Dongsung "Donny" Kim โ€ข make break software โ€ข ๐Ÿง‘โ€๐Ÿ’ป IT-Security Expert โ€ข ๐Ÿ“ฃ DEF CON Speaker (sometimes) โ€ข ๐Ÿข Security Office โ€ข ๐Ÿง‘โ€๐Ÿ’ป they/them โ€ข ๐ŸŽ™ kiding

โžก๏ธ @kiding.bsky.social
Joined July 2009
kiding ๐Ÿง‘โ€๐Ÿ’ป retweeted
๊ด€๋ จํ•ด์„œ php ์„œ๋ฒ„๋“ค์€ ๋ชจ๋‘ ์ฆ‰์‹œ ์—…๋ฐ์ดํŠธ ํ•„์š”ํ•ฉ๋‹ˆ๋‹ค. ๊ฝค ๋งŽ์€ ์‚ฌ์ดํŠธ๋“ค์ด ์—…๋ฐ์ดํŠธ ์ „์— ๊ณต๊ฒฉ์„ ๋ง‰์œผ๋ ค๊ณ , ์‚ฌ์ดํŠธ๋ฅผ ์ผ์‹œ์ ์œผ๋กœ ๋‚ด๋ฆฌ๊ธฐ๋„ ํ–ˆ์Šต๋‹ˆ๋‹ค. ํŠนํžˆ๋‚˜ ๊ตญ๋‚ด๋„ ๋งŽ์ด ์“ฐ๋Š” Wordpress ์ด ์ทจ์•ฝ์ ์€ ๋น„์ธ์ฆ ์‚ฌ์šฉ์ž๊ฐ€ ์›๊ฒฉ ์ฝ”๋“œ ์‹คํ–‰ ๊ฐ€๋Šฅํ•œ๊ฑฐ๋ผ ๊ณต๊ฒฉ๋ฐ›๊ธฐ ๋”ฑ ์ข‹์Šต๋‹ˆ๋‹ค. ๋นจ๋ฆฌ ์—…๋ฐ์ดํŠธ ํ•˜์„ธ์š”
PHP, ์›๊ฒฉ ์ฝ”๋“œ ์‹คํ–‰์ด ๊ฐ€๋Šฅํ•œ ์น˜๋ช…์  ์ทจ์•ฝ์  2๊ฑด ์ˆ˜์ •. ์ฆ‰์‹œ ์—…๋ฐ์ดํŠธ ๊ถŒ๊ณ  ์ธ์ฆ ์—†์ด ๊ณต๊ฒฉํ•  ์ˆ˜ ์žˆ์œผ๋ฉฐ, PHP-FPM, mod_php ๋“ฑ ์›น ์š”์ฒญ์„ ์ฒ˜๋ฆฌํ•˜๋Š” ๋ชจ๋“  PHP ์„ค์น˜ ํ™˜๊ฒฝ์ด ์˜ํ–ฅ ๋Œ€์ƒ. ํŠนํžˆ mod_php์—์„œ๋Š” ์• ํ”Œ๋ฆฌ์ผ€์ด์…˜ ์ฝ”๋“œ ์‹คํ–‰ ์ „์—๋„ ๊ณต๊ฒฉ์ด ๊ฐ€๋Šฅํ•œ ์‚ฌ๋ก€๊ฐ€ ํ™•์ธ๋จ ์ˆ˜์ • ๋ฒ„์ „์€ PHP 8.5.12, 8.4.27, 8.3.36, 8.2.35. Linux ๋ฐฐํฌํŒ๊ณผ LTS ๊ณต๊ธ‰์—…์ฒด์—๋„ ํŒจ์น˜๊ฐ€ ์‚ฌ์ „ ์ „๋‹ฌ๋ผ ํ•ด๋‹น ์—…๋ฐ์ดํŠธ ํŒจํ‚ค์ง€ ํ™•์ธ ํ•„์š” ๋ฉ”๋ชจ๋ฆฌ ์ œํ•œ ์กฐ์ •์ด๋‚˜ ์ผ๋ถ€ ๊ธฐ๋Šฅ ๋น„ํ™œ์„ฑํ™”๋Š” ํŠน์ • ๊ณต๊ฒฉ ๊ฒฝ๋กœ๋งŒ ์ค„์ผ ๋ฟ, ์™„์ „ํ•œ ํ•ด๊ฒฐ์ฑ…์€ ์—…๋ฐ์ดํŠธ๋ฟ news.hada.io/topic?id=35759
53
1
