Hister v0.13.0 is out with quite a few new features. Update your instances.

https://github.com/asciimoo/hister/releases/tag/v0.13.0

Hister is a general purpose web search engine providing automatic full-text indexing for visited websites.

#selfhosted #search #freesoftware

CVE-2026-33824: Remote Code Execution in Windows IKEv2 - the folks from TrendAI Research break down this wormable bug that was patched last week. The show root cause & offer detection guidance. Read the details as https://www.zerodayinitiative.com/blog/2026/4/22/cve-2026-33824-remote-code-execution-in-windows-ikev2

A 4-star admiral told Congress the U.S. military runs a Bitcoin node to “secure networks” and endorsed Bitcoin as a “power projection” capability. The cryptographic primitives he cited like proof or work aren’t exactly earth shuttering in 2026. https://gooden.house.gov/2026/4/gooden-reveals-historic-u-s-military-use-of-bitcoin-node

Micropatches released for Windows Telephony Service Elevation of Privilege Vulnerability (CVE-2026-20931)
https://blog.0patch.com/2026/04/micropatches-released-for-windows.html

The Dungeon of Dark Patterns

Sources and bonus timelapse: https://www.peppercarrot.com/en/miniFantasyTheater/049.html

#webcomic #krita #miniFantasyTheater

if the part before the main, is the "prequel" then why is the part after the main a "sequel" and not a "postquel"?

Today I learned a spell to TOAST A BAGEL. It is supposed to be a spell to REFORGE A RING but it does not check the ring’s MATERIAL, and if you cancel about a second into casting the bagel will NOT be DESTROYED.

I typically recommend people do not pick a Firefox fork because keeping up with security patches is a lot of work and being downstream of our code typically implies a delay.

But if you feel like you really have to use a Firefox fork, I suggest you find one that has the means to ship an update within a day.

From those I looked at, most did not bring an update based on 150 yet. (Special shout out to the Tor Browser. You're awesome!)

My new article: "Some notes on the security properties of the pipe_buffer kernel object"

Many Linux kernel exploits use the pipe_buffer kernel object to build strong exploit primitives. I experimented with pipe_buffers and discovered something interesting

https://a13xp0p0v.tech/2026/04/20/pipe-buffer-experiments.html

Oh my god, OpenAI reinvented Recall, but for macOS.

"Chronicle" is an opt-in feature that scans your screen, saves screenshots temporarily, and sends them to OpenAI's servers.

https://developers.openai.com/codex/memories/chronicle