Gerald Benischke
banner
beny23.github.io
Gerald Benischke
@beny23.github.io
Maker, breaker and fixer of software. Adventures in #appsec and #agile: beny23.github.io he/him
In this edition, we hear about how to break US tech dominance, how your mate's phone can infect your TV when they pop round and some more AI insecurities. #weaklylink

beny23.github.io/posts/weakly...
Weakly Link 26/02
My post is a little late this week as I went away with the scouts. Everyone else was in the bunkhouse, I was in a tent. Something about ratios. And I brought the summer sleeping bag. Freezing. Alone. ...
beny23.github.io
January 12, 2026 at 1:04 AM
Needing to throttle Pro and Business while Pro+ and Enterprise is fine? Sounds like a cost saving incident to me ;-)
January 7, 2026 at 7:42 PM
Learning from history has never been humanities strong point ;-)

No GenAI doesn’t solve the coding bottleneck.

Very enjoyable piece by Rob! Might just have to print it out and roll up. Would make a good stick to beat people with… (in a non-aggressive way of course)
Even in the punchcard and batch era, coding was not the main bottleneck with software delivery.

You may have read 1st version of this already - I've significantly updated/re-written, going back to the 1940s.

Full timeline below 👇

blog.robbowley.net/2026/01/05/c...
Coding has never been the bottleneck | Rob Bowley
blog.robbowley.net
January 7, 2026 at 12:06 PM
Reposted by Gerald Benischke
greetings from hell
January 4, 2026 at 7:11 PM
Like any blog post at New Year’s, we’ll be looking to the future. We’ll also check our assumptions and we’ve got some security content before looking at a website to destroy all websites.

beny23.github.io/posts/weakly...

#weaklylink #linkblog
Weakly Link 26/01
Like any blog post at New Year’s, we’ll be looking to the future. We’ll also check our assumptions and we’ve got some security content before looking at a website to destroy all websites. I did like t...
beny23.github.io
January 3, 2026 at 12:51 PM
Smash the social media oligopoly!
you’re right! it feels mostly awful to Go Online™, these days. the internet in a sad state, for reason after reason after reason. but there is a way to fix it; to trade the voidful howling for a quiet & joyful song.

here’s how to win the war for the soul of the internet, and build the Web We Want.
A Website To End All Websites | Henry From Online
How to win the war for the soul of the internet, and build the Web We Want.
henry.codes
January 2, 2026 at 12:07 AM
“The oxygen of publicity this year has mostly been consumed by our two-lettered friend, AI. There's no reason to think this will change in 2026. [..] here's a world where that's not true, a world where other things are happening that will shape the future. We like to call it the real world...”

🤣👏
December 30, 2025 at 6:42 PM
In this festive edition we do what we usually do during the holidays: focus on the latest vulnerabilities that ruin our Christmas and some advice on slowing things down. Enjoy!

beny23.github.io/posts/weakly...
Weakly Link 25/52
To those who celebrate the festivals either end of the last 7 days of the year: Happy <insert here>! This time round, there’s not one, but two bleeding fails in security, some interesting protections,...
beny23.github.io
December 28, 2025 at 10:54 AM
Reposted by Gerald Benischke
At the gpg.fail talk and omg #39c3

You can just put a \0 in the Hash: header and then newlines and inject text in a cleartext message.

Won’t even blame PGP here. C is unsafe at any speed.

gpg has not fixed it yet.
December 27, 2025 at 4:31 PM
Reposted by Gerald Benischke
patch ye MongoDB, there's an exploit for a vuln which has been in the product for over a decade that allows the remote, unauth read of any memory - which includes plaintext creds.

Somebody posted an exploit on Christmas Day, Merry Christmas!

doublepulsar.com/merry-christ...
Merry Christmas Day! Have a MongoDB security incident.
Somebody from Elastic Security decided to post an exploit for CVE-2025–14847 on Christmas Day.
doublepulsar.com
December 26, 2025 at 10:57 PM
The American anus horribilis, wonder who that refers to ;-)
2025 is definitely the American annus horribilis.

