solst/ICE
@IceSolst
Pentester turned seceng turned meeting canceller - https://hex.dance/ (-13$ ARR)
Here's a thread of every app I've built 100% with @cursor_ai using Claude. These are all fun side projects I've worked on in my free time over the last few months.
Misnamed functions should be a jailable offense. For instance, look at this emberjs function htmlSafe. It actually disables html escaping and makes you vulnerable to XSS, when you’d think it would be used to sanitize input. Absolute crime.
lol?
2.8M weekly downloads for a package instead of just calling Array.isArray()? Am I stupid
🚨 Breaking 🚨 The NPM package ‘is’ - with 2.8M weekly downloads - got hit by a supply chain attack. Attackers injected backdoor malware via hijacked maintainer accounts. This gave them full remote access to infected devices.
The hardest sticker I’ve ever seen was “I pet the bomb dog at defcon 31” which appeared mere hours after the bomb threat incident (can’t find photo of it)
Pre-blackhat vendor spam is unbearable. Do sales people know if you all do the same thing none of you get anywhere? My mailbox, linkedin, and phone have been DoS’d.
Nuclear take: bug bounty and exploit dev are supposed to be transitional jobs you grow out of. They get tediously repetitive, but more importantly do not scale. You can only work on a few bugs at a time, and spend time on minute details. You ideally learn to deliver value at…
We’ve established that ~70% of vulnerabilities are memory corruption. But that doesn’t mean most initial vectors of compromise are due to those vulns. We still struggle the most with the basics: forgotten unpatched servers, social engineering, no MFA. We love to talk about…
This guy single handedly carried an entire generation of programmers, bless you Bucky

This is why I don’t believe Rust will reduce vulnerabilities. The language is atrocious and abstruse. Skill issue? Yes that’s exactly it, all vulnerabilities are quite literally skill issues. And having to rewrite working code in this atrocity of a language will not help at all.
After my recent news, many people have asked me: "Why not Rust?" Here's my answer:
> year 2077 (636 months into ai taking our jobs) > open chrome (rewritten in rust) > still have to manually press relaunch button > open twitter (rust Bitcoin style) > news of another fortinet rce > open work laptop (windows rust edition) > 17 evidence collection requests from…
Using @IceSolst card generator rn for checkout integration nobody use this card this one's mine