@damianobianda

Damiano Bianda

@damianobiandaJoined October 2026

Full-stack developer: Nuxt, Vue, TypeScript, Python. Based in Ticino.

About

Nothing here yet.

Available for

Nothing here yet.

Damiano Bianda's blogs

Damiano Bianda's Dev Notesdamianobianda.hashnode.dev19 posts

The handshake only proves the leaf: LXD's CVSS 10.0 certificate mix-up

Mutual TLS is supposed to settle the question of identity in both directions. The server proves itself to the client, the client proves itself to the server, and both sides walk away knowing who they

5h ago · 6 min readdamianobianda.hashnode.dev

The Sandbox Held. The Mail Slot Didn't: One ChatGPT Share Link to Account Takeover

On October 28, the security firm Parameter published a writeup with a title that does not undersell it: "Do the Math: How We Took Over ChatGPT Accounts." The short version: an ordinary public ChatGPT

1d ago · 5 min readdamianobianda.hashnode.dev

GitLab Was Patched, the Server Was Still Vulnerable: CVE-2026-97229 Lives in Ruby

On October 20, 2026, someone registered an account on Alpine Linux's public GitLab instance and started sending it crafted CI configurations. The instance crashed eight times over two days. Four of th

2d ago · 6 min readdamianobianda.hashnode.dev

Your PDF says AES-256. The key had 9 bits of entropy

Open a password-protected PDF and the properties dialog will proudly tell you the document is secured with AES-256. That number describes the cipher. It says nothing about the key. This week, Rick de

3d ago · 6 min readdamianobianda.hashnode.dev

CVE-2026-97631: A 16-Year-Old Buffer Overflow That Runs Before Your Defenses Do

Your server's security model has a load-bearing assumption buried in it: the code that runs first is trustworthy. Secure Boot, the TPM, disk encryption, remote attestation — all of it sits on top of f

4d ago · 7 min readdamianobianda.hashnode.dev