The WH website spreads misinformation about the origins of Covid. The CDC denies real data about vaccines/autism. ACIP does not support Hep B vaccines for babies. Measles/pertussis outbreaks. #NIH is politicized.
🧪 www.thelancet.com/journals/lan...
2025: an annus horribilis for health in the USA
The US Advisory Committee on Immunization Practices vote on Dec 5 to no longer recommend the hepatitis B vaccine birth dose, which had ensured that babies exposed to hepatitis B would not later develo...
www.thelancet.com
December 23, 2025 at 5:35 PM
Reposted by Gerald Benischke
Let's play Who Said It, AI Hyper or The Borg?

"Embrace the inevitable."

"Knowledge is irrelevant unless shared."

"We are the future."

"This is the next stage of evolution."

"Your resources will be repurposed."

"We are the sum of all species."

"Your technology is obsolete."
December 21, 2025 at 4:07 PM
In this week's link collection, we look at incidents, get another SVG surprise and we've got good, bad and ugly stories about vibe coding.

beny23.github.io/posts/weakly...
Weakly Link 25/51
This week we’re looking through a mix of security and AI once more. Because tech is nothing but those two topics, right? Right? Anyway, I am often travelling on the train or stay in hotels these days,...
beny23.github.io
December 21, 2025 at 1:21 PM
Reposted by Gerald Benischke
Very sad that I felt I had no choice but to resign from The Infinite Monkey Cage - a victory for the transphobes and other bigots - I did it because so much of the media has chosen to believe the kind and empathetic people are a fiction - they are real and so often unrepresented.
December 13, 2025 at 12:02 AM
@quinnypig.com in @theregister.com writing about an AWS keynote. Has snarkmas come early? www.theregister.com/2025/12/08/a...
AWS re:Invent keynote: Matt Garman bores, then thrills
: But the 25 announcements in the last 10 minutes included a few well worth waiting for
www.theregister.com
December 13, 2025 at 11:11 AM
This week, we celebrate Let's Encrypt's birthday, look at exotic vulnerabilities and get serious about the exploitative nature of GenAI. #WeaklyLink beny23.github.io/posts/weakly...
beny23.github.io
December 11, 2025 at 10:31 PM
The latest weakly link reacts to react4shell and finds coffee will prevent the rise of the machines. beny23.github.io/posts/weakly...
Weakly Link 25/49
This week, we’re talking about React4shell. The latest in the 4shell family of vulnerabilities. What does 4shell mean? Usually that it’s possible to do RCE (Remote Code Execution) based on an applicat...
beny23.github.io
December 8, 2025 at 12:46 AM
This week’s link blog is an odd mixture about sandworms, supply chains and basically how everything is broken anyway. And then (after all the naughtiness) let’s end on something nice.

beny23.github.io/posts/weakly...
Weakly Link 25/48
This week is an odd mixture about sandworms, supply chains and basically how everything is broken anyway. And then (after all the naughtiness) let’s end on something nice. Thumped by a Sandworm Sha1 H...
beny23.github.io
December 1, 2025 at 1:11 AM
These words are insulting to weasels.
Additionally, OpenAI argues its not liable because Raine, by using ChatGPT for self-harm, broke its terms of service
November 26, 2025 at 9:11 AM
This week on my link blog: bureaucracy, bugs, reliability and those pesky 5 nines.

beny23.github.io/posts/weakly...
Weakly Link 25/47
This week there have been some interesting bugs. Or interest in bugs. Bugs It was Cloudflare’s turn to break the internet. As per usual, the transparency on display is rather cool. It was rather inter...
beny23.github.io
November 24, 2025 at 1:57 AM
Unite in opposition?
November 17, 2025 at 4:39 PM