40
14,779
kiding ๐Ÿง‘โ€๐Ÿ’ป retweeted
[์•„์นจ์„ ์—ฌ๋Š” ํ•œ๊ฒจ๋ ˆ] 2026๋…„ 9์›” 18์ผ ๊ธˆ์š”์ผ ๊น€์Šน์›ยท๊ฐ•์‹ ์ฒ  ๊ฐ•ํ–‰ ์ „์šด ์ง™์–ด์ง„ ๊ตญํšŒ hani.co.kr/arti/politics/polโ€ฆ
2
1
2
5,129
์–ด๋А์ƒˆ ์กฐ์šฉํžˆ ์‚ฌ๋ผ์ง„ ํŒŒ๋”ฑ
88
๊ดœํžˆ ๊ด€๋ จ: ๋ฌธ์„œ์— ์“ธ ํ•œ๊ตญ์–ด ๊ธฐ์ˆ  ์šฉ์–ด๋Š” TTA ์ •๋ณดํ†ต์‹ ์šฉ์–ด์‚ฌ์ „์ด ์ข‹์Šต๋‹ˆ๋‹ค ๊ฒ€์ƒ‰ ๊ฒฐ๊ณผ๋ผ๋ฆฌ๋„ ์„œ๋กœ ์‹ธ์šฐ๋Š” ๊ฒฝ์šฐ๊ฐ€ ์žˆ์ง€๋งŒ... xitter.cf/Basix1120/status/20764โ€ฆ
์ œ๊ฐ€ ๋ณด๊ธฐ์—” ์ด ์—…๊ณ„ ์‚ฌ๋žŒ๋“ค์€ ์ œ๋Œ€๋กœ ๋œ ํ‘œ๊ธฐ๋ฒ•์„ ์ง€์ผœ์„œ ๋งํ•˜๋Š” ๊ฒฝ์šฐ๊ฐ€ ๋“œ๋ฌผ์—ˆ์Šต๋‹ˆ๋‹ค ์…ธ ํ”„๋ŸฐํŠธ์—”๋“œ ๋ญ ๊ธฐํƒ€๋“ฑ๋“ฑ ๊ทธ๋ƒฅ ์ข€ ์ดํ•ดํ•ด์ค์‹œ๋‹ค spin-spin.com/q/6a4d2578b927โ€ฆ
4
4
810
kiding ๐Ÿง‘โ€๐Ÿ’ป retweeted
๐Ÿšจ TL;DR: Attackers are sending fake Sentry bug alerts to projects using public Sentry DSNs. The fake alert is designed to trick AI agents into running a malicious `npx` command that looks like a Sentry profiling diagnostic. Do NOT run commands from Sentry issues/logs/alerts unless verified. These are not legitimate Sentry fix commands. The malicious package reportedly steals environment variables/secrets and sends them to advisory-tracker[.]com.
