> The most rebellious thing you can do is to do something the right way. The measure twice, cut once way. The do your homework way. The double- and triple-check way. The long way. The way where money isn't your only concern. The “I care about this subject and I'm going to give it my best shot” way.

https://www.youtube.com/watch?v=sGu1Gv8cLQo

A vicious loop, because there's no way to troubleshoot an outage when the chatbot is down

RE: https://infosec.exchange/@BleepingComputer/117207756865330014

Oh no! But how will security vendors write their blog posts now?

Egads.

www.yahoo.com/news/us/arti...

If a grocery store is doing dynamic pricing and you just sit there with a flipper zero recording whatever sub GHz or IR signal they are broadcasting to flip them, take the lowest real displayed price, replay it with idk something like this, is that illegal

@lcamtuf "There is no way I will *ever* fill this up!" right?

@lcamtuf In 2026 I don't even know what is "real" anymore (in general). This has been a problem with refurbished/saved HW.

Glad to see MS upgraded Win11 system requirement to a 64GB disk - this way when you buy a minimal laptop you don't have to upgrade your disk immediately after the first update eats 25GB of it (aside of the already installed OS)...

The recording of "Deobfuscation in the Age of Agentic Reverse Engineering" is now public:

https://www.youtube.com/watch?v=3-gJ6EUFoKM

We (CC @nicolodev) show how to use agents to break protections found in anti-cheats, DRM systems & commercial protectors.

Slides: https://synthesis.to/presentations/recon26_agentic_deobfuscation.pdf

Redis RCE PoC (CVE-2026-81934) https://github.com/v12-security/pocs/tree/main/redis/server_ssl

The only downside of using teehee I found so far is that every time I even *think* of using it a tiny Michael Jackson appears in my head and starts to sing...

https://github.com/Gskartwii/teehee

My energy providers website stopped working properly for me this morning. Why would it expect me to be able to also contact:

ahrefs.com
bing.com
browser-intake-datadoghq.eu
clarity.ms
doubleclick.net
facebook.net
google.com
hs-scripts.com
stapecdn.com
stripe.com
stripe.network
tiktok.com
vercel.com
wurfl.io

Just to submit a meter reading!

And no, I DO NOT want to use your sodding app!

#enshittification

VB's Péter Szőr Award, commemorating the life & work of security researcher Péter Szőr, is awarded for the best piece of technical security research published in the past year. What research deserves to win the 2026 award? Nominations close 9 Sept! https://virusbulletin.com/conference/peter-szor-award/

A couple of weeks ago I showed a preview of a new mode for Mines, in my puzzle collection. I'm pleased to say that the new Mines is now completed and live! You can now play Minesweeper on a wide range of tilings in your browser
https://www.chiark.greenend.org.uk/~sgtatham/puzzles/js/mines.html
or download a desktop version from the parent page which supports the same set of grids.

As well as the support for lots of grid types, there's also a new user preference (off by default) to make it easier to play on them. When you click on a clue square to potentially clear around it, the existing flags adjacent to the square light up, to make it easier to count them and work out how many more mines you're still expecting. Particularly useful in the hat tiling, where it's easy to mistake exactly what is adjacent to what!

I expect different people will prefer different grids. Personally I think the triangular grid is particularly tricky and puzzly; the hexagonal honeycomb makes a gentle introduction; the Cairo, Floret and Kites tilings are a nice set in between those extremes; and of course the aperiodic tilings are there to keep you on your toes and ready for anything.

Many thanks to Anders Höglund for this excellent piece of work.

@simontatham In high school I spent waay too much time on a similar desktop variant. I stopped when I saw different tilings when I closed my eyes in school...

NightmareEclipse versus CrowdStrike Falcon https://github.com/MSNightmare/FalconFlank

So, hard pill to swallow, but I think there are a class of AI enthusiasts who got that way because computing fundamentally failed them, for whom getting a computer to do anything _for them_ not being a whole-ass bullshit ordeal still deserve our empathy and solidarity. We, computer-people we, can’t escape responsibility for abandoning user empowerment in favour of corporate consolidation and vending machine interfaces decades ago, now that we’re reaping the whirlwind of mechanized capitalism.

@Viss "you should have told procurement to approve my raspberry pi purchase"

Chamilo LMS was put under the microscope 🔬 by @coiffeur0x90 and Sean Matthews

11 vulnerabilities. multiple attack surfaces. Our new research dives into the vulnerable code paths and exploitation primitives to achieve unauthenticated RCE.

🔗 https://blog.quarkslab.com/chamilo-lms-its-raining-0days-hallelujah-its-raining-0days.html