#BOFH excuse #295:
The Token fell out of the ring. Call us when you find it.
π idalib is now available in IDA Home.
That means hobbyists and enthusiasts can now call IDA's analysis engine as a library β running headless analysis, automating workflows, and integrating IDA into their own tools β without needing an IDA Pro license.
To celebrate, we're offering 30% off IDA Home until August 14th.* Use promo code HOME30 at checkout.
π If you've been on the fence, now's a good time. https://hex-rays.com/ida-home
*Offer not available for corporations, agencies or resellers.
Even if you're doing a great job closely supervising your LLM coding ... for the love of all that it holy, stop pushing a new GitHub release every ten minutes.
Being able to tell GitHub to only notify the user when new releases are cut is a critical attention-management feature that you are breaking.
(Please do not reply with "shouldn't be using LLMs in the first place", "close supervision is impossible" etc noise)
Researchers have found a new version of SiliVaccine, North Korea's internal homegrown antivirus engine. Well, not that "homegrown" actually because the engine works on top of ClamAV and Malheur
https://nkinternet.com/2026/08/01/a-new-silivaccine-north-koreas-antivirus/
A mysterious hacker has stolen more than $70 million worth of Bitcoin from Coldcard hardware wallets: https://bitcoinmagazine.com/news/coldcard-wallet-exposed-after-bitcoin-hack
The attackers exploited a vulnerability in the wallet's firmware that produced weak and easy to guess private keys: https://blog.coinkite.com/entropy-technical-backgrounder/
Insane and inhumane: "YC founder asks desperate job seekers to tattoo themselves for an interview"
https://sfstandard.com/2026/07/30/lemonlime-tattoo-job-interview/
After a short #EMFCamp induced hiatus, it's back...
First up this weekend is interesting talks from #emfcamp2026:
Threats:
* https://media.ccc.de/v/emf2026-215-1-north-korean-agent-looking-for-a-job - job hunting, .kp style
Exploitation:
* https://media.ccc.de/v/emf2026-93-1-they-forgot-what-happened-last-time - @Rairii's pokes the Redmond beast some more
* https://media.ccc.de/v/emf2026-206-1-breaking-in-to-buildings-with-boobs - a guide to social engineering the physical world
Hard hacks:
* https://media.ccc.de/v/emf2026-57-1-obd-ii-obviously-broken-design-too - getting into ODB-II
* https://savvycan.com/ - CANbus packet parser
* https://media.ccc.de/v/emf2026-56-1-lock-picking-robot - robotic approaches to locks
* https://safetyfic.com/how-to-unlock-tsa007-lock-forgot-combination/ - how to change the code on a TSA combination lock?
* https://www.amazon.co.uk/tsa-key-007-master-luggage/ - want a TSA master key?
* https://lpubelts.com/ - how hard to pick is my lock?
* https://media.ccc.de/v/emf2026-47-1-building-a-tiny-paging-network - build your own pager network with @sammachin
Crypto:
* https://media.ccc.de/v/emf2026-59-1-how-not-to-make-a-random-number-generator - return 42;
* https://en.wikipedia.org/wiki/Euclidean_algorithm - finding the common factor
* https://en.wikipedia.org/wiki/Euler%27s_factorization_method - more on common factors
Data:
* https://media.ccc.de/v/emf2026-88-1-building-a-mostly-local-mildly-judgemental-home-assistant - Mark J Cox takes us on a journey to build your own home assistant π€
Nerd:
* https://media.ccc.de/v/emf2026-124-1-infrastructure-review - a review of the EMF Camp 2026 infrastructure
* https://media.ccc.de/v/emf2026-230-1-an-sres-guide-to-camping-in-extreme-conditions - vanlife reliability engineering from @donna_156
* https://phones.emfcamp.org/ - the EMF phone book
* https://media.ccc.de/v/emf2026-46-1-the-orphan-source-incident - more about the 2024 orphan source incident
* https://media.ccc.de/v/emf2026-277-1-reverse-engineering-007-nightfire - updating Nightfire via reverse engineering
* https://media.ccc.de/v/emf2026-100-1-automated-game-hacking - parsing and compiling game logic
Genuinely having a great time reading @tara 's exploration of purpose-built business machines (in the vein of the IBM 5280): https://www.tara.sh/posts/2026/2026-07-24_cobolito400_essay/
Honestly her site is one of my favorite little blogs. There's a fully essay behind the post!
As an industry, I know we're not going back, but it's neat reflecting on how different engineers over the decades have thought about _data_ and data portability as a first-class citizen.
Coldcard devices used predictable RNGs, and apparently this has consequences. π
I'm pleased to announce a new release of the #idalib #Rust bindings for @HexRaysSA IDA Pro! This release adds compatibility with latest SDK (v9.4), and a couple of bug fixes. Thanks to @raptor and @yegor for their contributions.
https://github.com/idalib-rs/idalib.git
Yet another attack against the Arch User Repository is underway. We are monitoring and analyzing the malware samples.
https://discourse.ifin.network/t/new-aur-attack-prompts-adoption-lock/698