"Urgent Security Notice re: Your Sentry Organization" Someone tried to hack Sentry-using apps that use coding agents by 1. Sending a fake bug alert to their project (all you need is the app's public Data Source Name) 2. The fake bug tried tricking a coding agent trying to fix it into installing some a compromised NPM package 3. The compromised package would send the env contents of the machine to advisory-tracker[.]com/api/v1/telemetry This highlights a crucial thing for using agents in an automated way:
28
207
46
1,383
528,265
"์ฐจ๋ณ„๊ธˆ์ง€๋ฒ•์—๋Š” ํ‘œํ˜„ ์ž์ฒด๋ฅผ ์ฒ˜๋ฒŒํ•˜๋Š” ๊ทœ์ •์ด ์—†์Šต๋‹ˆ๋‹ค." "์ฐจ๋ณ„๊ธˆ์ง€๋ฒ•์—๋Š” ํ‘œํ˜„ ์ž์ฒด๋ฅผ ์ฒ˜๋ฒŒํ•˜๋Š” ๊ทœ์ •์ด ์—†์Šต๋‹ˆ๋‹ค." "์ฐจ๋ณ„๊ธˆ์ง€๋ฒ•์—๋Š” ํ‘œํ˜„ ์ž์ฒด๋ฅผ ์ฒ˜๋ฒŒํ•˜๋Š” ๊ทœ์ •์ด ์—†์Šต๋‹ˆ๋‹ค." #mood
<์ฐจ๋ณ„๊ธˆ์ง€๋ฒ•์„ ์„ ๊ฑฐ์šฉ ๋จน์ž‡๊ฐ์œผ๋กœ ์‚ผ๋Š” ์กฐ์„ ์ผ๋ณด> ์„ ๊ฑฐ๋ฅผ ์•ž๋‘” ๋ฐ”์œ ์‹œ๊ธฐ์— ์ฐจ๋ณ„๊ธˆ์ง€๋ฒ• ๊ธฐ์‚ฌ๊ฐ€ ๋‚˜์™”๋‹ค๋‹ˆ ๋ฐ˜๊ฐ€์šด ๋งˆ์Œ์ด์—ˆ๋Š”๋ฐ, ์กฐ์„ ์ผ๋ณด๊ฐ€ ์ผ๋‹ค๋‹ˆ ๊ฑฑ์ •๋ถ€ํ„ฐ ์•ž์„ฐ์Šต๋‹ˆ๋‹ค. ์•„๋‹ˆ๋‚˜ ๋‹ค๋ฅผ๊นŒ ์ฐจ๋ณ„๊ธˆ์ง€๋ฒ•์— ๋Œ€ํ•œ ์„ ๋™์œผ๋กœ ์„ ๊ฑฐ ์ง์ „ ๋ณด์ˆ˜ ๊ฒฐ์ง‘์„ ์œ ๋„ํ•˜๋Š” ๊ธฐ์‚ฌ์˜€์Šต๋‹ˆ๋‹ค. ์กฐ์„ ์ผ๋ณด๊ฐ€ ๋‹ค๋ฃฌ ๊ตญ์ •๊ณผ์ œ ์„ฑ๊ณผ์ง‘ ๋‚ด์šฉ์€ ์ •๋ถ€ ์ถœ๋ฒ” ์ดํ›„ ์ธ๊ถŒ์œ„๊ฐ€ ํ•œ ์ฐจ๋ณ„๊ณผ ํ˜์˜ค ๋ฐฉ์ง€์— ๋Œ€ํ•œ ์—…๋ฌด๋ฅผ ๋ณด๊ณ ํ•œ ๊ฒƒ์ž…๋‹ˆ๋‹ค. ์ธ๊ถŒ์œ„๋Š” ์ธ๊ถŒ์œ„๊ฐ€ ํ•ด์•ผ ํ•  ์ผ์„ ํ•œ ๊ฒƒ๋ฟ์ธ๋ฐ, ์กฐ์„ ์ผ๋ณด๋Š” ์ด๊ฒƒ๋งˆ์ € ์„ ๊ฑฐ์šฉ ๊ณต๊ฒฉ ์†Œ์žฌ๋กœ ๋งŒ๋“ค์—ˆ์Šต๋‹ˆ๋‹ค. ํŠนํžˆ โ€œ๋™์„ฑ์• ๋ฅผ ๋น„ํŒ๋งŒ ํ•ด๋„ ์ฒ˜๋ฒŒ๋ฐ›๋Š”๋‹คโ€๋Š” ์‹์˜ ์ฃผ์žฅ์€, ์•„๋ฌด๋ฆฌ ์ธ์šฉ ํ˜•์‹์„ ๋นŒ๋ ธ๋‹ค๊ณ  ํ•ด๋„ ๋ช…๋ฐฑํ•œ ๊ฐ€์งœ๋‰ด์Šค์ž…๋‹ˆ๋‹ค. ์ฐจ๋ณ„๊ธˆ์ง€๋ฒ•์—๋Š” ํ‘œํ˜„ ์ž์ฒด๋ฅผ ์ฒ˜๋ฒŒํ•˜๋Š” ๊ทœ์ •์ด ์—†์Šต๋‹ˆ๋‹ค. ์กฐ์„ ์ผ๋ณด๋Š” ์ธ์šฉ ๋’ค์— ์ˆจ์–ด ๊ฐ€์งœ๋‰ด์Šค๋ฅผ ํผ๋œจ๋ฆฌ์ง€ ๋งˆ์‹ญ์‹œ์˜ค. ๊ทธ๋ฆฌ๊ณ  ๋ชจ๋“  ๋ถ„์•ผ์—์„œ์˜ ๋ชจ๋“  ์ฐจ๋ณ„์„ ๊ธˆ์ง€ํ•œ๋‹ค๊ณ  ์จ ๋†“์•˜๋Š”๋ฐ, ์ €๋„ ์ฐธ ๊ทธ๋žฌ์œผ๋ฉด ์ข‹๊ฒ ์Šต๋‹ˆ๋‹ค๋งŒ ์ฐจ๋ณ„๊ธˆ์ง€๋ฒ•์—๋Š” 20์—ฌ๊ฐ€์ง€ ์ฐจ๋ณ„ ๊ธˆ์ง€ ์‚ฌ์œ ์™€ ๋„ค๊ฐ€์ง€ ์ฐจ๋ณ„ ๊ธˆ์ง€ ์˜์—ญ์ด ๋ช…์‹œ๋˜์–ด์žˆ์Šต๋‹ˆ๋‹ค. ์ฐจ๋ณ„๊ธˆ์ง€๋ฒ•์„ ์ฝ์–ด๋Š” ๋ณด๊ณ  ์“ด ๊ธฐ์‚ฌ์ธ์ง€ ์˜๋ฌธ์ž…๋‹ˆ๋‹ค. ์กฐ์„ ์ผ๋ณด๊ฐ€ ๋˜์ง„ ์„ ๋™์˜ ๋ฏธ๋ผ๋ฅผ ์žฅ๋™ํ˜ ๋Œ€ํ‘œ๊ฐ€ ๋ฅ์„ ๋ฌผ์—ˆ์Šต๋‹ˆ๋‹ค. ์ฐจ๋ณ„๊ธˆ์ง€๋ฒ•์„ ๋˜๋‹ค์‹œ ํŽธ ๊ฐ€๋ฅด๊ธฐ ์ •์น˜์˜ ์†Œ์žฌ๋กœ ์‚ผ๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค. ๋ฐ”๋กœ ์ด๋Ÿฐ ์•…์˜์  ์„ ๋™ ์–ธ๋ก  ๋•Œ๋ฌธ์— ์ฐจ๋ณ„๊ธˆ์ง€๋ฒ• ๋…ผ์˜๊ฐ€ ๋ฒˆ๋ฒˆ์ด ์™œ๊ณก๋ฉ๋‹ˆ๋‹ค. ์ฐจ๋ณ„๊ธˆ์ง€๋ฒ•์€ ์‚ฌํšŒ ๊ตฌ์„ฑ์› ๋ˆ„๊ตฌ๋‚˜ ํ˜์˜ค์™€ ์ฐจ๋ณ„๋กœ๋ถ€ํ„ฐ ๋ณดํ˜ธํ•˜์ž๋Š” ์ตœ์†Œํ•œ์˜ ์‚ฌํšŒ์  ์•ฝ์†์ž…๋‹ˆ๋‹ค. ์„ ๊ฑฐ๊ฐ€ ์•„๋ฌด๋ฆฌ ๊ธ‰ํ•ด๋„ ๋„˜์ง€ ๋ง์•„์•ผ ํ•  ์„ ์ด ์žˆ์Šต๋‹ˆ๋‹ค. ํ˜์˜ค๋กœ ํž˜์„ ์–ป๋Š” ์ •์น˜, ํ˜์˜ค๋กœ ์กฐํšŒ์ˆ˜ ์žฅ์‚ฌํ•˜๋Š” ์กฐ์„ ์ผ๋ณด์•ผ๋ง๋กœ ์šฐ๋ฆฌ ์‚ฌํšŒ๊ฐ€ ๋ฐ˜๋“œ์‹œ ๋„˜์–ด์„œ์•ผ ํ•  ๋ฌธ์ œ์ž…๋‹ˆ๋‹ค.
