General Devices for Lowering Morale and Creating Confusion

@TheBreadmonkey

“This must be Thursday,' said Arthur to himself, sinking low over his beer. 'I never could get the hang of Thursdays.”

#THHGTTG

[RSS] A gentle introduction to binary analysis and Ghidra's SLEIGH

https://blog.thalium.re/posts/sleigh/

Impacket 0.13.1 is out, with a lot of improvements and some new relay options. https://www.coresecurity.com/blog/whats-new-impacket-0131

FatGid+4
A four-byte type, an eight-byte stride, one root shell. #FreeBSD

https://fatgid.io/

/via @Hetti

Your next AI agent

I love how the Unix commands have such intuitive naming. Like 'find' if you need to find a file, or 'grep' if you need to grep for a string

Part of why I'm baffled and outraged by #AI is because I'm a traditional storyteller. The stories I tell are fascinating to me because they have been told by countless generations. Shaped by every single person who passed them on. In spoken word, person to person, retelling them in the moment with deep attention to their audience's moods and needs. The stories kept changing but they changed through human connection.

Stories are not "content" or "text". They are connection.

#storytelling

How to Treat Sunburn on the Face

@airwhale I never heard that one, is this a Swedish term?

Micropatches released for Windows Accessibility Infrastructure Elevation of Privilege Vulnerability (CVE-2026-24291, CVE-2026-25186, CVE-2026-25187) https://blog.0patch.com/2026/05/micropatches-released-for-windows.html

[RSS] Deep dive into the object creation flow in Windows - PART 4: Handle table internals.

https://winware31.blogspot.com/2026/05/deep-dive-into-object-creation-flow-in_01568126117.html

@tychotithonus My problem is that on Linux they don't even try to connect to the device, and since passkey support on Linux is shit, they essentially disable HW key 2FA for all Linux users. I'm so mad about this.

Microsoft is aware of a security feature bypass vulnerability in Windows publicly referred to as "YellowKey". The proof of concept for this vulnerability has been made public violating coordinated vulnerability best practices.

I know people here probably don't want to rehash the disclosure discussion for the 683,547,329th time, but fuck Microsoft and this passive aggressive bullshit trying to frame their own interests as "best practices" in a vuln mitigation publication. Your shit is getting torn apart. Act like you've been there before because we all know you have.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45585

@ramin_hal9001 Right, I actually read this one just forgot about it! Thanks for the reminder!

This one by @sassdawe deserves some more love in these trying days:

#VSCode Extension Deployment with Intune - Björn Sundling, David Sass - PSConfEU 2025

https://www.youtube.com/watch?v=deBTJdjMc5o

RE: https://infosec.exchange/@sassdawe/116606877612791531

Also - if you think 'none of our users run VSCode', check your telemetry. They do. It doesn't even need local admin rights to install.

I've tooted about this one for about two years now, Microsoft have created their own security bonfire and it's going off in their own backyard, they just haven't realised yet.

Wow some terrible reporting about Google's latest horrible ideas about how to distort information access in the name of "convenience" (or something):

https://techcrunch.com/2026/05/19/google-search-as-you-know-it-is-over/

A short thread
🧵>>

@sassdawe Birds don't exist!

I could not find an existing phrase so I'm inventing a new one:

"Yes Man Design" is the principle of implementing a system so it always reports desired results and hides any errors. This often serves to achieve faster adoption than competing, more honest designs, forcing out alternatives.

I use the #LLM tag for no particular reason.