@molly0xfff Have you considered using an LLM? /s

More seriously: this is (or at least should be) the open web, algorithms won't downvote you for irregularity, but readers will appreciate quality content.

Blue Monday on Vintage Casio Instruments

https://www.youtube.com/watch?v=h9mm0YlMa9I

@neurovagrant Please write a novel!

@catsalad
"- Why do you put six sugars in your coffee?
- Because the cafeteria doesn't offer little packets of methamphetamine"

The whole of my book on Building a Debugger is now available on Early Access!

It teaches you how to write a native code debugger from scratch.

There's lots of cats.

https://nostarch.com/building-a-debugger

@buherator

• “Check the domain” doesn’t help if you have no information about what domains are “normal”

Damn right. I rememberd doing some phishing training from Google, and they asked if some email sample is legit, and demonstrated its legitimacy by pointing out that it uses legit DropBox domains.
That’s where I thought “but no one here (DropBox isn’t accessible in China) uses DropBox at all! How are they going to learn if this is legit?!” 🫠

@singe I'd love to see some official, vendor-agnostic detection guidance instead of "buy our cloud offering"...

"There is always a way, but we do not provide one." lol

#ghidra

https://github.com/NationalSecurityAgency/ghidra/discussions/5362#discussioncomment-5968992

Lets Encrypt will disable OCSP about 6 months after Microsoft Root program allows it to (the browsers have already okayed it).

This all could be over in a year, year and a half. If you need OCSP for your business, you need to investigate alternatives NOW - which are all proprietary.

Apache ACME will handle this change just fine. Stapling will of course no longer be provided to clients.

https://letsencrypt.org/2024/07/23/replacing-ocsp-with-crls/

"Complexity Has to Live Somewhere"
-- @mononcqc

https://ferd.ca/complexity-has-to-live-somewhere.html

Steam updated its platform to clarify that game purchases grant a license, not ownership, in response to California's AB 2426 law, which takes effect in 2025. So yes, the games you buy don’t actually belong to you https://alternativeto.net/news/2024/10/steam-now-makes-it-crystal-clear-that-you-re-purchasing-a-license-not-the-actual-game/

@joxean @buherator yes! And it’s quite convenient to use, e.g. https://security.humanativaspa.it/big-update-to-my-semgrep-c-cpp-ruleset/

TIL there is a thing called #Sarif, a Static Analysis Results Interchange Format, developed by Microsoft.
https://groups.oasis-open.org/communities/tc-community-home2?CommunityKey=c64ae352-bebf-446d-8ebf-018dc7d3eeb0

🎮 Announcing Steam gaming on Fedora Asahi Remix! 🎮

Get the scoop here: alx.sh/gaming.

... or just dnf install steam and give it a go!

Promoting exploits with logos and websites may be overkill, but let me remind you of this show put together for the release of a RAT:

https://youtu.be/oHxNEvklKqE?si=59JzajcBQYRP7xrX&t=1491

#bo2k #cdc #defcon

Bibi-binary is a hexadecimal notation system from 1968 with its own binary-derived symbols and single-syllable pronunciations for each digit https://en.wikipedia.org/wiki/Bibi-binary

@gsuberland Also, do you know https://github.com/DarkCoderSc/SubSeven ? :)

@gsuberland Yesterday I asked in the office who's heard about Back Orifice. One hand (out of ~10).

Just a new #lolbin - sweet16 I mean, setup16

c:\windows\SysWOW64\setup16.exe

blog post to follow