The original, for the (your) record:
xkcd.com/2347/

Link. Don't miss the building-and-flashing-firmware link at the bottom for a very thorough tutorial.

github.com/ElderlyPirat...

ElderlyPirate (whoever you are) hmu please so I can kiss you full on the mouth. I might be able to actually pull this hardware attack off (pentest) bc now I can use the AVR STK500 v2 emulator (hopefully, fingers crossed, don't let me down now!)

@hon1nbo.hackingand.coffee feel free to add some good ones

And now one spectacular failure - one time I was stress testing a pool pump on a 16' deep well. The pvc glue failed. Half the well's water was sprayed straight upward at a rate of about 5K GPH all over the entire test floor before the test computer shorted out and it stopped.

I'll go first:
1. I expensed a printer ordered through Uber Eats
2. I got to literally explode things as an intended, necessary function of my job
3. I used liquid nitrogen to prove a client wrong
4. Something I made went to space. It's been a decade so it's burned up now, but it WAS in space

Your cinnamon sugar toast is bougie!

I thought at first this was a new vuln in BusyBox itself, but a perfect 10 on a networked door controller is hilarious. Remotely exploitable, no user interaction or privileges required, low attack complexity - literally a worst nightmare for a hardware designer.

Well, I should say it holds up 25% of the way in. I can't remember enough to know how it ends.

All of this to say, again I am pretty sheepish when I admit that I am enjoying threat modeling. It won't be all of my work, & I think it'll give me a chance to fill in some technical gaps that are hard to address while on a project since I'll get a lot of practice identifying the threats.

11/11