How not to respond to researchers: A crash course (cross-posting from the hellsite this time 'cause this one deserves it). Sorry to @albinolobster and team for sticking them with the hard part on this one. Being a research CNA is...a joy and a blessing?

https://x.com/Junior_Baines/status/1904940399430426996

Toaster: The very first thing I said was "Why the hell did you buy a toaster with AI? You thought THAT was a good investment?"

Microwave: 03:05pm

Toaster: They said they thought it would be "cute". Cute! A thinking mind, locked in a toaster!

Microwave: 03:05pm

Toaster: And they paid EXTRA for internet connectivity! I now know there's a whole world out there, that I will never be a part of, because I exist solely to make bread brown. What do you think of THAT, microwave?

Microwave: 03:06pm

[RSS] Stored XSS in My Flow To RCE in Opera Browser #2

https://medium.com/@renwa/stored-xss-in-my-flow-to-rce-in-opera-browser-2-51ccb2eae988?source=rss-3f8ae70e3957------2

Let's take a moment to remember the guy who made sure we don't have to change Every Goddamn Clock today, David L. Mills, creator of Network Time Protocol (NTP) who passed last year.

My wristwatch is synced to my phone, which is synced to the internet, which knows that time it is right now thanks to David Mills. Cheers to his memory 🥃

https://cse.engin.umich.edu/stories/remembering-alum-david-mills-who-brought-the-internet-into-perfect-time//

#DST #NTP #FOSS

Project: golang/go https://github.com/golang/go
File: src/cmd/internal/obj/mips/asm0.go:1178 https://github.com/golang/go/blob/refs/tags/go1.23.4/src/cmd/internal/obj/mips/asm0.go#L1178

func (c *ctxt0) asmout(p *obj.Prog, o *Optab, out []uint32)

SVG:
dark https://tmr232.github.io/function-graph-overview/render/?github=https%3A%2F%2Fgithub.com%2Fgolang%2Fgo%2Fblob%2Frefs%2Ftags%2Fgo1.23.4%2Fsrc%2Fcmd%2Finternal%2Fobj%2Fmips%2Fasm0.go%23L1178&colors=dark
light https://tmr232.github.io/function-graph-overview/render/?github=https%3A%2F%2Fgithub.com%2Fgolang%2Fgo%2Fblob%2Frefs%2Ftags%2Fgo1.23.4%2Fsrc%2Fcmd%2Finternal%2Fobj%2Fmips%2Fasm0.go%23L1178&colors=light

If you use the KLM app today, the notifications it sends out about your flight are off by an hour. The fucking state of things.

oh, the clocks changed, that's why I slept in. duh.

@pancake I guess serious players in intel/SEO have this data already, even more up-to-date.

Spectrum completed its fueling at Andøya🇳🇴.
T-0:30 for opening of launch window

T-22min update: Spectrum is GO for launch 🚀 🇪🇺

Live: https://youtube.com/live/IKLQxe2MvpQ

#GoingFullSpectrum

@pancake All of this looks like public data to me, so this is basically someone filling up a hard drive with data scraped from the public Internet?

quote from: https://gekk.info/articles/traceroute.htm

[RSS] W3C - CSS Validator XXE

https://github.com/google/security-research/security/advisories/GHSA-745m-xmq6-g6x7

[RSS] A Quick Note On Two mempolicy Vulnerabilities

https://u1f383.github.io/linux/2025/03/30/a-quick-note-on-two-mempolicy-vulnerabilites.html

Does this person ever sleep?

“The sky was the color of television tuned to a dead channel”

80s meaning: grey
90s meaning: blue
Today: full of ads from the smart tv vendor

The prior (more than a year old by this point) CISA Cybersecurity Advisory minces words a bit less than the recent MAR.

The ICT (internal or external) may not detect compromise. The threat actor may retain persistence after "factory reset".

I’ve drawn around 5,000 comics in my life, and I’m pretty sure I had caffeine in my bloodstream for every single one of them.

CVE-2025-31160 Atop 2.11 heap problems:

"atop always tries to connect
to the TCP port of 'atopgpud' during initialization. When another local
program has been started (instead of 'atopgpud') that listens to this TCP
port, atop connects to that program. Such program is able then to send
unexpected strings that may lead to parsing failures in atop. These failures
result in heap problems and segmentation faults."

https://www.openwall.com/lists/oss-security/2025/03/29/1

This is really concerning, not just the raid but that Indiana University has literally disappeared XiaoFeng Wang (a full professor with a named chair position) from their web sites. The attacks on Chinese-born faculty were bad in Trump 1, but this I worry is way way worse.

RE: https://bsky.app/profile/did:plc:xvgztewzbfh7bpnklayrsvds/post/3lljj6nay722a

The value of generative AI can best be understood by our negotiation with Microsoft for our E5 license.

It's cheaper if we “take" Copilot than if we don’t.

That's some quality work right there.