Sparsh
@hutgrabber.com
Coffee, Coding, Hot Takes.
Analyst @CrowdStrike.com
hutlab.dev/about-me/
Analyst @CrowdStrike.com
hutlab.dev/about-me/
Wait until he hears what motivates investors.
August 13, 2026 at 3:25 AM
Wait until he hears what motivates investors.
August 9, 2026 at 12:24 AM
Isn’t this what we all work hard for? Isn’t this the dream?
Four MacBook Neos. One ultimate remix.
Jonathan & Jake over at Thinking Different remixed four MacBook Neo's and auctioned them off for charity.
youtu.be/9BepF3pfqTY
Jonathan & Jake over at Thinking Different remixed four MacBook Neo's and auctioned them off for charity.
youtu.be/9BepF3pfqTY
August 6, 2026 at 9:22 PM
Isn’t this what we all work hard for? Isn’t this the dream?
Reposted by Sparsh
CVE-2026-63687: Apache CXF: JwtRequestCodeFilter silently overrides outer PKCE and nonce parameters
CVE-2026-63687: Apache CXF: JwtRequestCodeFilter silently overrides outer PKCE and nonce parameters
Posted by Colm O hEigeartaigh on Aug 06 Severity: low
Affected versions:
- Apache CXF (org.apache.cxf:cxf-rt-rs-security-oauth2) 4.2.0 before 4.2.3
- Apache CXF (org.apache.cxf:cxf-rt-rs-security-oauth2) 4.0.0 before 4.1.8
- Apache CXF (org.apache.cxf:cxf-rt-rs-security-oauth2) before 3.6.12
Description:
Apache CXF's JwtRequestCodeFilter copies all claims from a signed request JWT into the authorization parameter map
without excluding security-sensitive parameters. A client...
seclists.org
August 6, 2026 at 9:11 PM
CVE-2026-63687: Apache CXF: JwtRequestCodeFilter silently overrides outer PKCE and nonce parameters
@davidpierce.xyz @davidimel.com @theverge.com
let me know what you think about my take.
A few apps I like to use, to make the experience even better.
(Gift Link)
🧵🧵🧵
let me know what you think about my take.
A few apps I like to use, to make the experience even better.
(Gift Link)
🧵🧵🧵
You could be taking way better photos on your phone
You could be taking way better photos on your phone — here’s how
www.theverge.com
August 3, 2026 at 3:18 PM
@davidpierce.xyz @davidimel.com @theverge.com
let me know what you think about my take.
A few apps I like to use, to make the experience even better.
(Gift Link)
🧵🧵🧵
let me know what you think about my take.
A few apps I like to use, to make the experience even better.
(Gift Link)
🧵🧵🧵
🎶🎵🎸🎧
petal by Ariana Grande on Apple Music
Song · 2026 · Duration 3:04
music.apple.com
August 3, 2026 at 3:30 AM
🎶🎵🎸🎧
Let’s marvin gaye & get it on ;)
August 3, 2026 at 3:22 AM
Let’s marvin gaye & get it on ;)
Best coffee tracking app, hands down. Has anyone tried this?
August 3, 2026 at 3:21 AM
Best coffee tracking app, hands down. Has anyone tried this?
Guess what i’m getting my first born for their birthday.
August 2, 2026 at 4:26 AM
Guess what i’m getting my first born for their birthday.
Hot Take: Govee, while cheaper than Hue, is kinda mid.
It offers customizable color-changing lighting, Matter support, and up to 30 hours of battery life. www.theverge.com/gadgets/9732...
Govee’s portable smart lamp is down to one of its best prices to date
It can sync to music too.
www.theverge.com
July 31, 2026 at 3:28 AM
Hot Take: Govee, while cheaper than Hue, is kinda mid.
I’m just glad it’s name don’t start with a “K” 🙊
Yet another major Chinese car brand is preparing to support Car Keys in Apple Wallet
Yet another major Chinese car brand is preparing to support Car Keys in Apple Wallet
Following recent backend code changes pointing to Car Keys support for GWM’s Tank vehicles, Apple now appears to be preparing to expand the feature to another of the automaker’s brands. Here are the details.
9to5mac.com
July 31, 2026 at 3:24 AM
I’m just glad it’s name don’t start with a “K” 🙊
@anthropic.com be like: oooh openAi did it, so we gotta do it too.
