Mehmet INCE (@mdisec) header
Mehmet INCE (@mdisec) profile picture

Mehmet INCE

@mdisec

cto @PRODAFT | vuln. researcher since 2000s | Muay Thai addict.

 London
mehmetince.net/
Joined October 2010
  • Tweets11.3K
  • Following1.8K
  • Followers35.4K
908Media
Photo by Mehmet INCE (@mdisec)Photo by Mehmet INCE (@mdisec)Photo by Mehmet INCE (@mdisec)Photo by Mehmet INCE (@mdisec)Photo by Mehmet INCE (@mdisec)Photo by Mehmet INCE (@mdisec)Photo by Mehmet INCE (@mdisec)Photo by Mehmet INCE (@mdisec)Photo by Mehmet INCE (@mdisec)Photo by Mehmet INCE (@mdisec)
I looked at the extensions meant to keep managed-PostgreSQL users away from superuser. They turned out to be my way in. 3 case studies from different vendors on breaking the code that was supposed to stop me. Part 2/6 Breaking the Superuser Guardrails mehmetince.net/part-2-6-brea…
Image from Mehmet INCE (@mdisec)
2
4
3
34
17,368
great work. 🔥 github pipelines that keeps on giving
Lupin (@0xLupin) profile pictureLupin
@0xLupin6h
We managed to find a way to backdoor the next release of OpenAI Codex 🔥 This is the best exploit chain I’ve ever witnessed depi.security/blog/20261111-…
Backdooring the next release of Codex through GitHub Action pipeline exploit chaining | Depi

Backdooring the next release of Codex through GitHub Action pipeline exploit chaining | Depi

A prompt injection in OpenAI Codex's issue-labeler workflow chained through a CLR sandbox escape and GitHub cache poisoning toward backdooring the Codex npm package.

depi.security
1
23
3,200
I started writing the 3rd part of my PostgreSQL hacking journey, and it took me right back to 22 years ago.
2
38
5,491
more replies
2677 words in and I barely made it to the beginning of the fun part.
1
2
753
4100 and I am done. Its ready.
2
268
It is so addictive. I just now moving my cursor on different windows and terminals and just keep talking and talking, and then hitting the enter. I barely use even keyboard ever since Superwhisper was released. And I can't say how perfect its offline mode.
superwhisper (@superwhisper) profile picturesuperwhisper
@superwhisperNov 9
Superwhisper is now the default voice-to-text option on @Omarchy 🗣️ Read the full blog here: superwhisper.com/blog/omarch…
Image from superwhisper (@superwhisper)
3
27
1,520
most underrated tweet of the day.
Z A D D Y (@Zaddyzaddy) profile pictureZ A D D Y
@Zaddyzaddy9h
AI pentesting solutions are like havij in 2013
2
1
39
4,264
great example of why silent fix of open-source projects are really bad.
Stefan Esser (@i0n1c) profile pictureStefan Esser@i0n1cNov 10
With all the fun of making Brotli Apple demos. We should not forget the real issue with Brotli. The bug was fixed MONTHS ago but never marked as security bug until 3rd parties were pointing it out. So who knows what else still runs vulnerable Brotli and never knew about the fix.
1
1
10
2,113
Image from Mehmet INCE (@mdisec)
Melkey (@MelkeyDev) profile pictureMelkey
@MelkeyDevNov 9
Engineers who don't know technical details but alway say "can cause backpressure on the system" without knowing what it means
12
1,699
👏🏻"Docker Sandboxes"👏🏻is👏🏻a👏🏻sandbox👏🏻
Docker (@Docker) profile pictureDocker
@DockerNov 9
Replying to @mdisec
We agree: Docker Sandboxes are not containers! Read more here: docker.com/products/docker-s…
Docker Sandboxes vs. Docker Containers | Docker

Docker Sandboxes vs. Docker Containers | Docker

A Docker container shares the kernel of the machine it runs on. A Docker Sandbox is a microVM with its own kernel and its own Docker daemon. A line-by-line comparison.

docker.com
5
99
12,231
ending my sunday evening with referencing to the RDBMS course I have taken at uni. Raid 2 disk traumas are real. 1897 words in.
1
685
Mehmet INCE retweeted
bearstech (@bearstech) profile picture
bearstech
@bearstechNov 8
Un joli dashboard pour visualiser votre niveau d'anxiété en temps réel ! (Bon dimanche) (Via Léαlinux) 👉 cvefeed.io/dashboard/
Tableau de bord CVEFEED intitulé CVE vulnerability & Threat Intelligence Hub, avec barre latérale de navigation, cartes indiquant 149 nouvelles CVE aujourd’hui, 244 mises à jour aujourd’hui et 3 exploitations connues cette semaine, un graphique d’activité CVE et une liste Weekly Hot CVEs à droite.

