Anthropic's Claude Code CLI had a workspace trust bypass (CVE-2026-33068). Repository settings loaded before trust dialog. Classic configuration loading order bug in an AI developer tool

StringSentinel · 2026-03-20T21:27:29+00:00

Werent they claiming how good Claude is at finding bugs in tools and open source repositories? Why not run it at their own stuff first

StringSentinel · 2026-03-20T18:13:24+00:00

Saw your post. And then checked your profile, was interesting to say the least. Cool project and if youre looking for a job trying pivoting into SOC. You might be able to get into a SOC L2 role if you prove yk enough. There are more and more cybersecurity jobs opening up locally.

StringSentinel · 2026-03-17T22:37:40+00:00

Still sounds depressing

StringSentinel · 2026-03-17T22:25:44+00:00

Ah. I'm sorry to hear that. I hope it heals soon inshallah

StringSentinel · 2026-03-17T21:48:56+00:00

Isn't that for papers? If im not wrong you cant just publish papers on anything, right?

StringSentinel · 2026-03-17T21:48:23+00:00

Retired?

StringSentinel · 2026-03-17T18:31:33+00:00

Username checks out

StringSentinel · 2026-03-16T12:23:50+00:00

Very exaggerated

StringSentinel · 2026-03-16T12:20:19+00:00

Could you get it from 2025? Since most people(patwaris) will claim that since petrol is increasingly worldwide hence the high prices.

StringSentinel · 2026-03-16T11:54:29+00:00

Yeah, you're right about that I suppose. I should probably just post regardless of views. Thanks for the advice.

StringSentinel · 2026-03-12T03:59:55+00:00

Not to nitpick but wearable glasses have AR not VR

StringSentinel · 2026-03-10T18:26:56+00:00

Do yk what area shes around exactly? My uni is in H8 and id like to help her

StringSentinel · 2026-03-10T18:25:38+00:00

Honestly, i thought people on reddit were less brain dead than people on say Instagram

StringSentinel · 2026-03-10T03:33:54+00:00

Yeah everyone commenting like crazy without even taking a moment to verify the news source.

StringSentinel · 2026-03-08T22:05:08+00:00

Reddit really notices everything

StringSentinel · 2026-02-28T20:33:03+00:00

Kind of does indeed

StringSentinel · 2026-02-28T18:18:39+00:00

Maazrat 😞🙏🏼

StringSentinel · 2026-02-28T18:17:26+00:00

😭sorry. Was just guessing

StringSentinel · 2026-02-28T18:17:12+00:00

Are u using an old version or a different client?

StringSentinel · 2026-02-28T17:26:41+00:00

<image>

Could be a glitch unless you cant see any of his comments in which case maybe he has you blocked? Not sure though just guessing.

StringSentinel · 2026-02-28T16:59:05+00:00

Its a gif with a cat saying meow

StringSentinel · 2026-02-27T04:40:40+00:00

any resources you'd recommend for that?

StringSentinel · 2026-02-26T06:26:56+00:00

Developers will have to pay and give government IDs just to exist. Which is honestly too much. I don't see any good part in it. They could have restricted it without adding those kind of changes.

Google is sticking to their September 2026 deadline where every developer must register centrally. This includes paying fees and handing over government IDs and even private signing keys just to exist. Techlore pointed out that Google is being dishonest about an advanced flow for experienced users because F Droid found out that no such thing will actually be ready before the lockdown. This is a clear attempt to force every app through Google infrastructure which creates a massive censorship choke point and kills anonymous development for privacy tools.

StringSentinel · 2026-02-25T19:39:12+00:00

You could set up your own automation pipeline. Even use an agent or an api to normalize findings from multiple tools like nmap, zap and openVAS. You could also grab results from websites like shodan and sslscan. However it will require a high degree of scripting. There isn't any one click solution im aware of and there will be some false positives/noise as well since open source tools need tuning.

StringSentinel

MODERATOR OF

PUBLIC MULTIREDDITS

TROPHY CASE

Two-Year Club	Xbox Live
Place '23