Jonathan Leitschuh @jlleitschuh.bsky.social · 09/01/2026I found a travel app leaking exact user locations and birthdays via its internal API. We could pinpoint where people were living and sleeping. Full write-up 👇 medium.com/bugbountywri... 030
Jonathan Leitschuh @jlleitschuh.bsky.social · 05/06/2025🐍 How does a “Won’t Fix” CVE become a 160-comment thread… and a 5-year-old RCE that finally gets fixed? It involved deserialization bugs, real payloads, and a phone call from the beach. The full story of SnakeYAML 2.0 and secure-by-default APIs 👇 🔗 infosecwriteups.com/%EF%B8%8F-in... 001
Jonathan Leitschuh @jlleitschuh.bsky.social · 16/04/2025What an absolutely wild story. Cringing at the implications. This is a wild way for a US government agency to be operating www.npr.org/2025/04/15/n...npr.orgA whistleblower's disclosure details how DOGE may have taken sensitive labor dataA whistleblower tells Congress and NPR that DOGE may have taken sensitive labor data and hid its tracks. "None of that ... information should ever leave the agency," said a former NLRB official. 000
Jonathan Leitschuh @jlleitschuh.bsky.social · 14/04/2025I thought it might be fun to capture all of the falsehoods I've observed over the years regarding CVE in a single place. Feel free to send this to your CEO next time they use "CVE" and vulnerability interchangeably 😆 medium.com/@jonathan.le...medium.comFalsehoods People Believe about CVE’sCVE ≠ Vulnerability (And 35 Other Confusions Regarding CVE) 010
Reposted by Jonathan LeitschuhMore Perfect Union @moreperfectunion.bsky.social · 17/12/2024BREAKING: The FTC has announced a new rule banning junk fees for tickets and hotels. This final junk fees rule bans bait-and-switch pricing and all tactics that corporations use to hide the total price of live event tickets, hotels, and vacation rentals.ftc.govFederal Trade Commission Announces Bipartisan Rule Banning Junk Ticket and Hotel Fees 261656388