Posts
2570Following
627Followers
1397
repeated
blacktop
blacktop@mastodon.social
High level diff of iOS 18.4beta1 vs iOS18.4beta2 🎉
https://github.com/blacktop/ipsw-diffs/blob/main/18_4_22E5200s__vs_18_4_22E5216h/README.md
0
2
0
repeated
Longhorn
never_released@mastodon.socialAdapt to removal of Windows Arm32 .NET debugging
> .NET support for Windows on Arm32 has ended. Debugging support for this platform will be removed from Visual Studio 2022 starting with the 17.14 update.
0
1
0
repeated
Konstantin 
kpwn@infosec.exchange
I'm excited to share CVE Crowd's Top 5 Vulnerabilities from February 25!
These five stood out among the 352 CVEs actively discussed across the Fediverse.
For each CVE, I’ve included a standout post from the community.
Enjoy exploring! 👇
#Pentesting #AppSec #InfoSec #CyberSecurity #BugBounty #Hacking #CVE #CveCrowd
1
3
0
repeated
evacide
evacide@hachyderm.ioListen, I'm not going to pretend that I'm even remotely surprised, but I will tell you that this is a slap in the face to every person in the infosec community that has worked to track and thwart Russian APTs for the last several decades.
https://www.theguardian.com/us-news/2025/feb/28/trump-russia-hacking-cyber-security
5
9
0
repeated
AxWax
axwax@chaos.socialHappy #303day to all who celebrate.
It took me a whole year to finally upload last year's jam...
0
3
0
repeated
int*domi;*domi=0;
domi@donotsta.retoday, i have IP-blocked the entirety of alibaba cloud’s IPv4 range (47.80.0.0/13, 47.74.0.0/15, 47.76.0.0/14). And you could ask - domi, what the hell, that’s kinda sorta a lot of addresses?
fucking watch this: that’s sakamoto Mk5, my Ryzen 9 7950X3D server. Never before have I seen forgejo taking this much CPU.
They’ve generated 9GB of access logs (!) and 230GB of generated tarballs (!!!) before I got to my laptop, investigated and ip-banned them. I’m positive that most forgejo deployments in existence wouldn’t survive this.
If you needed another reason to fuck generative AI today - here’s one
3
9
0
repeated
bert hubert 🇺🇦🇪🇺🇺🇦
bert_hubert@fosstodon.orgSo I didn't know, but Europe already has a backup of PubMed, the database of biomedical research publications. The US PubMed broke down over the weekend. And here is our alternative: https://europepmc.org/ #pubmed #pmc
2
17
0
repeated
Pedro Justo
itanium@fosstodon.org@buherator kdnet has had support for the virtio NIC for years.
In Windows just configure kdnet as you would with any other supported NIC and, in QEMU, configure the virtual NIC as
-netdev user,id=net0 -device virtio-net,netdev=net0,disable-legacy=on
1
1
1
repeated
t3nb3w
t3nb3w@infosec.exchange🚀 New Blog & PoC Release: Abusing IDispatch for COM Object Access & PPL Injection 🚀
I've developed a PoC exploit that demonstrates an interesting bug class in COM servers implementing IDispatch, allowing indirect object creation within the target process. Specifically, by leveraging the ability to instantiate STDFONT—a legacy COM class not designed for cross-process use—I was able to achieve code injection into a Windows PPL (Protected Process Light) process. This technique enables interaction with protected processes like LSASS.
This research builds on the work of @tiraniddo who identified how COM object manipulation via IDispatch can lead to unexpected process interactions. My PoC takes this concept further by demonstrating its practical impact through registry manipulation and .NET payload execution inside PPL processes.
🔍 Blog Post: https://mohamed-fakroud.gitbook.io/red-teamings-dojo/abusing-idispatch-for-trapped-com-object-access-and-injecting-into-ppl-processes
💻 PoC & Source Code: https://github.com/T3nb3w/ComDotNetExploit
Key Highlights:
🔹 Exploiting IDispatch in OOP COM servers
🔹 Abusing STDFONT instantiation for process injection
🔹 Achieving code execution inside PPL and accessing LSASS
🔹 Bypassing SEC_IMAGE integrity checks
🔹 Leveraging OnlyUseLatestCLR for compatibility
1
6
0
repeated
Daniel Supernault
dansup@mastodon.socialI keep hearing that Sup shouldn't exist because X exists.
