Be kind to your friends. Give them compliments regularly. Make them feel valued and loved.

We all need this, especially right now 💚

In an update, CERT Poland says the Russian data wiper attack that targeted a power plant last December also targeted a previously unreported second plant

https://cert.pl/en/posts/2026/08/incident-follow-up-report-energy-sector-2025/

PoC for Windows PnP LPE https://plugandpwn.com/

Microsoft, Google, Amazon, Meta and Oracle: Expect a Negative Cash Flow of $125 Billion Next Year https://developers.slashdot.org/story/26/08/08/1727226/microsoft-google-amazon-meta-and-oracle-expect-a-negative-cash-flow-of-125-billion-next-year?utm_source=rss1.0mainlinkanon

I've built a thing:
https://zed.dev/extensions/word-highlight-lsp

It's a @zed #lsp #extension to highlight all occurrences of selected words with multiple colors to quickly identify them in code.

I find it useful for #codereviews. Enojoy!

It's time to time-travel debug a fuzzer! How's your Saturday going?

why the fuck is this called "Word Count Summary Property" https://learn.microsoft.com/en-us/windows/win32/msi/word-count-summary

@whitequark msi files are just repurposed office files -- https://learn.microsoft.com/en-us/openspecs/office_file_formats/ms-oshared/87667163-ea1e-4d67-9eec-47cad74e8030

Two design companies, S&A and Playtype, have created a font that fools AI scrappers and protects copyrighted text

https://s-a.website/projects/shieldfont

https://blog.cryptographyengineering.com/2026/07/29/some-notes-about-anthropics-new-results/

@gsuberland @whitequark May be a similar thing to using PE timestamp fields for hashes (the name remained the same in that case too)?

https://devblogs.microsoft.com/oldnewthing/20240815-00/?p=110131

An absolutely beautyful website showing the state of the Hungarian #energy grid, focusing on the Paks #nuclear plant that is about to shut down due to low water level in river Danube:

https://holadelej.hu/

#BOFH excuse #295:

The Token fell out of the ring. Call us when you find it.

🏠 idalib is now available in IDA Home.

That means hobbyists and enthusiasts can now call IDA's analysis engine as a library — running headless analysis, automating workflows, and integrating IDA into their own tools — without needing an IDA Pro license.

To celebrate, we're offering 30% off IDA Home until August 14th.* Use promo code HOME30 at checkout.

👉 If you've been on the fence, now's a good time. https://hex-rays.com/ida-home

*Offer not available for corporations, agencies or resellers.

Even if you're doing a great job closely supervising your LLM coding ... for the love of all that is holy, stop pushing a new GitHub release every ten minutes.

Being able to tell GitHub to only notify the user when new releases are cut is a critical attention-management feature that you are breaking.

(Please do not reply with "shouldn't be using LLMs in the first place", "close supervision is impossible" etc noise)

@kaia Dr. Zoidberg has this poster!

Researchers have found a new version of SiliVaccine, North Korea's internal homegrown antivirus engine. Well, not that "homegrown" actually because the engine works on top of ClamAV and Malheur

https://nkinternet.com/2026/08/01/a-new-silivaccine-north-koreas-antivirus/

@0x57e11a Is this not a reasonable place to park?

A mysterious hacker has stolen more than $70 million worth of Bitcoin from Coldcard hardware wallets: https://bitcoinmagazine.com/news/coldcard-wallet-exposed-after-bitcoin-hack

The attackers exploited a vulnerability in the wallet's firmware that produced weak and easy to guess private keys: https://blog.coinkite.com/entropy-technical-backgrounder/

らくがき