@xabean @azonenberg It is! The nice thing is that you can clicky-click the UI the look at `ps` to see how the magic (in this case: vTPM) happens.

We don't eat our own dog food because frankly it tastes like shit

https://finance.yahoo.com/technology/ai/articles/google-ai-team-tells-job-222929935.html

@azonenberg Proxmox even has GUI for that (tested with Windows guests)

Dreams don't lie, my latest documentation issue just got fixed 🤩

https://github.com/Vector35/binaryninja-api/issues/7413#event-29360967336

RE: https://infosec.place/objects/f3eee898-f8d9-45c7-bf5d-101540b3eda6

[RSS] Bypassing Android Hardware Attestation from the Analyst's Chair

http://blog.quarkslab.com/bypassing-android-hardware-attestation.html

[RSS] How Trail of Bits helps verify the integrity of your Signal chats

https://blog.trailofbits.com/2026/08/11/how-trail-of-bits-helps-verify-the-integrity-of-your-signal-chats/

@leeloo @tris @campuscodi

This is turning into a flame. I think I made my point about the misconceptions brought forward earlier (anonymity vs. privacy vs. encryption).

User friendly services often have to make trade-offs/compromises. If you don't like those choices you are free not to use the corresponding service.

@tris They usually have additional features like customizable results ranking and no ads (obviously). I'm not familiar with the technical implementation but it seems reasonable to aggregate queries toward index providers, which would decorrelate queries from users (from the APIs standpoint).

@campuscodi

@Andromxda IME (with Kagi) the purpose of the account is pretty clear: they need to keep track of your payments and user settings. @campuscodi

@tris Usually what makes a difference is the business model (e.g. adtech vs. regular subscription). Your hair dresser may know exactly who you are and know a lot about you, but you can trust them not to sell your conversations because they make a living from cutting hair, not selling PII. A level of privacy is of outmost concern for many OnlyFans performers (to avoid stalking), while they show a lot of themselves publicly. Privacy != encryption either.

@campuscodi

(Re-)New Nightmare Eclipse stuff!

https://git.projectnightcrawler.dev/NightmareEclipse/ShieldBreak

Essentially RoguePlanet 2, it seems like.

#NightmareEclipse #Windows #Malware #Infosec #Microsoft

Today the solution for the Halting Problem is: It does not halt.

#fml

@campuscodi You have to register a Signal account too. Privacy != anonymity

Discovered while doing ethnographic research for a public library district. I was touring one of their branches when this caught my attention.

It’s genius. Smartest solution I’ve seen for this common problem.

Librarians could save the world if we’d let them. 😉

#DIY #Libraries #Library #Ethnography

PEOPLE/ARNOLD1.GIF

Any recommendations for books on #DistributedComputing?

I'm primariy looking for a best-practices kind of thing to recognize potential problems early and avoid reinventing wheels.

#Bookstodon #FediBooks

Rapid7 Analysis: Microsoft SharePoint JWT Token Authentication Bypass (CVE-2026-55040)

https://www.rapid7.com/blog/post/ra-microsoft-sharepoint-jwt-token-authentication-bypass-cve-2026-55040/

Slides and whitepaper of Gone in 60 Frames – USB Video Exploitation by @robherrera_ and myself seem to be on the #defcon34 media server now!

Slides - https://media.defcon.org/DEF%20CON%2034/DEF%20CON%2034%20presentations/DEF%20CON%2034%20presentations/DEF%20CON%2034%20-%20Alex%20Plaskett%2C%20Robert%20Herrera%20-%20Gone%20in%2060%20Frames%20-%20USB%20Video%20Exploitation%20-%20In60%20Slides%20v1.pdf

Whitepaper - https://media.defcon.org/DEF%20CON%2034/DEF%20CON%2034%20presentations/DEF%20CON%2034%20presentations/DEF%20CON%2034%20-%20Alex%20Plaskett%2C%20Robert%20Herrera%20-%20Gone%20in%2060%20Frames%20-%20USB%20Video%20Exploitation%20-%20In60%20Whitepaper%20v1.pdf