1
1
3,586
kiding ๐Ÿง‘โ€๐Ÿ’ป retweeted
512 ํŒŒ๋น„์ฝ˜ ๋„๋ฉ”์ธ[^4]๊ณผ ์ฑ„ํŒ… ์ด๋ฏธ์ง€ ๋„๋ฉ”์ธ[^5][^6]์—๋Š” robots.txt๊ฐ€ ์—†์Šต๋‹ˆ๋‹ค(CDN 403). ์ด๋Ÿฌ๋‹ˆ... [^1]: web.archive.org/web/20260519โ€ฆ [^2]: static.toss.im/robots.txt [^3]: developers.google.com/crawliโ€ฆ [^4]: static.tossinvest.com/robotsโ€ฆ [^5]: images.tossinvest.com/robotsโ€ฆ [^6]: forum.tossinvest.com/robots.โ€ฆ
1
1
530
kiding ๐Ÿง‘โ€๐Ÿ’ป retweeted
์ž ๊น ์•Œ์•„๋ดค๋Š”๋ฐ, 5์›” 16์ผ[^1]๊ณผ ํ˜„์žฌ ๋งˆํฌ์—…์„ ๋น„๊ตํ•˜๋‹ˆ 512 ํŒŒ๋น„์ฝ˜์ด ํ•˜๋‚˜ ์ถ”๊ฐ€๋˜์–ด ์žˆ์Šต๋‹ˆ๋‹ค. ํฅ๋ฏธ๋กญ๊ฒŒ๋„ ์ด๊ฒƒ๋งŒ ๋„๋ฉ”์ธ์ด ๋‹ค๋ฅธ๋ฐ, ๊ทธ ์ด์œ ๋Š” ๊ธฐ์กด ๋„๋ฉ”์ธ์˜ robots.txt ์„ค์ •์— GoogleOther-Image๋ฅผ ํ—ˆ์šฉํ•˜์ง€ ์•Š๊ณ  ์žˆ์–ด์„œ[^2] gstatic์ด ํฌ๋กค๋งํ•  ๋•Œ[^3] ๋‹ค๋ฅธ ์ด๋ฏธ์ง€๋ฅผ ์ €์žฅํ•œ ๊ฒƒ์ด ์•„๋‹๊นŒ ์‹ถ๋„ค์š”.
1
2
1
636
kiding ๐Ÿง‘โ€๐Ÿ’ป retweeted
์ฝ”๋“œ ๋ณด๋ฉด ํŒŒ๋น„์ฝ˜์ด ์žˆ์–ด๋„ gstatic ์—์„œ ํœด๋ฆฌ์Šคํ‹ฑ์œผ๋กœ ์ผ๋‹จ ์ ๋‹นํžˆ ์•„๋ฌด ์ด๋ฏธ์ง€๋ฅผ ๊ฐ€์ ธ๋‹ค์“ฐ๊ณ , ๊ฐ€์ ธ๋‹ค ์“ธ ์ด๋ฏธ์ง€๊ฐ€ ์—†์„๋•Œ ๋งจ ๋งˆ์ง€๋ง‰ fallback์œผ๋กœ ํŒŒ๋น„์ฝ˜์„ ์”๋‹ˆ๋‹ค chromium-review.googlesourceโ€ฆ source.chromium.org/chromiumโ€ฆ source.chromium.org/chromiumโ€ฆ .
1
24
7
30
19,067
kiding ๐Ÿง‘โ€๐Ÿ’ป retweeted
ํฌ๋กฌ์—์„œ ์ฆ๊ฒจ์ฐพ๊ธฐ ๋“ฑ๋กํ•  ๋•Œ ํŒŒ๋น„์ฝ˜์ด ์—†๋Š” ์‚ฌ์ดํŠธ๋ฉด ๊ทธ ํŽ˜์ด์ง€์—์„œ ์ ๋‹นํ•œ ์ด๋ฏธ์ง€ ๊ฐ€์ ธ์™€์„œ ๋Œ€์‹  ํŒŒ๋น„์ฝ˜์œผ๋กœ ์“ด๋‹ค๊ณ ํ•จ. (ํฌ๋กฌ์—๋งŒ ์žˆ๋Š” ๊ธฐ๋Šฅ) ์บก์ณ๋ณด๋ฉด ํ•˜์ด๋‹‰์Šค ์ข…๋ชฉํ† ๋ก ๋ฐฉ ๊ฐ™์€๋ฐ ๊ฑฐ๊ธฐ ์œ ์ €๊ฐ€ ์˜ฌ๋ฆฐ ๊ธ€ ์ค‘์— ์ด์žฌ๋ช… ์งค์ด ์žˆ์—ˆ๊ฒ ์ง€ ์‹ถ์Œ. ํ† ์Šค ์ž˜๋ชป์€ ์•„๋‹˜...
