Mend It Mark recently got famous because a shithead sued him, but I think he's at Bob Ross level of quality entertainment anyway:

https://www.youtube.com/watch?v=ocpDG2O3H6o

Neat, someone used JRuby to add Ruby scripting support to Ghidra.
https://github.com/goatshriek/ruby-dragon#readme

#ghidra #jruby #ruby

@hanno You are right. It is not GPS spoofing. Someone is sending Wifi SSIDs, e.g. using a cheap ESP32, from a different location and as most modern smartphones use WiFi to improve the location accuracy, they fall into this trap. You can confirm this yourself. Disable WiFi on your device and it will get the correct location. :) @tobiasgies

What would be interesting in a book about file formats ? Or streaming myself exploring file formats ?
Just come tell me - I have stickers #38C3.

Hello #38C3, it seems as if there might be some GPS spoofing going on in the building. This might change the clocks of your phones. If you use your phones as alarm clocks or medication timers, that might be a problem.

If you read this and experiment with spoofing broadcasts of this kind: Please consider if you're cool with people potentially missing important medications due to these experiments, and whether you think that's "excellent to each other".

The hardest part about refuting Y2K disinfo is how many problems were fixed quietly, in part to mitigate risk of ligitation (negligence, etc.). People have stories they can't tell.

At this point, I think enough years have passed that a formal amnesty - to encourage companies to disclose just how bad some of the problems were - would be in our historical best interest.

The easiest way to succeed is to measure success wrong.

"OpenAI expects about $5 billion in losses on $3.7 billion in revenue this year, CNBC confirmed in September. Those numbers are increasing rapidly."

So… The business model is to train models on everyones' data without paying them, then lose a billion dollars.
https://www.cnbc.com/2024/12/27/openai-needs-more-capital-than-wed-imagined-moves-to-for-profit.html

NIST is proposing a 256-bit block variant of AES with a static 256-bit key size. Public comments are open until January 25, 2025.

#crypto #cryptography

https://www.nist.gov/news-events/news/2024/12/nist-proposes-standardize-wider-variant-aes

"Invariant inversion" in memory-unsafe languages

https://pacibsp.github.io/2024/invariant-inversion-in-memory-unsafe-languages.html

The CCC 38 Saal1 Presentation - BlinkenCity: Radio-Controlling Street Lamps and Power Plants by Fabian Bräunlein and Luca Melette

...on reversing streetlamps, ripple controls, Versacom and Semagyr, power gear, smart meters, controlling FREs with flashlights and flipper zero's(!), was a tour de force in reverse engineering, critical infrastructure risk analysis, and hacking excellence. If you use electricity or streets, you should watch it.

https://fahrplan.events.ccc.de/congress/2024/fahrplan/talk/HSNZGR/

@Viss I see you are a man of culture as well!

@stf no, only the heli vs car thing, but it's a police car.

I just realized that in Die Hard 4 Matt's little "my dad is my hero" monologue to get the stolen car started is basically how prompt injection works these days :O

Cartoon Network website officially shuts down after 32 years 💔🥹😩😩😩😩😩

Delinea Protocol Handler - Remote Code Execution via Update Process (CVE-2024-12908)
https://blog.amberwolf.com/blog/2024/december/cve-2024-12908-delinea-protocol-handler---remote-code-execution-via-update-process/

#frombsky

To use the Montreal subway, you tap a paper ticket against the turnstile and it opens. But how does it work? And how can the ticket be so cheap that it's disposable? I opened up the tiny NFC chip inside to find out more... 1/15

This year, we worked swiftly to save legacy media sites like https://Vice.com and MTVNews before decades worth of valuable journalism could be erased. These sites are searchable on the Wayback Machine. 📰📺

Help us in saving these resources: https://archive.org/donate/?origin=mstdn-eoy2024

Die Hard 4 is underrated. Fight me!

Oh! @raspberry_pi RP2350 gotcha detailed at @ccc. Does he win the prize?? https://events.ccc.de/congress/2024/hub/en/event/hacking-the-rp2350/