Sign in

d0nut

@d0nut.dev
2.9K followers 236 following 177 posts

🦀 Rust + Security 🔑

PostsRepliesMedia
d0nut @d0nut.dev · 02/04/2026
Random thought: Any time you find yourself using `unreachable!(...)`, consider that there might be a better model for your abstraction. I had this happen to me recently, and realized that I could break a struct out into an enum with two distinct cases, eliminating a branch
000
d0nut @d0nut.dev · 02/04/2026
Fun earthquake! Had something fall off a shelf.
030
d0nut @d0nut.dev · 13/01/2026
Incredible stuff how the universe sometimes gives you a million and one signs to go in a particular direction. Not ideal for my long term goals, but clearly a smart move currently.
030
d0nut @d0nut.dev · 27/09/2025
When it rains, it pours.
200
Reposted by d0nut
evacide @evacide.bsky.social · 12/07/2025
This is your regular reminder that if you are the smartest person in the room, go find another room. You are not going to run out of people or rooms.
1050286
d0nut @d0nut.dev · 07/07/2025
Just got an email about price increases due to tariffs. Ouch..
030
Reposted by d0nut
yung intranet @bane.at.haunted.computer · 01/07/2025
As of this morning I am unemployed. I am looking for work! I have a range of experience that can be valuable to the right team. A short list of relevant skills that I'd call out: reverse engineering & vuln research, DFIR, project management, infrastructure architecting, system administration.
26130
d0nut @d0nut.dev · 27/06/2025
These days, whenever I find myself feeling lazy, I think to myself "What would <old coworker/mentor> be doing right now?". Then I get back to work.
030
Reposted by d0nut
Cheston @chestonlee.com · 21/06/2025
The feeling of pride when the doctor pulls out the XL bicep cuff to take your blood pressure 💪 😤
161
d0nut @d0nut.dev · 20/06/2025
A virtual credit card I used *exclusively* for a single (major) platform has just rejected a transaction to pay a citation in a Texas judicial precinct (I’m in california). Why rejected? They got the expiration wrong. Do we think this bruteforce or are they using an incorrect expiration on purpose…
130
Reposted by d0nut
0xacb @0xacb.com · 16/06/2025
I like to bypass XSS filters and sanitizers, so I keep forgetting to test for CSS exfiltration when I have HTML injection. This reminded me of the sic tool by @d0nut.dev  from a Singapore LHE, but there's also a cool list from @portswigger.net  👇
github.com
GitHub - PortSwigger/css-exfiltration
Contribute to PortSwigger/css-exfiltration development by creating an account on GitHub.
242
d0nut @d0nut.dev · 11/06/2025
What’s the “hot” platform for writing an article these days? I know Medium has been a faux pas for a while now, but I’m not sure what is good these days. @hashnode.bsky.social still a thing?
420
d0nut @d0nut.dev · 11/06/2025
I am finding the idea of going back to work in the security industry harder and harder as the days pass. Frankly, I almost regret my time in it.
250
Reposted by d0nut
Steve Klabnik @steveklabnik.com · 09/06/2025
Is #rustlang faster than C? steveklabnik.com/writing/is-r...
steveklabnik.com
Is Rust faster than C?
Blog post: Is Rust faster than C? by Steve Klabnik
109116
d0nut @d0nut.dev · 16/05/2025
It’s been two months since I left my job and this has honestly been the most fun I’ve had in my life. Not to mention the amazing article I’ll write after this side project of mine is over.
0140
Reposted by d0nut
sailor mercury @sailorhg.com · 10/04/2025
this weekend, my dear friend and talented artist alice yang will be doing a pop up at the bubblesort shop! she paints gorgeous scenery and fluffy cats and will be selling stickers and prints! sat & sun 4/12-4/13 1pm-6pm 78 gough st alice-yang.com
asian woman with short hair, red hat, white hoodie, and red pants holding a print of trees and a power line set against a colorful sunset, standing in front of a glass door with pink bubble letters spelling out “bubblesort studios”
05010
d0nut @d0nut.dev · 07/04/2025
First night in weeks that I can’t find sleep. A low churn in my stomach has been nagging me for hours.
140
Reposted by d0nut
Nish Tahir @nishtahir.com · 23/03/2025
When the RIIR calls, the Rustacean is compelled to answer.
071
Reposted by d0nut
Nathan @nathanroark.bsky.social · 23/03/2025
032
d0nut @d0nut.dev · 14/03/2025
Last day! Starting it off with some volunteering at the park :D
1200
d0nut @d0nut.dev · 14/03/2025
040
d0nut @d0nut.dev · 07/03/2025
