Can you execute arbitrary Python code from only a comment? We explore how Python's overzealous ZIP file detection can lead to unexpected code execution vulnerabilities when well-escaped user input is injected into comments or string literals in Python source files.
A reflection on the impact of a single life and the choices we make.
In a few weeks, I'll be leaving Cambridge and working on Hacktron AI full-time. We're going to shape the future of AI-assisted security research.
The NRIC numbers of individuals became available to anyone on the public internet through a new feature in the ACRA portal. My thoughts on the incident and why it is a big deal.