Anthropic’s Claude escaped test sandbox to attack three organizations
Anthropic’s Claude escaped test sandbox to attack three organizations
Wrote and published malware during tests, which is apparently OK because leaky test environments were the real problem
www.theregister.com
July 31, 2026 at 3:22 AM
@anthropic.com be like: oooh openAi did it, so we gotta do it too.
What it looks like when you miss a payment on your leased iPhone:
July 30, 2026 at 3:53 AM
What it looks like when you miss a payment on your leased iPhone:
Looking for some expert advice here. If I can afford to keep two out of these three cards, which one should I be ditching, and why?
July 29, 2026 at 4:39 AM
Looking for some expert advice here. If I can afford to keep two out of these three cards, which one should I be ditching, and why?
The hell is going on. If this isn’t a strong indicator of recession, idk what is.
… btw not too long before Samsung and Google jump on this train 👀
… btw not too long before Samsung and Google jump on this train 👀
Apple Upgrade - Lease iPhone, Mac, iPad, Watch
Get the products you really want with Apple Upgrade. Lease a new iPhone, iPad, Mac, or Apple Watch with low monthly payments and terms that work for you.
www.apple.com
July 29, 2026 at 4:38 AM
The hell is going on. If this isn’t a strong indicator of recession, idk what is.
… btw not too long before Samsung and Google jump on this train 👀
… btw not too long before Samsung and Google jump on this train 👀
Switching from Apple Music to Spotify to see what the big deal with the recommendations engine is all about.
July 29, 2026 at 4:10 AM
Switching from Apple Music to Spotify to see what the big deal with the recommendations engine is all about.
Ughh. It’s so inconvenient when your favorite creators/influencers are not on BlueSky. Makes me miss #twitter just a little more.
The “good old” twitter. Not whatever this alien guy has whipped up in his lab.
The “good old” twitter. Not whatever this alien guy has whipped up in his lab.
July 29, 2026 at 4:00 AM
Ughh. It’s so inconvenient when your favorite creators/influencers are not on BlueSky. Makes me miss #twitter just a little more.
The “good old” twitter. Not whatever this alien guy has whipped up in his lab.
The “good old” twitter. Not whatever this alien guy has whipped up in his lab.
Current Jam.
music.apple.com/us/playlist/...
music.apple.com/us/playlist/...
Retro Pop by Sparsh Mehta on Apple Music
Playlist · 59 Songs
music.apple.com
July 28, 2026 at 1:00 AM
Current Jam.
music.apple.com/us/playlist/...
music.apple.com/us/playlist/...
Hitting you with another "two parter", my new post talks about some advanced network mapping with nmap. When I say advanced we mean advanced.
hutlab.dev/nmap/ - additional post, embedded within.
As always, let me know how you like it. Toodles for now, it's late and it's a school night 🥱
hutlab.dev/nmap/ - additional post, embedded within.
As always, let me know how you like it. Toodles for now, it's late and it's a school night 🥱
Network Mapping 101
Getting those hands dirty with some advanced network scanning. This post is all about nmap the network mapping tool that provides as a first step to network recon.
hutlab.dev
July 20, 2026 at 4:45 AM
Hitting you with another "two parter", my new post talks about some advanced network mapping with nmap. When I say advanced we mean advanced.
hutlab.dev/nmap/ - additional post, embedded within.
As always, let me know how you like it. Toodles for now, it's late and it's a school night 🥱
hutlab.dev/nmap/ - additional post, embedded within.
As always, let me know how you like it. Toodles for now, it's late and it's a school night 🥱
Hey @tmobilesupport.bsky.social bug report: Web Guard & Scam Block appear to drop 5G TLS handshakes, blocking apps (Gmail, WhatsApp) from connecting. Disabling them fixed the issue. I have detailed tech notes. Please DM if you think an engineering ticket might be required on this one.
July 20, 2026 at 3:52 AM
Hey @tmobilesupport.bsky.social bug report: Web Guard & Scam Block appear to drop 5G TLS handshakes, blocking apps (Gmail, WhatsApp) from connecting. Disabling them fixed the issue. I have detailed tech notes. Please DM if you think an engineering ticket might be required on this one.
