Men will literally build Kubernetes Cluster cluster at home instead of going to therapy ....

New assessment for topic: CVE-2024-58136

Topic description: "Yii 2 before 2.0.52 mishandles the attaching of behavior that is defined by an __class array key, a CVE-2024-4990 regression, as exploited in the wild in February through April 2025. ..."

"On the April 9 2025, Yii released an advisory warning that Yii framework versions before `2.0.52` were susceptible to Unsafe Reflection, with this CVE essentially a patch bypass of `CVE-2024-4990` ..."

Link: https://attackerkb.com/assessments/e6d2c5ff-8653-41a3-acf1-882330960fe1

I'm watching this video on Cisco Aironet wireless bridges and the serial interface on them is wild.
It's a /text-mode browser/, pointed at its internal web interface!

https://youtu.be/a5HMiZRuBko

@jschauma Correct answers grant you points in tests. Seeking help (e.g. from the student taking the test next to you) is penalized as cheating. It seems different expectations have to be communicated very clearly and often to get through...

Students not merely cheating with, but utterly relying on AI in "a society that treats schooling as [nothing more than] a means to a high-paying job" is deeply concerning as AI may actually make you dumber:

"research shows that when students off-load cognitive duties onto chatbots, their capacity for memory, problem-solving, and creativity could suffer. Multiple studies published within the past year have linked AI usage with a deterioration in critical-thinking skills"

https://www.msn.com/en-us/news/technology/everyone-is-cheating-their-way-through-college/ar-AA1EjCRk

@Howard My son struggled with the mechanics too so I impulse-bought the cheapest light plastic knock-off at a local grocery store (for ~2 EUR IIRC?), and he loves it. It looks like the one on the picture (note the curved tiles), but I think the photo is of an actual professional one.

@bestdeadends They probably signal prosperity. With those nuts and bolts in Eastern-Europe the whole bench would be stolen in a blink of an eye.

Glad to report that binaryninja-docker still works with Binary Ninja 5.x in case you are on older glibc (or other dependency):

https://github.com/v-p-b/binaryninja-docker

BlackHoodie will be back at @reconmtl this year ☺️ It'll be two days of Breaking Down Binaries: Introduction to Reverse Engineering & Malware Analysis by Christina Johns and @sud0suw, registration is now open https://blackhoodie.re/recon/

💻 Have you read our recent publication?

Two Use After Free (UAF) vulnerabilities were discovered within Chrome’s Browser process by one of our researchers at SSD Labs: https://ssd-disclosure.com/ssd-advisory-miracleptr-sandbox/

Writing a Windows ARM64 Debugger for Reverse Engineering - KoiDbg by @keowu

https://keowu.re/posts/Writing-a-Windows-ARM64-Debugger-for-Reverse-Engineering-KoiDbg/

I've written an unhealthy amount of words on "the cloud" and specifically Europe's woes. In the post below I tie many articles together into a hopefully useful overview. It may be good to know that nothing I write on the cloud is novel or original, I mostly hope to report things as they are. Which is scary enough already! https://berthub.eu/articles/posts/cloud-overview/

One-Click RCE in ASUS’s Preinstalled Driver Software https://mrbruh.com/asusdriverhub/

@singe I get it, just another data point

Sierpiński triangle? In my bitwise AND?

https://lcamtuf.substack.com/p/sierpinski-triangle-in-my-bitwise

This weeks statistics:
- Random shitpost: 25 repeats, 61 favs
- Original technical content: 3 repeats, 3 favs

#social

Study: Your coworkers hate you for using AI at work

https://pivot-to-ai.com/2025/05/10/your-coworkers-hate-you-for-using-ai-at-work/ - text
https://www.youtube.com/watch?v=ONx7IFkX9OE&list=UU9rJrMVgcXTfa8xuMnbhAEA - video

"Hey, we're gonna take a screenshot of your PC every five seconds to feed our AI, mmkay? Oh wait, you want a screenshot of a meeting slide? Heck no we don't want your COMPANY to sue us!"

-Microsoft, definitely

https://www.bleepingcomputer.com/news/microsoft/microsoft-teams-will-soon-block-screen-capture-during-meetings/

#privacy #microsoft

I am surprised this isn’t getting the attention it deserves: Hungarian military intelligence is apparently mapping what the response in parts of Ukraine will be when Orban would march in with his army. Ukraine has several Hungarian populated pockets and Putin encouraged orban several times to grab that land from Ukraine. War is not a game, so this should be seriously addressed, Kaja Kallas and Mark Rutte!

https://ssu.gov.ua/en/novyny/sbu-vpershe-v-istorii-ukrainy-vykryla-ahenturnu-merezhu-voiennoi-rozvidky-uhorshchyny-yaka-shpyhuvala-proty-nashoi-derzhavy-video

Why the UK's IBM Failed by Asianometry

https://www.youtube.com/watch?v=EkTHDgYTh64