XCancel Is Back
https://daringfireball.net/linked/2026/09/11/xcancel-is-back
Oh damn I had not seen the details of the MicroTik RCE: the client can send a public RSA key with correct N and e = 1 and the server will use it.
Two primitives/protocol things that would have prevented it: if RSA was defined with a fixed e, and if SSH clients sent a key hash instead.
In recognition of bravery, patriotism and an unwavering love of freedom, we have decided to rename Microsoft Teams as Microsoft America.
Please update your SBOM, software directories and desktop icons; this change is immediate and permanent. Thank you for your attention to this matter.
🦅
Reverse engineering an ASIC
Man this ethernet over powerline shit ain’t working 😭
RE: https://infosec.exchange/@decoderloop/117248341568750269
Slides for my #RustConf 2026 talk are now up! A recording will be posted some time after the conference as well, I'll post it when it's up.
My latest article for ACM Queue about CHERIoT is live!
This describes the design decisions that we made in designing an aggressively privilege-separated OS with a single address space for embedded systems. It's part of a series of articles about designing single-address-space systems and aims to highlight which parts of CHERIoT are things that are a good idea everywhere and which are a good idea only for embedded systems.
EDIT: Looks as if they mangled the title, it should read 'usable' not 'able'.
EDIT2: And now they have fixed it.