iiinova — where your digital self keeps evolving

Reposted by Rico Suter

Andrew Lock "Sock" @andrewlock.bsky.social · 28/10/2025

Blogged: Understanding the worst .NET vulnerability ever: request smuggling and CVE-2025-55315 andrewlock.net/understandin... In this post I discuss request smuggling, the recent vulnerability in ASP.NET Core with a severity score of 9.9, and how attackers could exploit it #dotnet #aspnetcore

andrewlock.net

Understanding the worst .NET vulnerability ever: request smuggling and CVE-2025-55315

In this post I discuss request smuggling, the recent vulnerability in ASP.NET Core with a severity score of 9.9, and how attackers could exploit it

02210

Reposted by Rico Suter

Darryl Ruggles @darryl-ruggles.cloud · 13/09/2025

itnext.io/how-i-almost... One of the biggest threats to many companies today is supply chain attacks with software. We all depend on so many open source third-party tools as foundations to our products. Bad actors have figured out this is a soft target. An interesting read on this below. (1️⃣/3️⃣) 🧵

itnext.io

How I Almost Got Pwned — A Tale of Supply Chain Attacks and GitHub Actions Gone Wrong

Or: “That time someone tried to turn my innocent Node.js repo into a credential-harvesting machine”

111

Rico Suter @ricosuter.com · 30/03/2025

NSwag v14.3.0, an OpenAPI toolchain for .NET, and NJsonSchema v11.2.0 have been released. The updates contain many improvements and fixes. Please update and report any problems. - github.com/RicoSuter/NS... - github.com/RicoSuter/NJ...

012

Reposted by Rico Suter

Phillip Carter @phillipcarter.dev · 03/03/2025

Well I think I've fully come around to the idea that LLMs are computers. So I wrote about that. I guess this is my most bombastic blog post www.phillipcarter.dev/posts/llms-c...

phillipcarter.dev

LLMs Are Weird Computers

A perspective on AI models as an inverted computing paradigm

1319

Reposted by Rico Suter

Lars Klint @larsklint.bsky.social · 31/01/2025

This is still one of my go-to ways to describe what programmers do. And yes, it is accurate.

927325

Reposted by Rico Suter

Andrew Lock "Sock" @andrewlock.bsky.social · 19/11/2024

Blogged: Understanding cross-origin security headers - Part 1 - Cross-Origin-Opener-Policy: preventing attacks from popups andrewlock.net/understandin... In this post I describe how to protect yourself from vulnerabilities in JS APIs with the Cross-Origin-Opener-Policy header #aspnetcore #appsec

andrewlock.net

Cross-Origin-Opener-Policy: preventing attacks from popups: Understanding cross-origin security headers - Part 1

In this post I describe the vulnerabilities in window.opener and window.open() and how to protect yourself with Cross-Origin-Opener-Policy

31810