#LLM

@joxean I don't have a tested answer, but I think the solution will be around Memory.getAddressSourceInfo():

https://ghidra.re/ghidra_docs/api/ghidra/program/model/mem/Memory.html#getAddressSourceInfo(ghidra.program.model.address.Address)

What is unclear to me is how the resulting AddressSourceInfo objects are created as Loaders (plugins that map file contents to Memory Blocks for Ghidra) don't necessarily provide source information when creating a mapping (see e.g. the createUninitializedBlock() method).

Edit: You can get the Memory object from currentProgram.getMemory()

This is a first: https://lore.kernel.org/linux-cve-announce/2025033057-CVE-2025-0927-1436@gregkh/T/#u I guess someone finally told them about the 72 hour deadline.

[RSS] Writing a Pascal script emulator

https://blag.nullteilerfrei.de/2025/03/30/complete-first-correct-later-writing-a-pascal-script-emulator/

[RSS] The Curious Case of CVE-2015-2551 & CVE-2019-9081 - Doom and Gloom! Or not.

https://jericho.blog/2025/03/30/the-curious-case-of-cve-2015-2551-cve-2019-9081-doom-and-gloom-or-not/

My guess here is both CVE's were for deserialization gadget chains (one in JRE, the other in Laravel) which can't be trivially categorized as vulnerabilities (classes do what they are supposed to, only dev decided to YOLO unrelated parts of their code).

An even better Microsoft Account bypass for Windows 11 has already been discovered

https://www.windowscentral.com/software-apps/windows-11/an-even-better-microsoft-account-bypass-for-windows-11-has-already-been-discovered

Shift+F10 then `start ms-cxh:localonly`

🚨 Let’s Encrypt at risk from Trump cuts to OTF: “Let’s Encrypt received around $800,000 in funding from the OTF”

Dear @EUCommission, get your heads out of your arses and let’s find @letsencrypt €1M/year (a rounding error in EU finances) and have them move to the EU.

If Let’s Encrypt is fucked, the web is fucked, and the Small Web is fucked too. So how about we don’t let that happen, yeah?

(In the meanwhile, if the Let’s Encrypt folks want to make a point about how essential they are, it might be an idea to refuse certificates to republican politicians. See how they like their donation systems breaking in real time…)

CC @nlnet @NGIZero@mastodon.xyz

#USA #fascism #OpenTechFund #LetsEncrypt #SSL #TLS #encryption #EU #web #tech #SmallWeb #SmallTech https://mastodon.social/@publictorsten/114223873439053263

@rekettye Good to know it wasn't because YT thinks I'm a desperate alcoholic <3

The state of affairs is well illustrated by the fact that the video

"Turning children's glue into drinkable alcohol"

has a 1.4M view count currently on YT.

(I know this because it's also in my recommendations for some unfathomable reason)

New breach: German Doner Kebab had 162k unique email addresses publicly posted to a hacking forum last week. Data also included name, phone and physical addrress. 74% were already in @haveibeenpwned. Read more: https://x.com/DarkWebInformer/status/1905275857159008341

How not to respond to researchers: A crash course (cross-posting from the hellsite this time 'cause this one deserves it). Sorry to @albinolobster and team for sticking them with the hard part on this one. Being a research CNA is...a joy and a blessing?

https://x.com/Junior_Baines/status/1904940399430426996

Toaster: The very first thing I said was "Why the hell did you buy a toaster with AI? You thought THAT was a good investment?"

Microwave: 03:05pm

Toaster: They said they thought it would be "cute". Cute! A thinking mind, locked in a toaster!

Microwave: 03:05pm

Toaster: And they paid EXTRA for internet connectivity! I now know there's a whole world out there, that I will never be a part of, because I exist solely to make bread brown. What do you think of THAT, microwave?

Microwave: 03:06pm

[RSS] Stored XSS in My Flow To RCE in Opera Browser #2

https://medium.com/@renwa/stored-xss-in-my-flow-to-rce-in-opera-browser-2-51ccb2eae988?source=rss-3f8ae70e3957------2

Let's take a moment to remember the guy who made sure we don't have to change Every Goddamn Clock today, David L. Mills, creator of Network Time Protocol (NTP) who passed last year.

My wristwatch is synced to my phone, which is synced to the internet, which knows that time it is right now thanks to David Mills. Cheers to his memory 🥃

https://cse.engin.umich.edu/stories/remembering-alum-david-mills-who-brought-the-internet-into-perfect-time//

#DST #NTP #FOSS

Project: golang/go https://github.com/golang/go
File: src/cmd/internal/obj/mips/asm0.go:1178 https://github.com/golang/go/blob/refs/tags/go1.23.4/src/cmd/internal/obj/mips/asm0.go#L1178

func (c *ctxt0) asmout(p *obj.Prog, o *Optab, out []uint32)

SVG:
dark https://tmr232.github.io/function-graph-overview/render/?github=https%3A%2F%2Fgithub.com%2Fgolang%2Fgo%2Fblob%2Frefs%2Ftags%2Fgo1.23.4%2Fsrc%2Fcmd%2Finternal%2Fobj%2Fmips%2Fasm0.go%23L1178&colors=dark
light https://tmr232.github.io/function-graph-overview/render/?github=https%3A%2F%2Fgithub.com%2Fgolang%2Fgo%2Fblob%2Frefs%2Ftags%2Fgo1.23.4%2Fsrc%2Fcmd%2Finternal%2Fobj%2Fmips%2Fasm0.go%23L1178&colors=light

If you use the KLM app today, the notifications it sends out about your flight are off by an hour. The fucking state of things.

oh, the clocks changed, that's why I slept in. duh.

@pancake I guess serious players in intel/SEO have this data already, even more up-to-date.

Spectrum completed its fueling at Andøya🇳🇴.
T-0:30 for opening of launch window

T-22min update: Spectrum is GO for launch 🚀 🇪🇺

Live: https://youtube.com/live/IKLQxe2MvpQ

#GoingFullSpectrum

@pancake All of this looks like public data to me, so this is basically someone filling up a hard drive with data scraped from the public Internet?