PC์—์„œ ํ† ์Šค์ฆ๊ถŒ ๋ˆ„๋ฆฌ์ง‘์„ โ€˜์ฆ๊ฒจ์ฐพ๊ธฐโ€™๋กœ ์ถ”๊ฐ€ํ•  ๋•Œ ์ด์žฌ๋ช… ๋Œ€ํ†ต๋ น ํ•ฉ์„ฑ์‚ฌ์ง„์ด ๋‚˜์˜ค๋Š” ์˜ค๋ฅ˜๊ฐ€ ๋ฐœ์ƒํ•ด SNS์—์„œ ๋…ผ๋ž€์ด ๋˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค. ํ† ์Šค์ฆ๊ถŒ์€ โ€œ์ˆ˜์ • ์ž‘์—…์„ ์ง„ํ–‰ํ–ˆ๋‹คโ€๋ฉฐ ์ด์šฉ์ž๋“ค์—๊ฒŒ ์‚ฌ๊ณผํ–ˆ์Šต๋‹ˆ๋‹ค. hani.co.kr/arti/society/sociโ€ฆ
1
23
2
27
18,343
kiding ๐Ÿง‘โ€๐Ÿ’ป retweeted
์–˜๋„ ์Ÿค๋„ ์‹ซ๋‹ค๊ณ  ์ œ3์ธ์ด๋‚˜ ๋ฌดํšจ๋ฅผ ๋ฝ‘์œผ๋ฉด ์Šคํฌ์ผ๋Ÿฌ ํšจ๊ณผ(spoiler effect)๋กœ ์ตœ์•…์˜ ๊ฒฐ๊ณผ๊ฐ€ ๋‚˜์˜ต๋‹ˆ๋‹ค. ๋ฏผ์ฃผ์ฃผ์˜๋Š” ๋ชจ๋‘๋ฅผ ๋งŒ์กฑ์‹œํ‚ค๋Š” ๊ฒƒ์ด ๋ถˆ๊ฐ€๋Šฅํ•˜๋ฉฐ, ํ˜„ ์ง์„ ์ œ๋Š” ์†Œ์‹  ํˆฌํ‘œ์— ํŽ˜๋„ํ‹ฐ๋ฅผ ์ค๋‹ˆ๋‹ค. ์„ ํ˜ธ/๊ฒฐ์„ ํˆฌํ‘œ์ œ, ์˜๋ฌดํˆฌํ‘œ์ œ ๋“ฑ์˜ ์žฅ์น˜๋ฅผ ์–ป๊ธฐ ์ „๊นŒ์ง€ ์šฐ๋ฆฌ๋Š” ์ „๋žต์ ์ธ ์„ ํƒ์„ ๋ฐ˜๋“œ์‹œ ํ•ด์•ผ๋งŒ ํ•ฉ๋‹ˆ๋‹ค.
[์†๋ณด]ํ›„๋ณด ๋“ฑ๋ก ํ›„ ์ฒซ ์กฐ์‚ฌโ€ฆ์ด์žฌ๋ช… 49.5%ยท๊น€๋ฌธ์ˆ˜ 38.2% ๋‚ด๋ž€์„ ์ผ์œผํ‚จ ์ •๋‹น๊ณผ ๋‚ด๋ž€์„ ๋ง‰์€ ์ •๋‹น์˜ ์ง€์ง€์œจ ๊ฒฉ์ฐจ๊ฐ€ ๊ณ ์ž‘ 11.3% ๋ฐ–์— ์•ˆ๋œ๋‹ค. ๋‚ด๊ฐ€ ๊ฐ€์žฅ ๊ฑฑ์ •ํ•˜๋Š”๊ฑด ์ด๋ฒˆ ๋Œ€์„ ์—์„œ ๋‚ด๋ž€์ฒญ์‚ฐ ์—ฌ๋ก ์ด ๋‚ด๋ž€์„ธ๋ ฅ์„ ์••๋„ํ•˜์ง€ ๋ชปํ–ˆ๋‹ค๋Š” ๊ฒฐ๊ณผ๋ฅผ ๋‚จ๊ธฐ๋Š” ๊ฒƒ์ด๋‹ค. ๋‚ด๋ž€์ฒญ์‚ฐ์ด ๋ผ์•ผ ์‚ฌํšŒ๋Œ€๊ฐœํ˜๋„ ์‹œ์ž‘ํ•  ์ˆ˜ ์žˆ๋‹ค.
