PoC for Windows PnP LPE https://plugandpwn.com/

Microsoft, Google, Amazon, Meta and Oracle: Expect a Negative Cash Flow of $125 Billion Next Year https://developers.slashdot.org/story/26/08/08/1727226/microsoft-google-amazon-meta-and-oracle-expect-a-negative-cash-flow-of-125-billion-next-year?utm_source=rss1.0mainlinkanon

I've built a thing:
https://zed.dev/extensions/word-highlight-lsp

It's a @zed #lsp #extension to highlight all occurrences of selected words with multiple colors to quickly identify them in code.

I find it useful for #codereviews. Enojoy!

It's time to time-travel debug a fuzzer! How's your Saturday going?

why the fuck is this called "Word Count Summary Property" https://learn.microsoft.com/en-us/windows/win32/msi/word-count-summary

@whitequark msi files are just repurposed office files -- https://learn.microsoft.com/en-us/openspecs/office_file_formats/ms-oshared/87667163-ea1e-4d67-9eec-47cad74e8030

Two design companies, S&A and Playtype, have created a font that fools AI scrappers and protects copyrighted text

https://s-a.website/projects/shieldfont

https://blog.cryptographyengineering.com/2026/07/29/some-notes-about-anthropics-new-results/

@gsuberland @whitequark May be a similar thing to using PE timestamp fields for hashes (the name remained the same in that case too)?

https://devblogs.microsoft.com/oldnewthing/20240815-00/?p=110131

An absolutely beautyful website showing the state of the Hungarian #energy grid, focusing on the Paks #nuclear plant that is about to shut down due to low water level in river Danube:

https://holadelej.hu/

#BOFH excuse #295:

The Token fell out of the ring. Call us when you find it.

🏠 idalib is now available in IDA Home.

That means hobbyists and enthusiasts can now call IDA's analysis engine as a library — running headless analysis, automating workflows, and integrating IDA into their own tools — without needing an IDA Pro license.

To celebrate, we're offering 30% off IDA Home until August 14th.* Use promo code HOME30 at checkout.

👉 If you've been on the fence, now's a good time. https://hex-rays.com/ida-home

*Offer not available for corporations, agencies or resellers.

Even if you're doing a great job closely supervising your LLM coding ... for the love of all that is holy, stop pushing a new GitHub release every ten minutes.

Being able to tell GitHub to only notify the user when new releases are cut is a critical attention-management feature that you are breaking.

(Please do not reply with "shouldn't be using LLMs in the first place", "close supervision is impossible" etc noise)

@kaia Dr. Zoidberg has this poster!

Researchers have found a new version of SiliVaccine, North Korea's internal homegrown antivirus engine. Well, not that "homegrown" actually because the engine works on top of ClamAV and Malheur

https://nkinternet.com/2026/08/01/a-new-silivaccine-north-koreas-antivirus/

@0x57e11a Is this not a reasonable place to park?

A mysterious hacker has stolen more than $70 million worth of Bitcoin from Coldcard hardware wallets: https://bitcoinmagazine.com/news/coldcard-wallet-exposed-after-bitcoin-hack

The attackers exploited a vulnerability in the wallet's firmware that produced weak and easy to guess private keys: https://blog.coinkite.com/entropy-technical-backgrounder/

らくがき

Insane and inhumane: "YC founder asks desperate job seekers to tattoo themselves for an interview"

https://sfstandard.com/2026/07/30/lemonlime-tattoo-job-interview/

After a short #EMFCamp induced hiatus, it's back...

First up this weekend is interesting talks from #emfcamp2026:

Threats:

* https://media.ccc.de/v/emf2026-215-1-north-korean-agent-looking-for-a-job - job hunting, .kp style

Exploitation:

* https://media.ccc.de/v/emf2026-93-1-they-forgot-what-happened-last-time - @Rairii's pokes the Redmond beast some more
* https://media.ccc.de/v/emf2026-206-1-breaking-in-to-buildings-with-boobs - a guide to social engineering the physical world

Hard hacks:

* https://media.ccc.de/v/emf2026-57-1-obd-ii-obviously-broken-design-too - getting into ODB-II
* https://savvycan.com/ - CANbus packet parser
* https://media.ccc.de/v/emf2026-56-1-lock-picking-robot - robotic approaches to locks
* https://safetyfic.com/how-to-unlock-tsa007-lock-forgot-combination/ - how to change the code on a TSA combination lock?
* https://www.amazon.co.uk/tsa-key-007-master-luggage/ - want a TSA master key?
* https://lpubelts.com/ - how hard to pick is my lock?
* https://media.ccc.de/v/emf2026-47-1-building-a-tiny-paging-network - build your own pager network with @sammachin

Crypto:

* https://media.ccc.de/v/emf2026-59-1-how-not-to-make-a-random-number-generator - return 42;
* https://en.wikipedia.org/wiki/Euclidean_algorithm - finding the common factor
* https://en.wikipedia.org/wiki/Euler%27s_factorization_method - more on common factors

Data:

* https://media.ccc.de/v/emf2026-88-1-building-a-mostly-local-mildly-judgemental-home-assistant - Mark J Cox takes us on a journey to build your own home assistant 🤖

Nerd:

* https://media.ccc.de/v/emf2026-124-1-infrastructure-review - a review of the EMF Camp 2026 infrastructure
* https://media.ccc.de/v/emf2026-230-1-an-sres-guide-to-camping-in-extreme-conditions - vanlife reliability engineering from @donna_156
* https://phones.emfcamp.org/ - the EMF phone book
* https://media.ccc.de/v/emf2026-46-1-the-orphan-source-incident - more about the 2024 orphan source incident
* https://media.ccc.de/v/emf2026-277-1-reverse-engineering-007-nightfire - updating Nightfire via reverse engineering
* https://media.ccc.de/v/emf2026-100-1-automated-game-hacking - parsing and compiling game logic

#security, #research