[RSS] Micropatches for "LNK Stomping" Windows Mark of the Web Security Feature Bypass (CVE-2024-38217)

https://blog.0patch.com/2024/11/micropatches-for-lnk-stomping-windows.html

[RSS] Windows Server 2012 Mark of the Web Vulnerability (0day) - and Free Micropatches for it

https://blog.0patch.com/2024/11/windows-server-2012-mark-of-web.html

#CVE_2024_11667 #AUD_2981_97086

Invivo Fuzzing by Amplifying Actual Executions
https://mboehme.github.io/paper/ICSE25-invivo.pdf

#frombsky #fuzzing

Tabletop exercise, your major SaaS supplier got hit with ransomware 8 days ago and they're in the US, but you're in the UK, and you haven't had an update in 4 days, and they've gone on holiday as it's Thanksgiving. https://blueyonder.com/customer-update

Yes IBM, sure.

Bluesky Social Dataset (235M posts from 4M users)
Link: https://zenodo.org/records/11082879
Comments: https://news.ycombinator.com/item?id=42261804

Story-time: C++, bounds checking, performance, and compilers -Coding in Old Entish
https://chandlerc.blog/posts/2024/11/story-time-bounds-checking/

#frombsky

@swapgs @floyd You mean sudo vs. raw sockets?

"But average people like AI poetry better than real one"

(Original title: Saturday Morning Breakfast Cereal - Poetry)

https://www.smbc-comics.com/comic/poetry-2

@floyd Maybe sudo doesn't really grant you full rights to send raw packets?

@floyd Weird handling of half-open connections? Have you tried with -sT?

@0xabad1dea "If you think that part is self-explanatory, then document it thoroughly" sounds like a good rule of thumb for documentation in general.

GRUB LUKS Bypass and Dump

https://remyhax.xyz/posts/luks-vm-dump/

"if the system boots and automatically decrypts the LUKS partition, this blog is about that type of system"

Seems legit

[RSS] Everyday Ghidra: Ghidra Data Types -- Creating Custom GDTs From Windows Headers -- Part 2

https://medium.com/@clearbluejar/everyday-ghidra-ghidra-data-types-creating-custom-gdts-from-windows-headers-part-2-39b8121e1d82

@MxVerda I never used it so idk, but they write about an "online HTML editor", suggest a HTML training and site generators like Jekyll, which tells me they basically just serve HTML and provide some UI for editing. Site generators allow using simpler syntax and generate HTML (and possibly other things like a feed.xml) from it.

@MxVerda AFAICT while Neocities states that it generates RSS it is in fact just a hosting platform, and it is up to you to include RSS in your uploaded content (may worth asking them about this). Handcrafting RSS is a bit cumbersome, and since the links on your blog seem to be broken already, you are probably better off using a static site generator that takes care of proper linking and RSS too (possibly with a plugin).

After 6 years, I made a blog thingy again.

This time about MmScrubMemory. An innocuous looking function that has bitten my ass several times in the last several years. And if you're developing a hypervisor, it might've bitten yours, too.

https://wbenny.github.io/2024-11-21-mmscrubmemory/