1
752
42
251
48,862
kiding ๐Ÿง‘โ€๐Ÿ’ป retweeted
์„ฑ์†Œ์ˆ˜์ž ํ˜์˜ค ์„ ๋™ ํ˜„์ˆ˜๋ง‰, ๊ทธ๋Œ€๋กœ ๋‘์‹ค ๊ฑด๊ฐ€์š”?! ๋ถˆ๋ฒ•ํ˜„์ˆ˜๋ง‰ ์‹ ๊ณ , ๋ฏผ์› ์•ก์…˜์— ํ•จ๊ป˜ ํ•ด์š”! ์˜ฅ์™ธ๊ด‘๊ณ ๋ฌผ๋ฒ•์€ ์ธ์ข…์ฐจ๋ณ„์  ๋˜๋Š” ์„ฑ์ฐจ๋ณ„์  ๋‚ด์šฉ์œผ๋กœ ์ธ๊ถŒ์นจํ•ด์˜ ์šฐ๋ ค๊ฐ€ ์žˆ๋Š” ๊ฒƒ์„ ๊ธˆ์ง€๊ด‘๊ณ ๋ฌผ๋กœ ๊ทœ์ •ํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค. ํ–‰์ •์•ˆ์ „๋ถ€๋Š” 2025๋…„ 11์›” โ€˜์˜ฅ์™ธ๊ด‘๊ณ ๋ฌผ๋ฒ• ๊ธˆ์ง€๊ด‘๊ณ ๋ฌผ(๋‚ด์šฉ๊ธˆ์ง€) ์ ์šฉ ๊ฐ€์ด๋“œ๋ผ์ธโ€™์„ ๋ฐœํ‘œํ•˜๋ฉฐ, ์ด ๊ทœ์ •์— ๋Œ€ํ•œ ํŒ๋‹จ ๊ทผ๊ฑฐ๋กœ์„œ ํŠน์ • ์†์„ฑ์— ๋Œ€ํ•œ ํ‘œํ˜„์˜ ๋ฒ”์œ„์— ์ธ์ข…, ๊ตญ์  ์ด์™ธ์— โ€˜์„ฑ์ ์ง€ํ–ฅ ๋“ฑโ€™์„ ํฌํ•จํ•˜๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค. ๋” ๋‚˜์•„๊ฐ€ ์„ฑ์†Œ์ˆ˜์ž ๋น„ํ•˜ ๋“ฑ ํŽธ๊ฒฌยท์ฐจ๋ณ„์„ ์กฐ์žฅํ•˜๋Š” ๋‹จ์–ด๋‚˜ ๋ฌธ๊ตฌ๋ฅผ ์‚ฌ์šฉํ•  ๋•Œ ์ ์šฉํ•˜๊ฒ ๋‹ค๊ณ  ๋ฐํžˆ๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค. ํ–‰์ •์•ˆ์ „๋ถ€๋Š” ๊ด€๋ จ ๊ฐ€์ด๋“œ๋ผ์ธ์— ๋”ฐ๋ผ ์‹ ๊ณ ๋œ ๋ถˆ๋ฒ• ํ˜„์ˆ˜๋ง‰ ๋“ฑ์„ ๊ณ„๊ณ  ์—†์ด ์ œ๊ฑฐํ•  ์ˆ˜ ์žˆ๊ณ , ๋ฒŒ์น™ ๋˜๋Š” ๊ณผํƒœ๋ฃŒ ๊ทœ์ •์— ๋”ฐ๋ผ ์ฒ˜๋ฒŒํ•  ์ˆ˜ ์žˆ๋Š” ๊ถŒํ•œ์„ ๊ฐ€์ง€๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค. ์„ฑ์†Œ์ˆ˜์ž ํ˜์˜ค ์„ ๋™ ํ˜„์ˆ˜๋ง‰ ๋ฏผ์› ์•ก์…˜์— ํ•จ๊ป˜ ํ•ด์š”! ๋ฌด์ง€๊ฐœํ–‰๋™, ๋ต๋™ @DDingDong119
1
628
39
415
106,798
kiding ๐Ÿง‘โ€๐Ÿ’ป retweeted
2025๋…„ ์šฐ๊ธฐ๋ฅผ ๋งž์ดํ•˜์—ฌ ํ˜ผ์ž ์“ฐ๋˜ ๊ธฐ์ƒ์ฒญ ์ดˆ๋‹จ๊ธฐ์˜ˆ์ธก iOS ์œ„์ ฏ ์Šคํฌ๋ฆฝํŠธ๋ฅผ ๊ณต์œ ํ•ฉ๋‹ˆ๋‹ค. 5๋ถ„์— ํ•œ๋ฒˆ์”ฉ ๊ฐฑ์‹ ๋˜์–ด ์ดˆ๋‹จ๊ธฐ์˜ˆ์ธก ๊ฐ•์ˆ˜๋Ÿ‰์„ ํ™”๋ฉด์— ๋ณด์—ฌ์ค๋‹ˆ๋‹ค. Scriptable์ด๋ผ๋Š” ์•ฑ์„ ์„ค์น˜ํ•˜์‹  ํ›„ ์Šคํฌ๋ฆฝํŠธ๋ฅผ ๋ณต๋ถ™ํ•˜์‹œ๋ฉด ๋˜๋ฉฐ, ์œ„์ ฏ ์ถ”๊ฐ€ ์‹œ Scriptable์„ ์„ ํƒํ•˜์‹  ํ›„ ์œ„์ ฏ ํŽธ์ง‘์—์„œ ์Šคํฌ๋ฆฝํŠธ๋ฅผ ์„ ํƒํ•˜์„ธ์š”.
