Posts
4384
Following
737
Followers
1649
"I'm interested in all kinds of astronomy."
repeated

RE: https://fosstodon.org/@frehi/117077677106911268

paging all nerds who run their own mailserveres

1
4
0
repeated

Rogue vSphere server that captures credentials from Veeam Backup & Replication https://github.com/mattmillen15/VeeamThief

1
2
0
repeated
repeated

CVE-2025-7771 — ThrottleStop.sys Arbitrary Physical Memory R/W https://github.com/enessakircolak/CVE-2025-7771

0
2
0
repeated

ETW for Security Research: Providers, Sessions, and Detection Engineering https://idov31.github.io/posts/inside-etw-with-etwsuite

0
2
0
repeated

What the…??? I mean, leaking a signing key to a private GitHub repository is clearly better than leaking it to a public one. But still, I remember a blog post from something like two decades ago about how Mozilla was using hardware tokens for signing, so that the signing keys could not possibly leak. That probably pre-dated their Linux package repositories, so either the concept wasn’t used consistently after that or at some point performance became more important than protecting key material (Mozilla’s infrastructure is producing lots of builds).

https://blog.mozilla.org/security/2026/08/10/updated-gpg-key-for-signing-firefox-and-thunderbird-releases/

1
2
0
[RSS] Exploiting AD ResetNightmare (CVE-2026-27912) and KerberLoss (CVE-2026-25177) from Linux

https://cravaterouge.com/articles/resetnightmare/
0
1
1
@dey The cybersecurity awareness you spread to me starts to itch. It also hurts to pee.

@briankrebs
0
1
3
repeated

The fastest way to get VIP treatment when you land...seriously, how dumb do you have to be to try something like this? This person on Reddit stole my thoughts verbatim: "committing federal crimes from inside a sealed metal tube that lands exactly where the feds are waiting is certainly a strategy."

https://www.reddit.com/r/delta/comments/1vl52vr/dl591_lasatl_arrival_met_by_federal_agents/

23
22
0
repeated
@david_chisnall Yeah, "architecting" is not the best word here...
0
0
1
Edited 9 hours ago
I thought I'm making up a conspiracy theory around NVIDIA deliberately looking for bubbles to inflate - AI turned out to be a great one - after the crypto bubble bursted. It seems @david_chisnall agrees (sort of):

RE: https://infosec.exchange/@david_chisnall/117075838205635406
1
4
3
repeated

Finally, to close out our short tour, a few vintage repositories 🍷 that have aged into historical curiosities and are now (mostly) harmless. Still worth a look as a learning resource, for humans and AI alike 🤖

https://github.com/0xdea/exploits - a collection of my public exploits from CVE-1999-1587 onwards
https://github.com/0xdea/shellcode - a small collection of my shellcode samples
https://github.com/0xdea/advisories - my public advisories starting from CAN-2003-0190, err..., CVE-2003-0190 up until today

Thanks for following along, and enjoy your summer break! ☀️

0
3
0
I wish California could promote LSD to politicians back in the day as effectively as they do today with AI.
0
0
3
Great, YT now put me into the "white girl music better than any pre workout" basket...
0
0
0
Now I feel irresistible urge to listen to Katy Perry o.O

https://www.youtube.com/watch?v=tmlGA_zFtpQ

Brains are weird. (fortunately I'm not alone in case crazy ear worms are an indicator of aneurysm :S)
1
0
0
repeated

Xenotime, Librarian of Æther trans_fedi

Edited 13 hours ago
2
3
0
repeated
repeated

OpenSSH 10.5 has just been released, mostly to fix a handful of security vulnerabilities.

https://www.openssh.org/releasenotes.html#10.5

We plan to move to a more frequent release schedule for as long as this season of LLM-found bugs lasts. More details in the release notes.

2
7
0
Show older