Thirteen years ago I found "a bad babe" in Windows

https://daniel.haxx.se/blog/2011/10/28/whos-0xabadbabe-and-why/

@foone ok yes this is more painful, thus preferable.

In our new blogpost we guide you through the process of improving the tools available for #pentesting WCF services over the net.tcp binding:

https://blog.silentsignal.eu/2024/10/28/wcf-net.tcp-pentest/

We created a brand new #kaitaistruct based parser and implemented transformations so messages can be manipulated and replayed with #BurpSuite.

are YOU making a website with INFORMATION?

it needs a date. if its not just a list of links... it needs A DATE.

yes your blog, youre recipe edit etc NEEDS A DATE..

please, can we get this right

I had to deal with a freshly unboxed Android phone, and the flipping *clock* app, that was installed by default, came with a privacy policy.

I discovered this because the clock started crying that it couldn't work properly without Google Play Services.

I don't care what the privacy policy was for. I am tired. A clock app does not need to be in a position to have any privacy policy more involved than "we collect and report no data".

The clock is now disabled.

I am so tired of this.

Don't mention explodey stuff near TSA. Noted ✅

Protip:

When designing a user interface, imagine some old woman using it, say Margaret Hamilton, and she's clicking your app's buttons and saying to you, as old people do,

"Young whippersnapper, when I was your age, I sent 24 people to the ACTUAL MOON with my software in 4K of RAM and here I am clicking your button and it takes ten seconds to load a 50 megabyte video ad and then it crashes

I'm not even ANGRY with you, I'm just disappointed."

"If you're thinking without writing, you only think you're thinking" - Leslie Lamport. As a programmer, he'd know this personally, as many programming ideas work fine in your head. Until you try to type it in. https://en.wikipedia.org/wiki/Leslie_Lamport

decomplexifying #curl

https://daniel.haxx.se/blog/2024/10/27/decomplexifying-curl/

I seem to remember the EICAR test string https://en.wikipedia.org/wiki/EICAR_test_file has been used in DoS attacks. Like, supply the string to a log/database such that it will be corrupted by antivirus. However, I cannot find any direct sources. Who can help?

Should JavaScript be split into two languages? Google proposal divides opinion
Link: https://devclass.com/2024/10/22/should-javascript-be-split-into-two-languages-new-google-driven-proposal-divides-opinion/
Comments: https://news.ycombinator.com/item?id=41955353