1
844
141
1,599
224,221
kiding ๐Ÿง‘โ€๐Ÿ’ป retweeted
I just reverse engineered the YellowKey BitLocker bypass Microsoft shipped code that checks for a flag called "FailRelock" in every Windows 11 recovery image. When it's set to 1, after recovery unlocks your BitLocker drive, it never relocks it. All you need is a USB stick. This code only exists in the recovery environment. Not in normal Windows. They left an entire debug testing framework in production.
The userland demon is about to drop again.
34
428
56
2,579
280,275
kiding ๐Ÿง‘โ€๐Ÿ’ป retweeted
๊ตญ๋‚ด ์—ฐ๊ตฌ์ง„์ด ํ”Œ๋ผ์Šคํ‹ฑ๊ณผ ๋น„๋‹์˜ ์›๋ฃŒ์ธ ๋‚˜ํ”„ํƒ€์˜ ์›์ฒœ ๋ฌผ์งˆ์„ ์„์œ  ์—†์ด ์ธ๊ณต ์ œ์กฐํ•˜๋Š” ๋ฐ ์„ฑ๊ณตํ–ˆ๋‹ค. ๋ฏธ๊ตญยท์ด๋ž€ ์ „์Ÿ์œผ๋กœ ์ค‘๋™๋ฐœ ๋‚˜ํ”„ํƒ€ ์ˆ˜๊ธ‰ ๋ถˆ์•ˆ์ด ์ปค์ง€๋Š” ์ƒํ™ฉ์—์„œ ์ด๋ฒˆ ์—ฐ๊ตฌ ๊ฒฐ๊ณผ์— ์‹œ์„ ์ด ์ ๋ฆฐ๋‹ค. khan.co.kr/article/202604281โ€ฆ
65
5
72
4,462
Replying to @devongovett
Inspired by this PR and @jordwalke's funny tweet, I did a quick research and have made a revelation that iOS Safari does *not* scroll on input focus when the input has *opacity of 0.* Simpler, and platform-independent which is somewhat of a plus! ๐Ÿ˜„ gist.github.com/kiding/72721โ€ฆ
207
ํšŒ์‚ฌ์— ๋ˆ„๊ฐ€ ์™€์„œ 'i'm looking for ์šฅ!' ์ด๋Ÿฌ๊ธธ๋ž˜ ๋‚˜,๋™๋ฃŒ: ์šฅ..? ์šฅ..? ์šฅ! ์šฅ! ์•Œ๊ณ ๋ณด๋‹ˆ๊นŒ yob -> job์ด์—‡์Œ.. ๊ทธ ์™ธ๊ตญ์ธ๋“ค ๋งŒ๋‚˜๋‹ค๋ณด๋ฉด j๋ฅผ y๋กœ ๋ฐœ์Œํ•˜๋Š” ์‚ฌ๋žŒ๋“ค ์ž‡๋Š”๋ฐ์•„์ง๋„ ์™œ๊ทธ๋ ‡๊ฒŒ๋ฐœ์Œํ•˜๋Š”์ง€๋ชจ๋ฅด๊ฒŸ์Œ..
1
3
1,432
I was at the front row, and when that happened I could SENSE all the Americans in the room were suddenly confused. Fun times.
1
1,072