Sign in

d0nut

@d0nut.dev
2.9K followers 236 following 177 posts

🦀 Rust + Security 🔑

PostsRepliesMedia
d0nut @d0nut.dev · 13/06/2026
Schizoposting today, are we?
100
d0nut @d0nut.dev · 02/04/2026
Random thought: Any time you find yourself using `unreachable!(...)`, consider that there might be a better model for your abstraction. I had this happen to me recently, and realized that I could break a struct out into an enum with two distinct cases, eliminating a branch
000
d0nut @d0nut.dev · 02/04/2026
Fun earthquake! Had something fall off a shelf.
030
d0nut @d0nut.dev · 25/01/2026
“Oh no! The consequences of my inaction!” - them, finally
120
d0nut @d0nut.dev · 13/01/2026
Incredible stuff how the universe sometimes gives you a million and one signs to go in a particular direction. Not ideal for my long term goals, but clearly a smart move currently.
030
d0nut @d0nut.dev · 27/09/2025
When it rains, it pours.
200
Reposted by d0nut
evacide @evacide.bsky.social · 12/07/2025
This is your regular reminder that if you are the smartest person in the room, go find another room. You are not going to run out of people or rooms.
1050286
d0nut @d0nut.dev · 07/07/2025
Just got an email about price increases due to tariffs. Ouch..
030
Reposted by d0nut
yung intranet @bane.at.haunted.computer · 01/07/2025
As of this morning I am unemployed. I am looking for work! I have a range of experience that can be valuable to the right team. A short list of relevant skills that I'd call out: reverse engineering & vuln research, DFIR, project management, infrastructure architecting, system administration.
26130
d0nut @d0nut.dev · 27/06/2025
These days, whenever I find myself feeling lazy, I think to myself "What would <old coworker/mentor> be doing right now?". Then I get back to work.
030
d0nut @d0nut.dev · 22/06/2025
sources say: “yes”
010
Reposted by d0nut
Cheston @chestonlee.com · 21/06/2025
The feeling of pride when the doctor pulls out the XL bicep cuff to take your blood pressure 💪 😤
161
d0nut @d0nut.dev · 21/06/2025
I would be telling that story for the next century. You could not get me to shut up about it even if my life depended on it.
110
d0nut @d0nut.dev · 20/06/2025
… to check for valid card numbers without alerting (most) cardholders to later sell access?
020
d0nut @d0nut.dev · 20/06/2025
A virtual credit card I used *exclusively* for a single (major) platform has just rejected a transaction to pay a citation in a Texas judicial precinct (I’m in california). Why rejected? They got the expiration wrong. Do we think this bruteforce or are they using an incorrect expiration on purpose…
130
d0nut @d0nut.dev · 16/06/2025
<3 hope you’re doing well dude!
120
Reposted by d0nut
0xacb @0xacb.com · 16/06/2025
I like to bypass XSS filters and sanitizers, so I keep forgetting to test for CSS exfiltration when I have HTML injection. This reminded me of the sic tool by @d0nut.dev  from a Singapore LHE, but there's also a cool list from @portswigger.net  👇
github.com
GitHub - PortSwigger/css-exfiltration
Contribute to PortSwigger/css-exfiltration development by creating an account on GitHub.
242
d0nut @d0nut.dev · 11/06/2025
What’s the “hot” platform for writing an article these days? I know Medium has been a faux pas for a while now, but I’m not sure what is good these days. @hashnode.bsky.social still a thing?
420
d0nut @d0nut.dev · 11/06/2025
I am finding the idea of going back to work in the security industry harder and harder as the days pass. Frankly, I almost regret my time in it.
250
Reposted by d0nut
Steve Klabnik @steveklabnik.com · 09/06/2025
Is #rustlang faster than C? steveklabnik.com/writing/is-r...
steveklabnik.com
Is Rust faster than C?
Blog post: Is Rust faster than C? by Steve Klabnik
109116
d0nut @d0nut.dev · 16/05/2025
