The V8 JavaScript Runtime Undermined My Constant-Time JavaScript Library

Six years ago, I wrote a blog post titled Soatok's Guide to Side-Channel Attacks in which I discussed the general topic of side-channels in cryptographic applications, and how to avoid them, with example code in PHP....

http://soatok.blog/2026/09/12/the-v8-javascript-runtime-undermined-my-constant-time-javascript-library/

Only stupid smelly fucking nerds would understand why this is funny. So naturally, I laughed

22 recent Linux kernel CVEs with exploits brought to our attention by @nebusecurity https://www.openwall.com/lists/oss-security/2026/09/08/1

RP2350 - RomWBW Bus
The RP2350 RomWBW Bus is an RP2350 emulated Z80 CPM Computer. It is capable of running the ROM images created by <a href="https://github.com/wwarthen/RomWBW" target="_blank" rel="noopener">RomWBW</a>) which gives you a number of monitors, CPM alternatives, PASCAL, FORTH, BASIC.
... Read More - https://extkits.co.uk/rp2350-romwbw-bus
#kits #makers #stem #science

LG’s Manipulative, Gaslighting Response to GN Report

https://www.youtube.com/watch?v=ToP9xfLDSME

#LG #adtech

FFS Reddit is now using "protecting communities from scrapers" as an excuse to kill RSS.

Great job everyone coming up with this BS!

https://old.reddit.com/r/modnews/comments/1tq9vxo/protecting_communities_from_scrapers_and_platform/

[RSS] Preinstalled but Not Safe. OnePlus OEM App Session Takeover Vulnerability

https://blog.doyensec.com/2026/09/10/oneplus-session-takeover.html

[RSS] Why is the x86 undefined instruction called ud2? Why 2?

https://devblogs.microsoft.com/oldnewthing/20260910-00/?p=112689

[RSS] Breaking into Google's GFile for $100k

https://bughunters.google.com/blog/breaking-into-googles-gfile-for-100k

A sticker to place anywhere.

Like hand dryers, toilet bowls, soap dispensers, alarm keypads, coffee machines, thermostats, pedestrian crossing buttons, BBQs, park benches, parking meters...

As well as staplers, pens, potatoes, bricks, brooms, lunch, potplants and speed humps.

@joandaro That's a perfect group, thanks :D

(sidenote: I've never encoutnered a good ceramic, but apparently they do exist!)

@joandaro yeah "paper-knife looking" + super sharp fits the category!

@aDot summoning @addison

XCancel Is Back
https://daringfireball.net/linked/2026/09/11/xcancel-is-back

When you help out at a friends kitchen and take a nice looking knife they're usually like "it's shit, don't use that! use this." then hand you an old piece in seemingly questionable condition that was used to skin bears during The War and is still so sharp you need safety goggles just to look at it.

Is this world-wide or just an Eastern-European thing?

#cooking

OpenAI’s latest advertising

Just realized that today's youth fashion is basically copying the Hypa Hypa music video

https://www.youtube.com/watch?v=75Mw8r5gW8E

Oh damn I had not seen the details of the MicroTik RCE: the client can send a public RSA key with correct N and e = 1 and the server will use it.

Two primitives/protocol things that would have prevented it: if RSA was defined with a fixed e, and if SSH clients sent a key hash instead.

https://github.com/advisories/GHSA-j9wg-77fw-f22f

In recognition of bravery, patriotism and an unwavering love of freedom, we have decided to rename Microsoft Teams as Microsoft America.

Please update your SBOM, software directories and desktop icons; this change is immediate and permanent. Thank you for your attention to this matter.

🦅

vintage mobilek

#mobilek #unix_surrealism #iphone #apple #comic #fediart #mastoart