We can finally run Doom in Quake! https://www.youtube.com/watch?v=tVOYmYUWkmE #doom

Now that the drawing is complete, @TheDustinChilds and Zed have a few thoughts about the upcoming #Pwn2Own Ireland contest. https://youtube.com/shorts/6l3BW94xH8E #P2OIrleand

Fortinet's last security blog included a section called "A Call to the Industry: Doing the Right Thing for the Security of our Society", which is good. It talks about "transparent disclosure of discovered vulnerabilities" and "radical transparency".

In other news, Fortigate are almost two weeks into knowing they have a zero day which is actively exploited in one of their products, haven't issued a CVE, haven't done a public writeup, and have patch notes that don't mention the vulns.

[RSS] Attacking the Samsung Galaxy A* Boot Chain

http://blog.quarkslab.com/attacking-the-samsung-galaxy-a-boot-chain.html

[RSS] Linux kernel instrumentation from Qemu and Gdb

http://blog.quarkslab.com/linux-kernel-instrumentation-from-qemu-and-gdb.html

[RSS] Evaluating tail call elimination in the face of return address protection, part 1

https://devblogs.microsoft.com/oldnewthing/20241017-00/?p=110380

[RSS] Finding and exploiting CVE-2024-28578 with fuzzing

https://www.mayhem.security/blog/cve-2024-28578-test-third-party-image-libraries-with-mayhem

[RSS] Hackaday Hacked!

https://hackaday.com/2024/10/19/hackaday-hacked/

By default, Kagi Image Search downranks images from websites with a high proportion of AI-generated content.

You can also use the AI images filter to completely exclude websites with AI-generated images from your image search results.

More info: https://help.kagi.com/kagi/features/exclude-ai-images.html

#Kagi #AdFree #Search #AI

Somehow, I don't think that 2024's richest man in the world, who also is an immigrant, would ever think of using his money to create something like this.
https://www.npr.org/2013/08/01/207272849/how-andrew-carnegie-turned-his-fortune-into-a-library-legacy

Currently trying to repair this device. Can you deduct or guess what it is? #NameThatWare

As always, hide your replies behind a CW to not spoil others.

@Viss now I *so* want to play some Red Alert!

Was that non-admin x-user exploit @gossithedog talked about[1] ever released?

https://digitalmarketreports.com/news/25091/microsoft-recall-feature-on-windows-11-not-removable-after-all/

[1] https://infosec.place/notice/AieooVB1w6sCv45MFE

@mttaggart @AAKL @jerry Don't get me wrong, I really enjoy the convos I have here! But I definitely don't see the expert2expert interactions (usually not involving me :)) that were usual on Twitter. I don't have numbers, and I also rarely go there, but my _impression_ (this is what counts right?) is that such conversations still happen more on the birdsite, and there's also interesting research _only_ posted there.

@AAKL @jerry True, but part of the problem is that somehow much of the infosec discussions still don't seem to happen here. I'm usually astonished by the amount of content I have to x-post from X...

Tired of using outdated languages for #Ghidra scripting or a REPL that you can't even properly paste into? @tmr232 and I wrote a plugin to embed a #Jupyter #Kotlin kernel for a full Notebook environment alongside your GUI.
https://github.com/GhidraJupyter/ghidra-jupyter-kotlin

@jerry @AAKL I created my account on Akkoma because it had a more sensible approach to search back in the day and I also have an acc on infosec.exchange (Mastodon) just for search. Last time I checked none of them worked as I expect them to work (like I'm unable to find stuff by searching for exact phrases). I know people who don't use Fedi because of this.

It also seems to me that while I follow almost exclusively infosec people, much of the content I see is about unrelated and mostly depressing topics like war, climate change, etc. I get these are important topics, but I guess the last app anyone wants on their phone is a Bad News Machine.

@joeycastillo So glad you are working on this, having some sample code at hand for the accelerometer would be extremely useful!