I recently saw a lot of examples of using LLMs when you could get away e.g. with and API call, but now I think I found the perfect example of LLMs being more niche then even skeptics (like myself) think they are:

Even skeptics have to admit that LLMs are very good at natural language translation. @kagihq introduced a fast ("Standard") #LLM for its translation service that seems to fail miserably if you try to translate single words for less common languages:

https://kagifeedback.org/d/9373-standard-translation-is-unusable-for-hungarian

My point is that doing a dictionary lookup for all words (~1mil for English) could be done on a disposable vape in no time with better results, incl. clear indication of lookup failures, so you can fall back to your GPUs when needed.

https://gpg.fail IS ONLINE
TALK VOD IS ONLINE (preliminary recording, not yet edited) #39c3

The worst part of Christmas, where everyone is at #39c3 and I am not

[RSS] Why is the last letter of my string not making it to the clipboard?

https://devblogs.microsoft.com/oldnewthing/20251225-00/?p=111914

(I use Linux and X11, usually none of my string makes it to the clipboard)

Who's watching #DieHard 4 tonight? :)

https://www.youtube.com/watch?v=OTyw6cq86kY

I was away for a while, dropping my current side-project here.
Password cracking in your browser. Think of it as a mini-@hashcat it uses WebGPU to perform the cracking.
NT/LM/DCC/DCC2/MD5 currently implemented with bruteforce/mask/wordlist/hybrid attacks.
https://webcrack.octopwn.com/

RE: https://infosec.exchange/@zak/115793005915790340

This is a metaphor about cybersecurity products.

@pancake Yes, it's SWIG

@pancake it seems items that I reference from Python are overwritten while I go through a generator...

I think I found the magic sauce of if's, now I get Memory Error which I can debug even less than the previous errors

"The operation was successful, the patient died"

🔺This is the first talk I've given in 6 years – featuring formal verification of post-quantum cryptography, the evolution of the Secure Page Table Monitor, a view into Memory Integrity Enforcement, updates to Apple Security Bounty… and a personal note.
https://bird.makeup/users/hexacon_fr/statuses/2002020791865532704

I'm parsing the #IDA type info library and it turns out:

- Sometimes struct member names are not returned. Sometimes!
- The first struct member is at offset 94489263476241, but amazingly the second one is at 8.

Just in case you wonder why I drink...

Edit: that weird value is somewhat random too, so I suspect a memory leak

IT IS NO LONGER POSSIBLE TO STOP ME

At the https://gpg.fail talk and omg #39c3

You can just put a \0 in the Hash: header and then newlines and inject text in a cleartext message.

Won’t even blame PGP here. C is unsafe at any speed.

gpg has not fixed it yet.

Disobedience in Helsinki coming soon! #Disobey2026 https://disobey.fi/2026/

We're happy to announce that the first recordings are now available at https://media.ccc.de/c/39c3!

#39c3

^ta

Admirable reflection on past years fails (and successes) by @starlabs_sg :

https://starlabs.sg/blog/2025/12-2025-reflection/

#fail

TOCTOU in the AMD boot rom? Wow wow wow. #39c3

You! Yes, you, at #39C3 ! Come to our self-organized-session-talk thing!

“FAFO: How we stopped worrying and bought an Electron Microscope”

SoS Stage H, at 00:01 on day 3 (so in ~34 hours after this was posted).

More details: https://events.ccc.de/congress/2025/hub/en/room/detail/sos-stage-h/

I've added the slides and the source code for the Sokoban game to the links for my presentation; it appears on the app, but seemingly not the website... For reference, they are:

Links
Source Code (wasm)
Source Code (web)
Slides
Sokoban Fuzzer

I'll be changing out the sokoban puzzle every 30 minutes from hereon out :)

#39c3 #fuzzing