A handy .NET reverse engineering trick:

Add a sample.exe.config file next to your sample and you can trace e.g. all network requests, including content and headers without hooking or bothering with proxies. Helpful to e.g. quickly inspect c2 traffic:

https://gist.github.com/eversinc33/cd7f3e90643f69748862b87f394f1c16

nanosemitones per gigahectare

"The atmospheric conditions have been very unfavourable lately," said Owl.

Be kind to your friends. Give them compliments regularly. Make them feel valued and loved.

We all need this, especially right now 💚

In an update, CERT Poland says the Russian data wiper attack that targeted a power plant last December also targeted a previously unreported second plant

https://cert.pl/en/posts/2026/08/incident-follow-up-report-energy-sector-2025/

PoC for Windows PnP LPE https://plugandpwn.com/

Microsoft, Google, Amazon, Meta and Oracle: Expect a Negative Cash Flow of $125 Billion Next Year https://developers.slashdot.org/story/26/08/08/1727226/microsoft-google-amazon-meta-and-oracle-expect-a-negative-cash-flow-of-125-billion-next-year?utm_source=rss1.0mainlinkanon

I've built a thing:
https://zed.dev/extensions/word-highlight-lsp

It's a @zed #lsp #extension to highlight all occurrences of selected words with multiple colors to quickly identify them in code.

I find it useful for #codereviews. Enojoy!

why the fuck is this called "Word Count Summary Property" https://learn.microsoft.com/en-us/windows/win32/msi/word-count-summary

@whitequark msi files are just repurposed office files -- https://learn.microsoft.com/en-us/openspecs/office_file_formats/ms-oshared/87667163-ea1e-4d67-9eec-47cad74e8030

Two design companies, S&A and Playtype, have created a font that fools AI scrappers and protects copyrighted text

https://s-a.website/projects/shieldfont

https://blog.cryptographyengineering.com/2026/07/29/some-notes-about-anthropics-new-results/

#BOFH excuse #295:

The Token fell out of the ring. Call us when you find it.

🏠 idalib is now available in IDA Home.

That means hobbyists and enthusiasts can now call IDA's analysis engine as a library — running headless analysis, automating workflows, and integrating IDA into their own tools — without needing an IDA Pro license.

To celebrate, we're offering 30% off IDA Home until August 14th.* Use promo code HOME30 at checkout.

👉 If you've been on the fence, now's a good time. https://hex-rays.com/ida-home

*Offer not available for corporations, agencies or resellers.

Even if you're doing a great job closely supervising your LLM coding ... for the love of all that is holy, stop pushing a new GitHub release every ten minutes.

Being able to tell GitHub to only notify the user when new releases are cut is a critical attention-management feature that you are breaking.

(Please do not reply with "shouldn't be using LLMs in the first place", "close supervision is impossible" etc noise)

Researchers have found a new version of SiliVaccine, North Korea's internal homegrown antivirus engine. Well, not that "homegrown" actually because the engine works on top of ClamAV and Malheur

https://nkinternet.com/2026/08/01/a-new-silivaccine-north-koreas-antivirus/