@csepp Stay strong, you can do this!

@Daffodil

i'm making a #QBasic game using mode 13h, 320x200 8bpp. i'm using the line doubling feature of the VGA card to make it 320x100 then manually doubling each pixel horizontally for 160x100

i realized i could use a palette with 3 bits red/green and 2 blue, and then do "subpixel" dither to generate the in between colors. i made a converter to test if that would look good, and it does

here's a thread of images showing what that looks like

1/5

#PixelArt #QBasic #dos #RetroComputing #RetroDev

The latest Hacklore newsletter is out. Be sure to subscribe!

Boost for reach! 🙏

https://buttondown.com/hacklore/archive/hacklore-the-valentines-day-edition/

Dear FOSS maintainers,

here’s a list of funding programs currently accepting proposals for maintenance work:

Codeberg: https://codeberg.org/mechko/awesome-maintainer-funding

GitHub: https://github.com/mechko/awesome-maintainer-funding

Thanks to everyone who helped crowdsource it! I’ll keep it updated, issues and PRs are very welcome :)

#opensource #funding #maintenance #foss

First research in a while! Here's my brain dump on reverse-engineering and auditing Lenovo Vantage. In total, I found four (4) vulns. Check out the post and my custom tooling if you're interested.

https://mkiesel.ch/posts/lenovo-vantage/

BMW’s latest “innovation” isn’t about performance or safety. It’s a logo-shaped screw designed to keep owners out of their own cars. We dug into the patent, the intent behind it, and why Adafruit is already working on a custom bit to undo BMW’s attempt to block repair. Learn more at the link below.

http://ifixit.com/News/115528/bmws-newest-innovation-is-a-logo-shaped-middle-finger-to-right-to-repair
—
#iFixit #RightoRepair #FixTheWorld

In a joint security notice BfV & BSI warn that a likely state-controlled threat actor is conducting phishing attacks via messaging services such as Signal. The targets are high-ranking individuals in politics, military & diplomacy and investigative journalists in Germany & Europe. https://www.bsi.bund.de/SharedDocs/Cybersicherheitswarnungen/DE/2026/202602_BfV_BSI_Sicherheitshinweis.html

[RSS] Memory Integrity Enforcement (MIE) on iOS Deep Dive - Part 1 - 8kSec

https://8ksec.io/mie-deep-dive-kernel/

Me: *drinks coffee*
My brain: DRINK MORE COFFEE!!!1

Due to $reasons I came across this blogpost https://www.elttam.com/blog/env/ about turning ENV variables into code execution which is nice. But the Python vector is depending on Perl, I didn't like that :P.

Digging a bit deeper in the code often helps, so it did this time:

Looking at https://github.com/python/cpython/blob/d73634935cb9ce00a57dcacbd2e56371e4c18451/Lib/webbrowser.py#L51-L52 I could simplify the payload to:

PYTHONWARNINGS='module::antigravity.'  BROWSER='sh -c id #%s' python whatever.py

@virdev @bert_hubert @sampaccoud @camillem I'm no marketer, sorry :( I'll keep an eye on the project and spread the word about it though.

Good news!
We kept aside a few more bundles of training+conference ticket.
To secure your place, send an email to tickets@offensivecon.org or DM us on socials.
Be quick..

Good update to the MSRC leaderboards now that everything is in scope by default: https://www.microsoft.com/en-us/msrc/blog/2026/02/points-to-payouts-evolution-of-microsoft-security-researcher-leaderboard

LLMs are the anti-vax of software and engineering ;-)

@floyd I guess at least they don't position themselves as a Goog^WWindows alternative :)

@jerry Congratulations! :)

In this video, I'm analyzing a really confusing dialog on macOS. Let's dig a bit deeper into what it should do and what it's actually doing. #reverseengineering

https://youtu.be/P7hYg2GpsTk

Recently I switched my music experience from SoundCloud to Bandcamp. I went through my playlists, albums and likes and bought matching tracks on Bandcamp.

At some point I want to delete my SoundCloud account. As they do not offer a data export feature (against GDPR) I created this project to make the export: https://codeberg.org/janikvonrotz/export-soundcloud-data

#SoundCloud #BandCamp #BandCampFriday #stopUsingSpotify #StopUsingSoundCloud #Data #datahoarder #archiving

@paco For random websites, sure, not my business.

But this is software clearly meant for an international audience.

(in the other thread I learned that the linked web page is not even the web page of the software, so linking it as the homepage was probably not a good idea)

@Framasoft

@camillem

Thanks for the explanation, truly appreciated!

I guess you can't do much about it now, but IMO French could've been excellent for finding a unique name (not necessarily with your weirdest spelling, but people learned to spell "kubernetes" too).

We agree that the homepage link is actively misleading, but it should be easy to remove (not a mandatory field) or replace e.g. with the link to the documentation.

@bert_hubert @virdev @sampaccoud