Posts
2523
Following
649
Followers
1466
"I'm interested in all kinds of astronomy."

⛧ SLEIGHER ⛧

2
0
3
repeated

NEW: The phones of the new NATO Secretary General Mark Rutte (including a hotline with the White House):
https://www.electrospaces.net/2024/12/the-phones-of-new-nato-secretary.html

1
2
0
@jann @freddy I've heard that bug bounty submissions definitely correlate with the summer break
0
1
1
@todb @zmanion Based on the post I'm afraid including error detection in new ID's would cause a Hell of a mess at the consumers side :(
0
0
1
repeated

The Archive has definitely hit the phase of "it works unless it doesn't, and then it will suddenly work". This is where the urge to just throw open what's left just to drop bug reports or complaints is high, but you just need to keep tracking things down. This was a quarter century codebase! It's beyond amazing it got this far, this fast. But every time I go back to work at my interfaces, the team has made them run better and better.

0
1
0
repeated

This was my tenth(!) year building 25 days of puzzles for . You can solve them all for free! Most people write code to solve them, but you can solve them however you like. I hope they help people become better programmers. 🌟

The first puzzle comes out in two hours: https://adventofcode.com/

6
4
0
repeated

The 2024 Economist Word of the Year:

“kakistocracy” - Government by the least qualified or most unprincipled citizens.

https://www.economist.com/culture/2024/11/29/the-economists-word-of-the-year-for-2024

0
4
0
Edited 7 months ago
test
Show content

This is a #test of frequency instruments.

Bass

Drums

Distortion

Artifacts

0
0
0
re: The computing I would like
Show content
@cynicalsecurity Thanks I'll look that up!
0
0
1
@brewsterkahle Sorry, not a native speaker here! What I mean (half-jokingly) is these days we - as in users and developers - just accept that our software is bad. We create higher layers of abstractions so ppl with minimal training can produce more sw, because we always need more sw somehow. Then ofc the abstractions leak, and the design doesn't make sense and UX is horrible. Then - if the lawyers and salesppl were smart enough - the producer can charge even more money for the fixes. And the buyers don't have alternatives and they just accept their faith because sw has always been buggy. And this is how you boil a frog.
0
1
8
@astralia @pancake @joxean @radareorg I like the warm fuzzy feeling of running NSA code (financed by US taxpayers) on my machine :)
1
0
1
re: The computing I would like
Show content
@cynicalsecurity I think "some form of NFS" deserves some focus. I haven't thought about this but seen enough NFS induced vulns to say NFS probably won't be it. You ruled out SMB. What are the alternatives?

(We have some nice setups with MinIO, but wrapping everything with HTTP doesn't feel right either)
1
0
0
repeated
Edited 7 months ago
The computing I would like
Show content

After my recent experience with a new laptop, imposed upon me by a client, I feel the need to describe what I’d want from computing, both as a “practitioner” (“shaman”? “fool”?) and as a user.

First and foremost I like to know where my data is, both physically and logically.

I would, therefore, appreciate having some form of storage server which does everything from storing files to my calendar and email. It would be redundant, etc. (i.e. a NAS of some form).

Secondly, we’d have IPv6 so that I could reach said server from everywhere without NAT, CGNAT, transparent carrier-to-carrier NAT (you don’t want to know), etc.

Then, for those who have computing needs, we would have a co-system we would connect next to the NAS, automatically speaking some form of NFS (no, not SMB, not over my dead body) and which would be used automatically by the NAS when a request needed oomph (e.g. video editing on a stored video).

All of this would be topped with a beautiful “portable viewer” which would have a laptop size / format and would do nothing other than connect over the network to your server and allow you to “do things.”

A mobile phone would, similarly, tap into your server to do what it needs to do.

There would be minimal storage on these edge devices.

Wait, you say, this is “The Cloud”.

No, it is absolutely not because I want the data to be mine and nothing to be on the edge devices.

Wait, you say again, this is “Plan 9 meets VNC (in its original Olivetti Research Labs incarnation)”.

Yes, it is.

I still believe that one of the worst ever decisions to be taken was the PC back in 1981 followed by the obtusity of many in thinking that somehow PC “democratised” computing or could replace mainframes, minis and servers with its architecture.

Quoting “The 6M Dollar Man”: We can rebuild him; we have the technology.

We don’t need to continue using the crap they peddle us, we need to sit down and say “OK, now let’s be grown ups and build what we need, not what others want to us to build.” (note: 0xide is a step in that direction)

cm_2

2
2
1
repeated

I love programs with anti-debuger checks. By definition, the people you're "stopping" from debugging your program are the same ones who have the tools to delete your debugger check.

It's like specifically locking a door to keep lockpickers out

0
2
0
Edited 7 months ago

My friends at Ravenfortech wrote an introductory #malwareanalysis post on the INC #Ransomware:

https://translate.kagi.com/https://scribe.rip/@ravenfortech/inc-ransomware-elemz%C3%A9s-a909b5aed114

This gang recently pwned the Hungarian company responsible for military procurement (VBÜ) and now selling the data for $1M.

https://444.hu/2024/12/01/visszakerultek-a-netre-a-vedelmi-beszerzesi-ugynokseg-ellopott-adatai-egymillio-dollarrol-indul-a-licit

Based on the analysis the malware is very simple. INC uses 2023 CitrixBleed (2023) and spear phishing for initial access:

https://www.sentinelone.com/anthology/inc-ransom/

This doesn’t paint a picture of mature security at VBÜ to say the least…

1
3
5
repeated

bert hubert 🇺🇦🇪🇺🇺🇦

I've started a page listing for many fields (physics, computing, biology, history..) the most Totemic Books. The ones that are central to the field, the books you wished you had learned about earlier. The work no one in a field can do without. Please send me your suggestions so we can share the love more broadly! https://berthub.eu/articles/posts/totemic-books-for-many-fields/

18
5
0
repeated

Turbo Pascal turns 41. who here remembers this one?

7
8
0
@pancake @joxean To be fair the issue I brought up only comes up during more "low-level" development (specifically Processor modules), certainly not during scripting. With Python scripts you can just configure a script directory and write your scripts there with any editor, and you can even fire up a headless instance from some vim command to run it. Java is more cumbersome (as Java usually is) but one of my side-quests is to document how to set up a proper devenv for it.
1
0
0
Show older