The QoS of this web server is apparently configured so that it gradually decreases my connections bandwidth so that my downloads ETA doesn't change.

While our colleagues hack live at #Pwn2Own in Cork, take a look at our newly published last year's writeup on our blog: We compromised a QNAP router to take over a networked Canon printer.
▶️ Read the findings and how we got there: https://neodyme.io/en/blog/pwn2own-2024_qhora/

Just received an email from YouTube that they'll soon enable autodubbing on the OctoPrint channel for new and soon also old videos. Hell no, every time I run into this AI shit when watching YouTube I just want to scream, it's THAT bad.

Thankfully, there's a way to opt-out, and I just did that. And if you upload stuff to YouTube, for the love of all that is holy, PLEASE disable that too!

Uncheck Channel Settings > Upload defaults > Advanced Settings > Automatic dubbing

It feels like the major tech companies have followed a Journey of discovering The Hardest Way Possible why quality assurance is so important, gradually ramped up quality assurance, dramatically improved the quality of their software, until the senior engineers who pushed for this retire, and then a guy who thinks he knows everything because he's read both "What They Teach You At Harvard Business School" and "What They Don't Teach You At Harvard Business School" says to himself "why are we paying for all this quality assurance? the quality is clearly fine, we don't need it!"

https://www.theregister.com/2025/10/16/windows_11_update_localhost/

CVE-2025-8078: ZYXEL Remote Code Execution via CLI Command Injection https://rainpwn.blog/blog/cve-2025-8078/

@peter
Just a friendly reminder: the fact that the fediverse survived unaffected is _only_ because it's being run by private individuals, _at their own expense_, physically distributed all over the world.

Running, maintaining and moderating a service like this costs time and/or money.

So please donate to your instance if you can. I know I do. It's not much, but I do what I can.

This is a collective effort.

Want to watch #Pwn2Own but can't make it to Ireland? Join one of the live streams!

Tues 1400 - STAR Labs SG vs Sonos Era 300
https://youtube.com/live/3oAs5hzH9zE

Wed 1400 - SummoningTeam vs Samsung Galaxy
https://youtube.com/live/LuzHcXruJF4

1600 - Qrious Secure vs Samsung Galaxy
https://youtube.com/live/DYjWzgS2JXg

Thur 1030 - Interrupt Labs vs Samsung Galaxy
https://youtube.com/live/pFPhdBcyykI

1500 Team Z3 vs WhatsApp
https://youtube.com/live/hM3z_5yT3Os

AWS goes down. Takes down UK Gov login gateway, including HMRC login. What kind of brain-dead idiot decided to base a key government gateway on an overseas cloud service ??

#aws #hmrc #ukgov

Honestly, WTF Microsoft. https://hawktrace.com/blog/CVE-2025-59287

New vulnerability report from Talos:

Truffle Security Co. TruffleHog git arbitrary code execution vulnerability

https://talosintelligence.com/vulnerability_reports/TALOS-2025-2243

CVE-2025-41390

ICYMI (story broke late Friday evening): A judge has ordered NSO Group to stop targeting WhatsApp users.

At the same time the judge reduced the damages the spyware maker had to pay to WhatsApp from $167 million to $4M, becasue there was no evidence NSO’s behavior was “particularly egregious."

http://techcrunch.com/2025/10/18/spyware-maker-nso-group-blocked-from-whatsapp/

@tychotithonus As I see "this other thing" usually doesn't break everything. But if it breaks DNS, everything breaks, so DNS has a significance IMO, esp. because people often overlook this component.

nl-laundry-1 still meeting its nine fives sla this morning.

💚 my IRC runs without US-EAST-1 💚

"Unavailability Zones"

@cynicalsecurity My grandfather used to say that the problem with computers is that they do what you tell them :)

digital signatures per saxophone

Surprise: it is DNS. #AWS

PSA: we're aware that Signal is down for some people. This appears to be related to a major AWS outage. Stand by.

AWS is down, but the Fediverse still keeps shitposting 💪