[RSS] Reverse-engineered the WiFi transfer protocol for HeyCyan smart glasses (BLE + USR-W630 WiFi module) -- first iOS implementation

https://alexschar.dev/HeyCyanCaseStudy

[RSS] A Race Within A Race: Exploiting CVE-2025-38617 in Linux Packet Sockets

https://blog.calif.io/p/a-race-within-a-race-exploiting-cve

[RSS] Reviving a 20-year-old puzzle game Chromatron with Ghidra and AI

https://quesma.com/blog/chromatron-recompiled/

@matdevdug I laughed so hard that my family started to get worried. Thank you!

If you have not seen Wargames, you absolutely should. Holds up well (as a movie; maybe not the technology so much), all these years later. Currently free on YouTube. https://www.ozbargain.com.au/node/950868

[RSS] U-Boot security improvements using Arm memory permissions

https://www.linaro.org/blog/undefined/

[RSS] Coercing machine accounts through MsSense.exe -- MDE becomes the attack vector

https://medium.com/@Sniffler/stuck-without-coercion-options-why-not-just-coerce-mde-aecc23b43b66

[RSS] Getting a Shell on the Tapo C260 Camera (CVE-2026-0651, CVE-2026-0652, CVE-2026-0653)

https://spaceraccoon.dev/getting-shell-tapo-c260-webcam/

"Besides, they are good company, my sheep."

A new page of my comic Ekphrasis, which you can read for free at https://ekphrasiscomic.neocities.org/.

RE: https://framapiaf.org/@Bristow_69/116178473393080452

inkscape is hiring 2 c++ developers. they have a big red warning box saying absolutely fuck off with your genai

need my coffee to escalate the violence.

Neptune's Spatuala is a great scene about care and quality (see how I carefully avoid the A word?):

https://www.youtube.com/watch?v=eYeNKdJhk98

IT people should watch more Sponge Bob!

The FBI got compromised, again. Their wiretap system got compromised, again?!

https://edition.cnn.com/2026/03/05/politics/fbi-investigating-cyber-breach-critical-surveillance-network

"some risks for users facing a strong adversary, such as a government focusing all its resources on a very specific target"

Translation: The police has to write a carefully worded mail to Switzerland.

@troed @Viss I only suggested Gmail as an extreme example for this particular case. I have no problem with e.g. Fastmail, as they don't oversell what they do.

@obivan @CravateRouge @floriann @Viss @bhhaskin Yes, the donation page of Anna's Archive is quite educational.

My point is exactly that these businesses couldn't exist if they actually lived up their users expectations (that are mostly set by the same providers via marketing).

@troed @Viss It's not hard to tell you are personally invested in this service, that's OK. As I stated, this is not a Proton problem, but unfortunately the market they are operating in shouldn't exist in the first place, because the whole thing is built on illusions. As we say around here, they don't necessarily _lie_, they just don't elaborate on all aspects of truth...

There may be some users who fully understand the tradeoffs, but they would certainly not be a viable business if they were the majority customers.

Thanks for the Threat Model link, I read that a couple years ago, but I'll do a refresher sometime.

@obivan @floriann @Viss @bhhaskin Cool, so offering credit card as payment option is basically a footgun they provide.