shouts out to the nist cve api for having a query parameter in a format that absolutely no http library will emit, basically forcing you to hand-serialise a url

amazing how many talks at c3, defcon et al boil down to "we looked at the protocol format and it's as though nobody ever thought to do this before"

@hanno I'm afraid there is a general decline of index quality at all major providers (G,Bing,Yandex,???), while alternative engines mostly rely on those. I also noticed that verbatim search is basically dead as not all content is indexed in its original form so even if you know exactly what you are looking for, the index entry is just not there to find it.

@hanno @kagihq ?

@csepp I think @HalvarFlake had a presentation where he talked about hacking like an addiction where accessing more systems (and knowledge) leads you to even more systems, each giving a dopamine rush :)

My MongoDB honeypot is now open source:

https://gitlab.com/bontchev/mongopot

Visualization (not included in the repo):

https://pandora.nlcv.bas.bg/grafana/d/EysKAV4Dz/mongopot

Can anyone recognize this IC? Looking for its p/n and a datasheet ideally. Handles all the analog audio paths in a portable cassette player.

EDIT: A knock-off of Mitsumi LAG668F.

#electronics #reverseengineering

In the U.S, the Pennsylvania Supreme Court ruled that police can access your Google searches without a warrant.

The court's reasoning: users have no expectation of privacy because "it is common knowledge that websites, internet-based applications, and internet service providers collect, and then sell, user data."

That's what "free" really means. The business model depends on turning your search history into a detailed profile that can be sold, shared, and accessed by third parties.

Today's gift from the algorithm: "Visibility undergarments"

🤔

Couldn't they really not wait until 5th Jan for the next shitstorm ffs?

Just flying on in and snatching a president is a new one

[RSS] Windows ARM64 Internals: Pardon The Interruption! Interrupts on Windows for ARM

https://connormcgarr.github.io/windows-arm64-interrupts/

PS5 keys

https://www.psdevwiki.com/ps5/Keys

RE: https://infosec.exchange/@0xamit/115772097368948161

This has been very fun to develop. I've added tons of cities and I'm looking to add more cities. I'm taking requests :)

LLMs will lead you to lose skills that you are not going to get back because your brain will change and have no patience anymore to do the hardwork that needs to be done. That will be one of the fundamental problems of this tech.

@wolf480pl @filippo This is the use-case what I see among my non-programmer friends: simple little apps that they can't, others won't write (for a reasonable price). Also, usually 0 risk (think: "will I get a notification about a show").

One thing to keep in mind is that all these services are currently provided at a loss for the providers. It will be interesting to watch what happens when prices start to approach actual costs and expected margins.

@mttaggart Oh I was thinking in the context of bounties where you only need one PoC! Doing QA for guiderails must not only be horrible but also pointless for the reasons stated above. Nobody should do that job.