https://preview.redd.it/fa5yz70xka4h1.jpg?width=1080&format=pjpg&auto=webp&s=4d13acefd4e2a21999756d282c21b342e96136b3 Recently added a small fun feature on my portfolio's about page, a "Summon bok" button that unleashes a horde of lil boks, you can drag and play play with it. She clearly approved the final result if anyone wants to summon her themselves (you can drag n play) https://thevaibhav.co/about submitted by /u/BuriBuriZaymon [link] [留言]

Microsoft is facing criticism for its handling of zero-day exploits. Someone going by the name Nightmare Eclipse has been publicly feuding with the company, posting proof-of-concept exploit code. Some of their posts suggest that they're a disgruntled former employee. But what caught cyber security researcher Kevin Beaumont's eye was how Microsoft has responded. Microsoft suggests […]

An intentionally vulnerable e-commerce platform that teaches you to find, exploit, and understand IDOR vulnerabilities — the way they actually appear in the wild. Let's talk about the most deceptively simple vulnerability in web security: IDOR . On paper, it sounds trivial — change a number in the URL, access someone else's data, collect your bounty. But anyone who's spent real time hunting knows the truth: IDORs in production applications are rarely that obvious. They hide in request bodies, lurk inside multi-step workflows, and disguise themselves behind modern frontend frameworks that abstract away the very IDs you're supposed to manipulate. That gap — between textbook IDOR and real-world IDOR — is exactly where IDOR BugBounty Labs lives. What Is IDOR BugBounty Labs? It's an open-source, Node.js/Express e-commerce application built with one purpose: to give you a realistic playground for practicing IDOR attacks. Not simulated. Not theoretical. Intentionally vulnerable, locally hosted, and designed to mirror the complexity of actual Bug Bounty targets. Built with Express and TailwindCSS, it simulates a functioning online store — complete with user accounts, orders, addresses, support tickets, notification settings, and a checkout flow. Every feature contains at least one authorization flaw waiting to be exploited. Why This Lab Is Different Most IDOR labs give you one obvious URL parameter to change and call it a day. This one doesn't. IDOR BugBounty Labs includes: 5 distinct challenges ranging from easy to hard 3 different IDOR types: URL parameters, request bodies, and hidden body parameters Both read and write IDORs — accessing data and modifying it Multi-step business logic that mimics real e-commerce flows A flag submission system so you can verify your findings The challenges don't just teach you to change an ID. They teach you to think about where IDs live, how they're passed, and what happens when authorization checks are missing. The 5 Challenges 1. Read O

I have been doing URL redirect work for client sites for some time now. It’s one of those jobs that’s never quite urgent enough to automate, but tedious enough to dread, especially after a migration when you have hundreds of them. Recently tried it. Connected my AI agent with MCP to handle it. I told it to build a set of redirects and it did. No dashboard, no wrestling with CSVs, no clicking through settings. Teaching in plain language. In seconds. And what I was surprised by was not the speed, but the amount of mental overhead such a task involves. You’re not just doing the task you’re context switching into a tool, remembering where things are, making sure nothing breaks. Giving it to an agent removes all of it. What really made me trust it for real client work was the dry-run feature. See exactly what is changing, before it changes. No surprises here. Curious if anyone else has been using MCP for infrastructure tasks, redirects, DNS, workspace management. I think we are at the start of something that is going to quietly gobble up a lot of tedious technical work. submitted by /u/Scary_Bag1157 [link] [留言]

I have an ECCV paper main conf. Can I submit the same to a workshop at some other place happening before ECCV? The other workshop (non archival) will be after the final decisions of eccv come. Under any result in eccv- acceptance or rejection, how will this affect it? Im not the main author at eccv. Workshop is women event and I submitted the abstract for the workshop. How do things work here, educate me pls. submitted by /u/Active-Tip3130 [link] [留言]

Art TVs aren’t exactly known for being affordable, which is why Woot’s latest sale is notable. Now through June 26th, the retailer is discounting Samsung’s 2025 Frame TV and Hisense’s 2025 CanvasTV. The 65-inch CanvasTV is down to $779.99 ($520 off) — its best price of the year — while Samsung’s like-minded Frame TV is […]

"If you're 22 years old in San Francisco and building something in AI, there may be a seed term sheet in your inbox — but if you're 19, oh my God, this means you're really good; you might already have a Series A [offer]," said one, half-kiddingly.

I wanted to build a build a game, but this time, instead of implementing an existing game I tried to make something unique, without reinventing the wheel: memory mahjong . Initially, I started with a more ambitious project, with more complex mechanics that seemed to take ages, so I said, first I'll shift towards something that I can finish fast but focusing on polishing and simple mechanics. So I took the simplest idea and make it more playable. A memory game combined with mahjong tiles. So, I used mahjong tiles and made the matching rules more interesting: Tiles can match by number across different suits, not just identical pairs Dragon tiles clear as a set of three Flower tiles act as wilds 4 different board layouts so each round feels a bit different It's still a memory game at its core but there's more to think about than just remembering positions. Build with React and then made into a NextJs site. submitted by /u/quantotius [link] [留言]

Inspired by a question on r/haskellquestions , i wrote about the practical aspect of monads for people at a beginner / intermediate level, about how to go beyond mere understanding the monad class. I try to highlight how we use monads to structure our code, what benefits they bring, and how to reason about them. it comes with exercises! submitted by /u/nicuveo [link] [留言]

Ive subscribed and operated with the notion of build, fail, grow, and it has always been a humbling process, but recently I have been hearing about a “new” feeling of failure. "I tried my best and it didn't work." -> Move on "I had this super intelligent tool and STILL failed."-> Rinse and repeat Its like AI accelerates idea failure and because it is embedded in a hyper rinse & repeat, the feeling of failure is amplified. Is anyone else feeling or seeing this? submitted by /u/Outrageous-Pop-2853 [link] [留言]

I want to develop an LLM that can solve open-ended math problems (such as proof-only problems). This means that RLVR where we use the final answer alone as reward signal is not enough. Since SFT is useless here and GRPO/PPO methods will not have an appropriate reward function, what kind of fine-tuning can I do? For data, I will use the MathNet dataset. submitted by /u/TechNerd10191 [link] [留言]