I’m both excited and sad to announce that my last day at Robinhood will be Friday, March 14th! It’s been an incredible adventure, and genuinely one of the best arcs of my career, but it’s time for me to find the next best adventure (after a well deserved break, ofc 😉)
2260
d0nut @d0nut.dev · 18/02/2025
Soon ™️
260
d0nut @d0nut.dev · 10/02/2025
Randomly missing my friends in Oregon rn
120
d0nut @d0nut.dev · 09/02/2025
Feeling simultaneously relieved, scared, and excited.
260
d0nut @d0nut.dev · 07/02/2025
Got an MRI recently and @sshell.co immediately turned it into a banger
0525
d0nut @d0nut.dev · 26/01/2025
I used to make fun of people who bought Liquid Death but now I’m probably one of their most addicted customers 😭
3130
d0nut @d0nut.dev · 22/01/2025
All the “HTTPOnly solves XSS” advocates are shaking rn
172
Reposted by d0nut
d4d @zakfedotkin.bsky.social · 22/01/2025
Hot out of the oven! The Cookie Sandwich – a technique that lets you bypass the HttpOnly protection! This isn't your average dessert; it’s a recipe for disaster if your app isn’t prepared: portswigger.net/research/ste...
portswigger.net
Stealing HttpOnly cookies with the cookie sandwich technique
In this post, I will introduce the "cookie sandwich" technique which lets you bypass the HttpOnly flag on certain servers. This research follows on from Bypassing WAFs with the phantom $Version cookie
03413
d0nut @d0nut.dev · 19/01/2025
*discussing library late fees* partner: even as a kid I was bad about returning books on time me: we’re going to be in debt from library fees, huh? partner: don’t worry - they max out at $20 me: you shouldn’t know that
827611
Reposted by d0nut
cts @gf256.bsky.social · 11/01/2025
Many YouTube videos lately are clickbait and stretch out a Wikipedia page into 30 minutes. Many videos are just questions with simple answers. So I built tldw.tube: put in the URL and save your time! (No hate on Veritasium, it just happened to work well for the screenshot)
96017
Reposted by d0nut
Danica Fine @thedanicafine.bsky.social · 09/01/2025
idk who needs to hear this, but two sentences is NOT a valid technical conference abstract.
162
d0nut @d0nut.dev · 07/01/2025
I guess Chrome is technically a SAT solver because multiple CSP headers and the values within them are in conjunctive normal form. 🥲
050
Reposted by d0nut
Matthew Garrett @mjg59.eicar-test-file.zip · 03/01/2025
I will not be at Shmoocon next week, but I will be around Shmoocon next week, so hit me up if you'd like to grab a drink or talk about TPMs or whatever
1181
Reposted by d0nut
cts @gf256.bsky.social · 02/01/2025
happy new year! here is a fun math fact
3475
d0nut @d0nut.dev · 02/01/2025
Have a kick-ass day, everyone 😎
6150
d0nut @d0nut.dev · 30/12/2024
Xkcd feels like the Simpsons of tech: everything that has, or will happen, has already been written about. There’s always a relevant xkcd post for a given situation.
2886
Reposted by d0nut
manpreet @mnprt.me · 28/12/2024
My Go JVM now can run this code. Which is Object Intilization + Method calling. Time to clean up the code tomorrow.
281
d0nut @d0nut.dev · 25/12/2024
Congested so I’m eating a thai chili pepper to fix that
060
d0nut @d0nut.dev · 22/12/2024
“Human Identity Verification” does not abbreviate well 😅
270
Reposted by d0nut
David Buchanan @retr0.id · 21/12/2024
sad story in three icons
browser window icon with green tick, cloud icon with green tick, server icon with red cross
1148549
d0nut @d0nut.dev · 21/12/2024
Yo @jetbrains.com ? Would be fire ngl
150
Reposted by d0nut
Christina @cszhu.dev · 21/12/2024
looking for my 2024 visual studio code wrapped
5842
Reposted by d0nut
Nicolas Grégoire @agarri.fr · 14/12/2024
A younger me, as a pentester and bug hunter, had exactly the bias described in this article 🤫 Luckily, I later worked with and for "the other side" and it changed my mind 🤯 I hope young people reading it will avoid taking years to understand the complexities of fixing bugs in a timely manner 🤞
maxwelldulin.com
Why Can't You Fix This Bug Faster?
Fixing security vulnerabilities in a timely manner is more complicated than you realize.
25816
d0nut @d0nut.dev · 14/12/2024
lol always an adventure
140
d0nut @d0nut.dev · 12/12/2024
I got 8 hours of sleep last night
060
Reposted by d0nut
​ ​ ​ ​​ ​ ​ ​ ​ ​ ​ ​ ​ ​ ​ ​ ​​ ​ ​ ​ ​ ​ ​ ​ ​ ​ ​ ​ ​​ ​ ​ ​ @jordy.app · 12/12/2024
Nerfing myself so other people can get jobs
021
d0nut @d0nut.dev · 11/12/2024
Me, if I could get a regular, functional sleep schedule
3120