"Complexity Has to Live Somewhere"
-- @mononcqc

https://ferd.ca/complexity-has-to-live-somewhere.html

Steam updated its platform to clarify that game purchases grant a license, not ownership, in response to California's AB 2426 law, which takes effect in 2025. So yes, the games you buy don’t actually belong to you https://alternativeto.net/news/2024/10/steam-now-makes-it-crystal-clear-that-you-re-purchasing-a-license-not-the-actual-game/

@joxean @buherator yes! And it’s quite convenient to use, e.g. https://security.humanativaspa.it/big-update-to-my-semgrep-c-cpp-ruleset/

TIL there is a thing called #Sarif, a Static Analysis Results Interchange Format, developed by Microsoft.
https://groups.oasis-open.org/communities/tc-community-home2?CommunityKey=c64ae352-bebf-446d-8ebf-018dc7d3eeb0

🎮 Announcing Steam gaming on Fedora Asahi Remix! 🎮

Get the scoop here: alx.sh/gaming.

... or just dnf install steam and give it a go!

Promoting exploits with logos and websites may be overkill, but let me remind you of this show put together for the release of a RAT:

https://youtu.be/oHxNEvklKqE?si=59JzajcBQYRP7xrX&t=1491

#bo2k #cdc #defcon

Bibi-binary is a hexadecimal notation system from 1968 with its own binary-derived symbols and single-syllable pronunciations for each digit https://en.wikipedia.org/wiki/Bibi-binary

@gsuberland Also, do you know https://github.com/DarkCoderSc/SubSeven ? :)

@gsuberland Yesterday I asked in the office who's heard about Back Orifice. One hand (out of ~10).

Just a new #lolbin - sweet16 I mean, setup16

c:\windows\SysWOW64\setup16.exe

blog post to follow

Apple did the research; LLMs cannot do formal reasoning. Results change by as much as 10% if something as basic as the names change.

https://garymarcus.substack.com/p/llms-dont-do-formal-reasoning-and

Sent from San Diego, California, U.S.A. on April 4, 1994. https://postcardware.net/?id=20-18

wow, check out this time lapse from last night's solar storm 😍

@stilescrisis @raptor CCs are literally written on the card, visible to anyone who looks at my hand while I pay. Why should I keep it secret? (Not sure if this is part of the actual thought process but I think this is an interesting angle)

🤖 GSM-Symbolic: Understanding the Limitations of Mathematical Reasoning in Large Language Models

"Recent advancements in Large Language Models (LLMs) have sparked interest in their formal reasoning capabilities, particularly in mathematics. The GSM8K benchmark is widely used to assess the mathematical reasoning of models on grade-school-level questions. While the performance of LLMs on GSM8K has significantly improved in recent years, i…"

https://machinelearning.apple.com/research/gsm-symbolic

Two relatives of mine got scammed/phished recently. Nothing serious happened fortunately. Some interesting observations:

- People see URL's as opaque blocks. They have 0 clue where they point to since they have 0 clue about how to read them.
- "Check the domain" doesn't help (even assuming the knowledge of what part of an URL string is a domain) if you have no information about what domains are "normal" (whatever that means).
- Regular people don't see giving out CC's or other sensitive information as a critical task. One of the victims told me they gave out their CC while doing two other things - I'd drop everything to focus such a task, while for them it's just another boring physical copy-paste.

Based on this most of our awareness advise is shit.

#phishing #scam

@SteveSyfuhs
"Admins can check the events in the Microsoft Defender XDR"
"Microsoft Defender XDR will raise an alert"

What if I'm not willing to pay a company to detect the exploitation of a protocol that was shipped to me by the very same company? Are there some event ID's, correlations one can implement (using FOSS tools maybe), independently from the Mothership?

@tmr232 Same with the docs: sometimes it's like finding a forgotten library room behind a brick wall. Actually fascinating!

@jwz faster than my mobile data connection