Notes, scripts & things that barely works

experiments

  • Fool Me Once: A Space Security Story

    Fool Me Once: A Space Security Story

    We’ve been here before. A technology becomes critical infrastructure. The engineers building it are competent and focused on making it work. The organisations funding it have deadlines and KPIs that…

  • Nutcracking SquirrelMail: 19 Undocumented Vulnerabilities
    ,

    Nutcracking SquirrelMail: 19 Undocumented Vulnerabilities

    SquirrelMail has been end-of-life since 2011. It’s still sitting in production behind corporate proxies, university mail portals and a surprising number of hosting panels. So one quiet afternoon I pulled…

  • CVE-2026-44595 User enumeration in YAMCS

    CVE-2026-44595 User enumeration in YAMCS

    Severity: MEDIUM (CVSS 4.3)Affected: yamcs-core < 5.12.7Fixed in: yamcs-core 5.12.7Advisory: GHSA-p2rj-mrmc-9w29 YAMCS has an IAM system with privilege levels. One of them is SystemPrivilege.ControlAccess supposed to gate access to user…

  • OrbiDump

    OrbiDump

    OrbiDump visualizes thousands of active satellites in real time using live TLE data from Celestrak. It combines a 3D Earth model with accurate orbit propagation (SGP4) and includes satellite metadata…

  • Noise, RF and an RTL-SDR

    Noise, RF and an RTL-SDR

    The sky and space have always been a kind of last frontier for humanity — an obsession carried since the first curious mind wondered whether something might be out there,…