Look what just landed in GitHub's changelog ๐ A well-needed change to how GitHub Actions constructs the sub claim in its OIDC tokens, making OIDC trust relationships more secure for organizations by embedding immutable identifiers in the claim.
Tal Skverer
@taltechtreks.com
Security Researcher | Blog writer | Hacker | DEFCON speaker | Gamer | Silly stuff lover. https://taltechtreks.com/
It happened! My #DEFCON 33 talk on hacking Pokรฉmon Go is live! Looking back, it was an absolute pleasure to dip into that 2016 nostalgia and share with the security community the untold story of Team Unknown6, on stage in front of a packed full audience. m.youtube.com/watch?v=2En9...
DEF CON 33 - Breakin 'Em All โ Overcoming Pokemon Go's Anti Cheat Mechanism - Tal Skverer
YouTube video by DEFCONConference
m.youtube.com
ืืืื, ืืืื ืืืืืจื ืืืืื ืงืื ื-Reversim Summit ืืืื! ืฉืืืชื ืืืื ืขื ืืืืืช ืืืืืช ืคื ืืืืฆืื ืืคื ืืื ืืช ืืืืงืจ ืฉืื, ืชืืื!
ืืืื ืืืฃ ืฉืืืืข ืืื ืก ืืฉื ืชื ืฉื Reversim Summit! ืื ืก ืฉืชืืื ื ืืืจ ืืืืืช ืื ืขื ืืจืฆืืืช ืืขื ืืื ืืช ืืืขืืืืช, ืืืคืขื ืืื ืืชืืง ืืืืืื ืื ืืืฆื ืื ืืืจืฆืืช ืื ืืคืขื ืืจืืฉืื ื! ืืืืื ืื ืืืื ืืฉืืืข ืขื ืืื ื ืจืื ืืืงืื ื ืืืฉืืงื ืื ืืจืืืื, ืืืื ืืืืืชื ืืช ืืื ืืงืืฅ ืื ืฉื ื2016 ืืื ืืคืจืืฅ ืืคืืงืืืื ืื. ืืืจ, 27/10, ื13:20 ืืืืื ืืืืื!
Had a great time presenting the OWASP Top 10 NHI Project today at #LASCON Austin with Tomer Yahalom! We've had the pleasure to give the talk to a great crowd and amazing people. Looking forward to the second day filled with interesting talks!
The #MCP framework took the world by storm. But is it safe? We downloaded over 5 thousand of the highest starred MCP implementations to answer that question! astrix.security/learn/blog/s...
State of MCP Server Security 2025: Research Report | Astrix
5K+ MCP servers analysis: 53% use insecure hard-coded credentials. Read the full 2025 research and download the open-source MCP Secret Wrapper to mitigate risks.
astrix.security
I am absolutely delighted to share that I'll be giving a talk at Reversim Summit 2025 on breaking Pokรฉmon Go's anti-cheating mechanism! On a personal note, every time I visit Reversim, it shows me just how awesome, welcoming, and genuinely interesting community-driven events can be.
Breaking 'Em All! The blog posts going deeper into hacking Pokemon Go that accompany my #DEFCON talk are live on my blog! taltechtreks.com/2024/04/06/H... taltechtreks.com/2025/08/09/H... Happy to get questions on the research!
Breaking Pokรฉmon Go Anti-Cheating System - Part 2
Overcoming Niantic's Anti Cheating Mechanism
taltechtreks.com
Talking in an hour at #DEFCON about Pokemon Go on track 3. Couldn't be more excited! I've worked on it multiple nights in the past months, and I hope you'll enjoy it! If you're not here in person, you can catch the talk live at www.youtube.com/live/fzbrrKP... or www.twitch.tv/defcon_dctv_...
DEFCON_DCTV_Three - Twitch
DEFCON TV Channel 3: Track 3 Talks
twitch.tv
Giving a talk on Pokemon Go, I just had to convert myself to a Pokemon trainer. The amazing Ryan Rockenbaugh surprised me with a limited edition sticker of Trainer Tal Sticker wall at #DEFCON got 2, and I will be giving what's left tomorrow at my talk Breaking 'Em All! 11:30 Track 3. See you!
Excited and humbled to speak once again in DEF CON. Talk is on Saturday at 11:30, track 3. I'll be in the conf till Sunday, hit me up if you want to chat over the talk or any other project.
The #DEFCON 33 schedule is live and I'm excited to announce I'll be giving a talk this year on unique research I was a part of a few years back! "Breakin 'Em All โ Overcoming Pokรฉmon Go's Anti-Cheat Mechanism" Join me on stage - Sat, 11:30 AM, Track 3 defcon.org/html/defcon-...
Just got back from #AppSecIL2025! Ended up 4th place in the #CTF ๐ Solved 12/15 challenges alone - Android pwn, JS sandbox escapes, cache poisoning, XSS bypasses. The usual suspects: SQLi, LDAP injection, XXE. Had a blast! Looking forward to the next one. Writeup: taltechtreks.com/2025/06/04/a...
