u/Much_Exchange_6101

Uzun mesafe ilişki yaşayanlara bir şey sormak istiyorum. Aranızdaki sevgiyi, yakınlığı ve bağı nasıl devam ettiriyorsunuz? Gün içinde görüntülü konuşuyor musunuz? Konuşuyorsanız bunu ne kadar sık yapıyorsunuz? Her gün mü, yoksa daha çok müsait oldukça mı?
Bir de kafama takılan başka bir konu var: Hiç “Acaba benden uzakta olduğu için, ona yakın ve iyi davranan başka birine zamanla aşık olur mu?” diye düşündüğünüz oluyor mu? Böyle bir endişe yaşayanlar varsa bununla nasıl başa çıkıyorsunuz?

secureCode is a new community for developers, security researchers, and anyone interested in writing safer software.
We discuss secure coding, AppSec, vulnerability analysis, code review, web/API security, CVEs, CTFs and more.
We’re just getting started and would love to have developers and security enthusiasts help shape the community.

I’m new to vulnerability research and I’m trying to learn how to find security issues by reading source code. For those of you who are experienced in this area:

• How did you learn to identify vulnerabilities just by reading code?
• Do I need to know every programming language, or is it better to become very comfortable with a few languages first?
• How do you approach unfamiliar codebases or programming languages?
• What should I focus on when reading code if my goal is to find security vulnerabilities?
• How did you practice and improve your skills when you were starting out?
• When you encounter something in the code that you don’t understand, what do you usually do? Do you research it, use documentation/AI, build a small test, etc.?

Any recommended books, write-ups, open-source projects, or learning paths would also be very helpful. Thanks!

I’m using PHP with PDO/MySQLi. Is using prepared statements with parameterized queries considered the best practice for preventing SQL injection, or are there other approaches I should also use?

I’m curious about people’s real-world experience with IDOR/BOLA in bug bounty programs.

Do you encounter them frequently while hunting, or are they relatively rare on mature bounty programs?
Also, are most of the ones you find basic object-ID manipulation, or do you usually encounter more complex cases involving APIs, roles/permissions, business logic, JWTs, etc.?

I’d be especially interested in hearing roughly how many IDOR/BOLA findings you’ve made compared to other vulnerability types.

Hi everyone,
I’d like to learn KiCad from scratch and eventually become proficient enough to design professional PCBs.
Can you recommend the best learning resources? I’m looking for comprehensive books, online courses, YouTube channels, documentation, or project-based tutorials. If you learned KiCad yourself, what path would you recommend for someone starting from zero?
Thanks in advance!