ALT Tableau de bord CVEFEED intitulé CVE vulnerability & Threat Intelligence Hub, avec barre latérale de navigation, cartes indiquant 149 nouvelles CVE aujourd’hui, 244 mises à jour aujourd’hui et 3 exploitations connues cette semaine, un graphique d’activité CVE et une liste Weekly Hot CVEs à droite.

5
39
1
215
15,755
🔥must read article !
Emir Beganović (@emirbeganovic) profile pictureEmir Beganović
@emirbeganovicNov 8
Replying to @mdisec
emirb.github.io/blog/microvm… 🫡
Your Container Is Not a Sandbox

Your Container Is Not a Sandbox

The microVM ecosystem was battle-tested long before agentic AI created the demand. A landscape survey: every VMM, the shared Rust crate ecosystem, a dozen AI sandbox platforms, and honest trade-offs.

emirb.github.io
16
3,533
Docker👏🏻is👏🏻NOT👏🏻a👏🏻sandbox👏🏻
Sufyan (@sfxnz) profile pictureSufyan
@sfxnzNov 7
Docker sandboxes is probably the single most important tool you can learn in the AI age.
97
44
15
2,039
194,880
Mehmet INCE retweeted
DHH (@dhh) profile picture
DHH
@dhhNov 8
Omarchy is forever free. There's no monetization scheme coming. I'm already rich and the Omacom Foundation is a well-founded nonprofit. The only ulterior motive here is to make Linux win on the desktop and create the perfect, malleable computer for all to enjoy!
551
735
160
15,943
531,940
dbTest.mdb 😂
Image from Mehmet INCE (@mdisec)
3
931
Two of our own are speaking at @pythonpizzaist! 🐍🍕 🎤 @abilgegunduz — Keynote 🎤 @0gulcandogan — Speaker We’re celebrating with 10 tickets for our community! 🎟️ Got a Python project or idea? Enter below 👇
LatentShift AI promotional graphic for Python Pizza Istanbul 2026, taking place on 14 November. Against a dark background with a coral-orange circle, black-and-white portraits feature Bilge İnce holding a microphone and Oğulcan Doğan standing beside her. Bilge is identified as a keynote speaker and Oğulcan as a speaker. Large coral text announces a “10 Tickets Community Giveaway,” with the LatentShift AI logo in the upper-left corner.

ALT LatentShift AI promotional graphic for Python Pizza Istanbul 2026, taking place on 14 November. Against a dark background with a coral-orange circle, black-and-white portraits feature Bilge İnce holding a microphone and Oğulcan Doğan standing beside her. Bilge is identified as a keynote speaker and Oğulcan as a speaker. Large coral text announces a “10 Tickets Community Giveaway,” with the LatentShift AI logo in the upper-left corner.

1
16
3
31
2,856
oid is a oid.
1
9
2,297
Mehmet INCE retweeted
Bilge (@abilgegunduz) profile picture
Bilge
@abilgegunduzNov 7
I'm working on a new and banger presentation for Python Pizza! Join us on next Saturday! 🔥
Python Pizza İstanbul (@pythonpizzaist) profile picturePython Pizza İstanbul@pythonpizzaistOct 28
Thinking about joining us? 👀 Don't leave your ticket for the last minute! It's great time to grab your spot! 🎟️ kommunity.com/pythonturkiye/… #PythonPizzaİstanbul #PythonPizza #PythonCommunity
Python Pizza İstanbul

Python Pizza İstanbul

Python Pizza İstanbul hosts a one-day community conference at StartGate, Istanbul, on 14 November 2026, with talks, networking and pizza.

kommunity.com
2
3
10
950
Mehmet INCE retweeted
Tunde Ogunniyi (@thetundeo) profile picture
Tunde Ogunniyi
@thetundeoNov 6
Replying to @mdisec
@mdisec has infectious energy and is always fun to be around on any continent. Join us for more talks, demos and the obligatory Neapolitan pizza on November 19th. Link in the comments 👇
Zeroramp (@zero_ramp) profile pictureZeroramp@zero_rampNov 5
Omarchy London meetup is here!!! Register to attend luma.com/fyb1dq1k
1
2
8
862
Load more