Lolz apparently the blog was not the right place. So github.com/dotnet/runti...

Announcement: BinaryFormatter is being removed in .NET 9 · Issue #98245 · dotnet/runtime

Ever since .NET Core 1.0, we in .NET Security have been trying to lay BinaryFormatter to rest. It’s long been known by security practitioners that any deserializer, binary or text, which allows its...

That’s what you drop on a Friday? I guess it’s better than some other things…

This update broke my workflow! My control key is hard to reach, so I configured emacs to interpret a remote code execution as “control”

keeping developers busy i see, good job.

@pwnallthethings.bsky.social and it’s announced

> and when you deserialize that payload you will get a chance to discover if your database backups actually restore Did you write this? It was funny.