The evolution of #LEGO computer #UX design:

https://interactionmagic.com/UX-LEGO-Interfaces/

[RSS] Trying to Exploit My Old Android Device, take 1

https://pwner.gg/blog/Android%27s-CVE-2020-0238

[RSS] Introduction to Fuzzing Android Native Components

https://blog.convisoappsec.com/en/introduction-to-fuzzing-android-native-components/

[RSS] Micropatches for "LNK Stomping" Windows Mark of the Web Security Feature Bypass (CVE-2024-38217)

https://blog.0patch.com/2024/11/micropatches-for-lnk-stomping-windows.html

[RSS] Windows Server 2012 Mark of the Web Vulnerability (0day) - and Free Micropatches for it

https://blog.0patch.com/2024/11/windows-server-2012-mark-of-web.html

#CVE_2024_11667 #AUD_2981_97086

Invivo Fuzzing by Amplifying Actual Executions
https://mboehme.github.io/paper/ICSE25-invivo.pdf

#frombsky #fuzzing

Tabletop exercise, your major SaaS supplier got hit with ransomware 8 days ago and they're in the US, but you're in the UK, and you haven't had an update in 4 days, and they've gone on holiday as it's Thanksgiving. https://blueyonder.com/customer-update

Yes IBM, sure.

Bluesky Social Dataset (235M posts from 4M users)
Link: https://zenodo.org/records/11082879
Comments: https://news.ycombinator.com/item?id=42261804

Story-time: C++, bounds checking, performance, and compilers -Coding in Old Entish
https://chandlerc.blog/posts/2024/11/story-time-bounds-checking/

#frombsky

@swapgs @floyd You mean sudo vs. raw sockets?

"But average people like AI poetry better than real one"

(Original title: Saturday Morning Breakfast Cereal - Poetry)

https://www.smbc-comics.com/comic/poetry-2

@floyd Maybe sudo doesn't really grant you full rights to send raw packets?

@floyd Weird handling of half-open connections? Have you tried with -sT?

@0xabad1dea "If you think that part is self-explanatory, then document it thoroughly" sounds like a good rule of thumb for documentation in general.

GRUB LUKS Bypass and Dump

https://remyhax.xyz/posts/luks-vm-dump/

"if the system boots and automatically decrypts the LUKS partition, this blog is about that type of system"

Seems legit

[RSS] Everyday Ghidra: Ghidra Data Types -- Creating Custom GDTs From Windows Headers -- Part 2

https://medium.com/@clearbluejar/everyday-ghidra-ghidra-data-types-creating-custom-gdts-from-windows-headers-part-2-39b8121e1d82

@MxVerda I never used it so idk, but they write about an "online HTML editor", suggest a HTML training and site generators like Jekyll, which tells me they basically just serve HTML and provide some UI for editing. Site generators allow using simpler syntax and generate HTML (and possibly other things like a feed.xml) from it.