@b0rk Set a passphrase, then promptly forget it. This is the way.

@jima @Epic_Null @cR0w We could just make all the kids cringe by calling the next one IPv6-7

It's 2026 and on Windows Server 2025, attempting to create a TLS certificate will default to a 1024 bit key and you have to find this menu and expand it to change it.

New vulnerability report from Talos:

Microsoft Windows TCPIP.SYS IppQualifyAddresses Out-of-Bounds Read Vulnerability

https://talosintelligence.com/vulnerability_reports/TALOS-2026-2427

CVE-2026-49177,CVE-2026-49177

My terminal is out of black paper

Let’s call it „beg4shell“. At least now everyone can be a vulnerability researcher.

I self-host now: this account runs on my own server and my own domain, @mbr

The old instance is shutting down and the auto-migration only carried a fraction of you across. If you can read this, you're already in the right place.

Everyone else has to re-follow by hand. Please BOOST this to help me get back everyone :)

#Fediverse #SelfHosted #Mastodon #mbr #masterbootrecord

Rob Pike received the 2026 USENIX Lifetime Achievement Award! https://www.usenix.org/about/awards/flame

Git, grant me the serenity
not to stage changes that don't matter
the courage to commit those that do
and the wisdom to know the difference.

Did you read our latest publication?

Our newest advisory highlights a Linux kernel use-after-free vulnerability discovered by independent researchers during TyphoonPWN 2026: https://ssd-disclosure.com/linux-bridge-stp-timer-use-after-free/

SSD Secure Disclosure is a trusted partner for advanced vulnerability researchers, providing a direct path from high-impact research to coordinated disclosure and competitive compensation.

We are actively looking for Linux vulnerability research, including kernel exploitation, privilege escalation, memory corruption, and other high-impact findings.

You focus on the research. We handle the rest. Learn more at https://ssd-disclosure.com/product-index/

@xabean @azonenberg It is! The nice thing is that you can clicky-click the UI the look at `ps` to see how the magic (in this case: vTPM) happens.

We don't eat our own dog food because frankly it tastes like shit

https://finance.yahoo.com/technology/ai/articles/google-ai-team-tells-job-222929935.html

@azonenberg Proxmox even has GUI for that (tested with Windows guests)

Dreams don't lie, my latest documentation issue just got fixed 🤩

https://github.com/Vector35/binaryninja-api/issues/7413#event-29360967336

RE: https://infosec.place/objects/f3eee898-f8d9-45c7-bf5d-101540b3eda6

[RSS] Bypassing Android Hardware Attestation from the Analyst's Chair

http://blog.quarkslab.com/bypassing-android-hardware-attestation.html

[RSS] How Trail of Bits helps verify the integrity of your Signal chats

https://blog.trailofbits.com/2026/08/11/how-trail-of-bits-helps-verify-the-integrity-of-your-signal-chats/

@leeloo @tris @campuscodi

This is turning into a flame. I think I made my point about the misconceptions brought forward earlier (anonymity vs. privacy vs. encryption).

User friendly services often have to make trade-offs/compromises. If you don't like those choices you are free not to use the corresponding service.

@tris They usually have additional features like customizable results ranking and no ads (obviously). I'm not familiar with the technical implementation but it seems reasonable to aggregate queries toward index providers, which would decorrelate queries from users (from the APIs standpoint).

@campuscodi

@Andromxda IME (with Kagi) the purpose of the account is pretty clear: they need to keep track of your payments and user settings. @campuscodi