I made Sup to replace Snapchat and Facebook Messenger in my own friend group
I think it might be useful to other friend groups or families too, being that you can join with an email or Pixelfed/Loops or Mastodon account
Not only that, but Sup will be modular, allowing for rich integration with pretty much any other chat platform (Signal, Matrix, Delta, etc)
It's like Beeper, but federated and open source. 🚀
0
3
0
buherator
buheratorhttps://u1f383.github.io/linux/2025/03/02/a-series-of-io_uring-pbuf-vulnerabilities.html
CVE-2024-0582, CVE-2024-35880, ???
0
0
1
repeated
Cindʎ Xiao 🍉
cxiao@infosec.exchangeHi! The slides for my talk today at RE//verse 2025 (@REverseConf), "Reconstructing Rust Types: A Practical Guide for Reverse Engineers", are now published: https://github.com/cxiao/reconstructing-rust-types-talk-re-verse-2025
It's been great to catch up with so many folks - if you're at the conference, come by and say hi!
The presentation was recorded, and the video will be published at a future date!
#reverseengineering #rust #rustlang #malware #infosec #REverse2025
1
7
0
repeated
Randahl Fink
randahl@mastodon.socialThis is the most important comment I have heard this week — Poland’s Prime Minister Donald Tusk:
“500 million Europeans are asking 300 million Americans to defend them against 140 million Russians […] Europe, if there is something we lack today, it is not economic or demographic power, but the belief that we are truly a global force.”
I think Tusk hits the bullseye here. Those 140 million Russians are already fully occupied by fighting Ukraine, and our leaders act like we are Liechtenstein.
35
16
0
repeated
lcamtuf 
lcamtuf@infosec.exchange
Show content
In the early 2000s, Microsoft was dealing with a PR crisis: information security. This wasn't about nerds on Slashdot. You had regular mainstream stories on CNN about Windows worms!
Consumers were fed up. They couldn't quite ditch Windows, but they could trade Microsoft Internet Explorer for a browser called Mozilla / Firefox. They did, en masse. Firefox peaked at a 30%. Microsoft's browser market share is in the gutter to this day.
But then, Chrome happened. Chrome was good, fast, easy to use, and had a solid security story. Firefox still had one ace up their sleeve: they could convincingly say that they put your privacy first.
Except, there wasn't a massive, public uproar about Google's privacy practices.
You could try to stir the pot, or you could give people another reason to stick with you. Firefox did neither, and its user base to a small core of fans who see Google as an abstract yet existential threat. From ~30% to <3%.
Now, Google bankrolled Mozilla for years - first as a defense against Microsoft, and later just to have a token competitor so that antitrust regulators stay put.
If you're getting hundreds of millions for just existing, you turn from a hip OSS project to an ossified bureaucracy. So now, Mozilla has a problem: how do you support your current lifestyle if the funding dries up?
Well, you can monetize with ad tech. Google and Microsoft are getting away with it? But oops, your user base consists entirely of privacy nerds who are going to flip out about that.
1
4
0
repeated
mahaloz
mahaloz@infosec.exchangeIf you are looking for my slides from my Reverse talk, you can find it and useful artifacts here: https://github.com/mahaloz/talks/tree/main/2025/REverse_SAILR
0
7
0
repeated
dragosr
dragosr@chaos.socialFramework Desktop: It's not a $3k 1Petaflop 128k Blackwell DIGITS, but it does have Strix Halo/Ryzen AI Max+ 395 unified memory(DDR5x tho) with a 256 wide bus soldered memory on the board - capability that would cost $6k in a Macbook for $2k.
New Framework desktop, engineering sample torn down by iFixit - skip to 7:20.
0
2
0