It’s been two months since I left my job and this has honestly been the most fun I’ve had in my life. Not to mention the amazing article I’ll write after this side project of mine is over.
0140
d0nut @d0nut.dev · 11/05/2025
🫠
010
d0nut @d0nut.dev · 11/05/2025
Absolutely brutal
110
Reposted by d0nut
sailor mercury @sailorhg.com · 10/04/2025
this weekend, my dear friend and talented artist alice yang will be doing a pop up at the bubblesort shop! she paints gorgeous scenery and fluffy cats and will be selling stickers and prints! sat & sun 4/12-4/13 1pm-6pm 78 gough st alice-yang.com
asian woman with short hair, red hat, white hoodie, and red pants holding a print of trees and a power line set against a colorful sunset, standing in front of a glass door with pink bubble letters spelling out “bubblesort studios”
05010
d0nut @d0nut.dev · 07/04/2025
First night in weeks that I can’t find sleep. A low churn in my stomach has been nagging me for hours.
140
d0nut @d0nut.dev · 30/03/2025
Hey! I decided to retire the project. It took too much of my life and my motivation had long waned
010
d0nut @d0nut.dev · 28/03/2025
These genuinely go hard
010
Reposted by d0nut
Nish Tahir @nishtahir.com · 23/03/2025
When the RIIR calls, the Rustacean is compelled to answer.
071
Reposted by d0nut
Nathan @nathanroark.bsky.social · 23/03/2025
032
d0nut @d0nut.dev · 18/03/2025
100%
000
d0nut @d0nut.dev · 18/03/2025
Yup! Would’ve included an else if it wasn’t 2024 edition
000
d0nut @d0nut.dev · 17/03/2025
I believe it’s after the if body, right?
140
d0nut @d0nut.dev · 14/03/2025
Last day! Starting it off with some volunteering at the park :D
1200
d0nut @d0nut.dev · 14/03/2025
040
d0nut @d0nut.dev · 07/03/2025
I’m both excited and sad to announce that my last day at Robinhood will be Friday, March 14th! It’s been an incredible adventure, and genuinely one of the best arcs of my career, but it’s time for me to find the next best adventure (after a well deserved break, ofc 😉)
2260
d0nut @d0nut.dev · 18/02/2025
I’m still in SF!
000
d0nut @d0nut.dev · 18/02/2025
Soon ™️
260
d0nut @d0nut.dev · 10/02/2025
Flash Boys was good but presented a relatively one-sided view into the marketplace. It omitted key details to keep the story interesting. Still worth the read, though! It was certainly entertaining.
010
d0nut @d0nut.dev · 10/02/2025
Genuinely have watched the movie nearly 100 times
000
d0nut @d0nut.dev · 10/02/2025
Randomly missing my friends in Oregon rn
120
d0nut @d0nut.dev · 09/02/2025
Feeling simultaneously relieved, scared, and excited.
260
d0nut @d0nut.dev · 07/02/2025
Got an MRI recently and @sshell.co immediately turned it into a banger
0525
d0nut @d0nut.dev · 26/01/2025
Same :(
000
d0nut @d0nut.dev · 26/01/2025
Right?!
010
d0nut @d0nut.dev · 26/01/2025
I used to make fun of people who bought Liquid Death but now I’m probably one of their most addicted customers 😭
3130
d0nut @d0nut.dev · 22/01/2025
All the “HTTPOnly solves XSS” advocates are shaking rn
172
Reposted by d0nut
d4d @zakfedotkin.bsky.social · 22/01/2025
Hot out of the oven! The Cookie Sandwich – a technique that lets you bypass the HttpOnly protection! This isn't your average dessert; it’s a recipe for disaster if your app isn’t prepared: portswigger.net/research/ste...
portswigger.net
Stealing HttpOnly cookies with the cookie sandwich technique
In this post, I will introduce the "cookie sandwich" technique which lets you bypass the HttpOnly flag on certain servers. This research follows on from Bypassing WAFs with the phantom $Version cookie
03413
d0nut @d0nut.dev · 19/01/2025
*discussing library late fees* partner: even as a kid I was bad about returning books on time me: we’re going to be in debt from library fees, huh? partner: don’t worry - they max out at $20 me: you shouldn’t know that
827611