pints per failed unit test

Recorded Future lists infosec.exchange as malware.

Malware category: Trojan

Malware family: FakeUpdates

You've made it, @jerry .

This is also a meme about WinDbg scripting

the tech industry is about to invent books

every techbro when the ai goes offline

@alg0w I don't think programming languages are the bottleneck where these tools are used. I can sort of understand Frida (primarily targeting mobile, where JS is indeed huge), but Windows?

I can't wrap my head around why people keep choosing #JavaScript as their embedded language.

#Frida #WinDbg #ReverseEngineering

Recapping Day One of #Pwn2Own Ireland 2026. We saw some amazing research on display as we awarded $388,500 on the first day of the event. https://youtu.be/24dq8yVPd0c

[RSS] Chromium: WebGPU Security Technical Report

https://chromium.googlesource.com/chromium/src/+/main/docs/security/research/graphics/webgpu_technical_report.md

[RSS] Reversing Engineering a Captive Portal

https://binary.ninja/2026/10/06/reverse-engineering-airbnb-captive-portal.html

[RSS] Why does the compiler sometimes use ud2 and sometimes int 3 for code that shouldn't execute?

https://devblogs.microsoft.com/oldnewthing/20261006-00/?p=112757/

All vendors should have a plan for rapid remediation in the case of active exploitation.

Here’s some emergency fix strategies we’ve seen over the years:

https://projectzero.google/2026/10/emergency-patching.html

Good news or bad news depending on your POV: Usenet archives are suddenly easy to dig through, thanks to a new service. It’s built by a big data guy, and it’s packed with every awkward thing you ever wrote in a newsgroup in 1997.

My deep dive: https://tedium.co/2026/09/14/usenet-rewind-archive-revival-website/

new @tedium

@luc @infosecdj "There are only two hard things in Computer Science: cache invalidation and naming things."

@cR0w The fun part is the old product never really goes away so you can have the bugs of the old *and* the new one!

(And that's the Ciiiircle of Life)

You can always tell when vendors like Palo Alto are getting ready to announce a new product because they start making their existing shit even worse so they can say "that's fixed with this new product."

Sam Altman says he believes the world should accept “bad things” happening with AI in exchange for the benefits of the technology.

I've always disliked that I couldn't test Kerberos in CI easily and so I've written a #PowerShell module called Obol that can setup a KDC and configure the environment for the platform you are on https://github.com/jborean93/PowerShell-Obol. Uses @syfuhs.net's Kerberos.NET for the message parsing and encryption work.

[RSS] Inside the Windows I/O Manager : Deep dive into how read I/O requests are initialized.

https://winware31.blogspot.com/2026/10/inside-windows-io-manager-deep-dive.html

The upcoming IDA 9.5 adds 3️⃣ new decompilers and will deliver 🔟 platform updates.

The new decompilers:
◾ Android DEX
◾ Infineon TriCore
◾ Qualcomm Hexagon

👉 Read the full blog to see the rest of the updates: https://hex-rays.com/blog/ida-9.5-three-new-decompilers