtu.be/gQB6DdPHzSY
youtu.be
Infinite Scrolling with Laravel + Inertia
YouTube video by Laravel
1218
Clara Leigh @clara42.bsky.social · 30/09/2025
I just wish sql error logs supported it 😭
010
Clara Leigh @clara42.bsky.social · 30/09/2025
I’m not sure rate limiting would help other that slow them down. Really the solution is to ensure there is no way to check if a user exists, which is doable but often tedious
000
Clara Leigh @clara42.bsky.social · 30/09/2025
I would define a vulnerability as something that assists in the compromise of an asset I have seen a lot of accounts this year fall victim to phishing attacks, most of which only targeted due to UE 5 years ago, I cared little about UE but back then phishing was easier to spot
110
Clara Leigh @clara42.bsky.social · 30/09/2025
Is username enumeration (UE) a real vulnerability? Yes, and it matters more today than it did a few years ago. As phishing attacks look more legitimate, even smart people are getting tricked This week I saw a UE+phish lead to an account take over, and the URL in the Phish was a legitimate url
220