AppSec IL 2025 CTF - Writeup
A writeup on all challenges I solved in the 2025 OWASP CTF
taltechtreks.com
I'm building something cute and new, but as opposed to my normal ways, this time I'm using #Cursor heavily and the flow blows my mind. Although I'm certain that without prior good knowledge of coding it wouldn't work that well.
Ah, I wondered when this was due to come out. Can't wait to experiment! www.anthropic.com/news/integra...
Claude can now connect to your world
Today we're announcing Integrations, a new way to connect your apps and tools to Claude. We're also expanding Claude's Research capabilities with an advanced mode that searches the web, your Google Wo...
anthropic.com
Excited to present my research tomorrow at #RSAC! Come by to hear John and me share conclusions and insights on the first publicly available report on Non-Human identity security! See you there, May 1, 10:50 am at Moscone West 3004!
For today, a bit Friends content! Or, uhh, actually, computer science! Whatโs the largest sofa you can pivot around a corner? Heard about this problem in the past, but I thought it's one of those we will never be able to prove. (At least until quantum computers arrive to solve some NP problems)
The Largest Sofa You Can Move Around a Corner | Quanta Magazine
A new proof reveals the answer to the decades-old โmoving sofaโ problem. It highlights how even the simplest optimization problems can have counterintuitive answers.
quantamagazine.org
Took a bit of hiatus from posting here, was quite busy the past few months (CFP season amirightโฆ) But I do have more cool stuff ready for sharing as well as writing 2 blog posts about projects I worked on lately. Looking forward to sharing with you all
Well, that was an hour of my life well spent. An amazing adaptation of minesweeper to include old-school RPG elements. UPDATE: Had to go back and play, another 4 hours to achieve a perfect clear. Incredible game!
Dragonsweeper by Daniel Benmergui
A roguelike minesweeper adventure
danielben.itch.io
Great thread on the emerging new details on the ByBit breach
Nick Frichette@frichetten.com ยท 2y agoNew details on the ByBit/Safe{Wallet} breach, and uhhh wow, some really silly blunders on the DPRK side. They still succeeded which is the most upsetting part of all of this. Let's bully some threat actor tradecraft! A๐งต x.com/safe/status/...
A cute post showcasing the basis of every website - HTML! The site goes over (almost) all HTML tags, by using them. Seeing this, itโs unfortunate that text inputs in websites don't allow most tags but rather encapsulate how the final result is displayed for users. Give us more, please!
Every HTML Element
iamwillwang.com
Managed to squeeze in 2 talk submissions to #fwd:cloudsec just before the first round CFP closes. Hoping for good news, will be the perfect reason to finally attend in person!
Check out this wild project: #Steam #Brick. The author transformed the Steam Deck to a brick that still connects to screens or VR while reducing size by a third Projects like this (author used steam-provided data) are a great example of "right-to-own", critical to enhance electronics sustainability
No screen, no controller, and absolutely no sense, just a power button and a USB port.
Brick your Steam Deck - one way or anotherโฆ
crastinator-pro.github.io
#OAuth #phishing apps are coming to get you - now on #X! It's annoying to see yet another case of how easy it is to fake consent screens that look identical to real companies. Why we still lack mandatory verification processes for new OAuth apps is beyond me. x.com/thealexbanks...
#OIDC identity providers in #AWS have been getting more attention lately and rightfully so: Itโs unfortunately surprisingly easy (and common) to create misconfiguration within the necessary conditions on OIDC-based #IAM roles trust policy.
RogueOIDC: AWS Persistence and Evasion through attacker-controlled OIDC Identity Provider
This research shows what an attacker can achieve after creating a malicious OIDC identity provider in AWS and how they can do it. The article presents novel techniques and tools for persistence and ev...
offensai.com
So, #OAuth implementations seem to always have some edge case or quirk making it vulnerable in odd ways. This particular exploit leveraged an open redirect in an app's OAuth callback, combined with #Google OAuth's quirks to steal authorization codes on visiting a malicious website.
OAuth Non-Happy Path to ATO
Learn how small errors in OAuth implementation can lead to significant security vulnerabilities like one-click account takeover in web applications
blog.voorivex.team
#DeepSeek roasts me based on my #UserAgent: Your browser history is so bare even your referrer ghosted you, your 2560x1440 screen is just compensating for how bland Firefox 134 on Windows 10 is, and 16 CPU cores in Tel Aviv? Congrats, youโre the NPC overclocking spreadsheets in the Silicon Wadi.
DeepSeek My User Agent
DeepSeek My User Agent
jasonthorsness.com
Cute bit of #internet history, this post shows why #Git gives you 0.1 seconds to decide if it runs a fixed command. Turns out, backwards compatibility in code is hard, especially if the code is distributed widely, and can lead to these kind of funny instances (and other that can cause real damage)
Why is Git Autocorrect too fast for Formula One drivers?
Why does Git's autocorrect wait 0.1s before executing a mistyped command? Let's dig in.
blog.gitbutler.com