Hashcat v7.0.0 released https://hashcat.net/forum/thread-13330-post-63567.html#pid63567

Proton’s Lumo AI chatbot: not end-to-end encrypted, not open source

https://pivot-to-ai.com/2025/08/02/protons-lumo-ai-chatbot-not-end-to-end-encrypted-not-open-source/ - text
https://pivottoai.libsyn.com/20250802-protons-lumo-ai-chatbot-not-end-to-end-not-open-source - podcast
https://www.youtube.com/watch?v=HDPZbUPUFyk&list=UU9rJrMVgcXTfa8xuMnbhAEA - video

#Linux eBPF vulnerabilities incoming (unprivileged eBPF required) + disclosure troubles:

https://www.openwall.com/lists/oss-security/2025/08/03/1

@freddy @ifsecure Here's the official announcement, FTR: https://www.mail-archive.com/security-announce@lists.apple.com/msg00842.html (APPLE-SA-07-30-2025-1 Safari 18.6)

Based on the previously linked issue it looks like the patch window was this big due to the misalignment of patch cycles, no?

a 2661 byte program I wrote just won the "Sur Prize" at the International Obfuscated C Code Competition. You can probably guess what it is once I mention that @foone might enjoy it

https://www.youtube.com/watch?v=d2ulsnSTbUQ

[RSS] Exploring possible solutions to the inconsistency in how Windows searches case-insensitively for named resources

https://devblogs.microsoft.com/oldnewthing/20250723-00/?p=111403

Some fun anti-reverse possibilities here :)

How to craft a raw TCP socket without Winsock? https://leftarcode.com/posts/afd-reverse-engineering-part1/

From a CBS news segment from July of 1985 discussing the busting of various #hackers and BBS operators in New Jersey.

Ouch, but also 💀

Will be uploading the entire segment to Internet Archive later today.

Another day, another conversation with the press team where I explain that I did not give the quote in that story and the whole thing is AI slop. This happens once every few weeks now.

Why does [ #WinDbg ] show me the wrong function?

https://devblogs.microsoft.com/oldnewthing/20050322-00/?p=36113

TIL about COMDAT folding #compiler optimization!

[RSS] Exploit development for vulnerabilities in Windows over MS-RPC

https://incendium.rocks/posts/Exploit-Development-For-MSRPC/

New vulnerability report from Talos:

Eclipse ThreadX FileX RAM disk driver buffer overflow vulnerability

https://talosintelligence.com/vulnerability_reports/TALOS-2024-2088

[RSS] MaterialX and OpenEXR Security Audit

https://www.shielder.com/blog/2025/07/materialx-and-openexr-security-audit/

[RSS] Characterizing the Raspberry Pico 2 FI countermeasures - Part 1

https://www.ioactive.com/characterizing-the-raspberry-pico-2-fi-countermeasures-part-1/

In 1983, Philips produced the first FM radio receiver on a chip, leading to products such as the FM radio wristwatch. Let's look at the tiny silicon die inside this chip and see how it works. 1/N

New episode is up!
We talked with Nathan Emerick about the Spotify CarThing and it's journey to becoming the DeskThing :D
https://unnamedre.com/episode/75

Wow, after 25 years of #Unix / #linux experience, I learned that you can filter output in #less.

Press ampersand (&) and enter a regex to show only lines matching the regex.

Press ampersand (&) and then exclamation mark (!) to apply an inverse filter.

@G33KatWork IIRC BSim docs can be a bit hard to find, here I try to keep an up-to-date version (just bumped to 11.4.1): https://scrapco.de/ghidra_docs/Features/BSim/

#Ghidra 11.4.1 released

https://github.com/NationalSecurityAgency/ghidra/releases/tag/Ghidra_11.4.1_build

What's New:
https://github.com/NationalSecurityAgency/ghidra/blob/Ghidra_11.4.1_build/Ghidra/Configurations/Public_Release/src/global/docs/WhatsNew.md

Change History:
https://github.com/NationalSecurityAgency/ghidra/blob/Ghidra_11.4.1_build/Ghidra/Configurations/Public_Release/src/global/docs/ChangeHistory.md