@sassdawe It's just a guess, but Yubico seems to have something similar to what I have in mind: https://www.yubico.com/works-with-yubikey/catalog/secure-disk-for-bitlocker/

@sassdawe Can't you use an external hw token that you could just touch when needed?

@Lee_Holmes https://www.youtube.com/watch?v=WCS8EgDzcHM

I just noticed a maybe lesser emphasized parental instinct: letting children do stuff very inefficiently.

Helping in the kitchen, driving a screw, planting a flower.

Because that's how we learn things and improve.

@hnsec Congrats! :)

RE: https://mastodon.social/@tdp_org/116614512704731546

It's probably over-attribution, but in the end politicians always first check what everyone else says! So I'll say it anyway: Republik journalism, the gift that keeps on giving.

https://www.republik.ch/2026/02/18/how-tenaciously-palantir-courted-switzerland [English]

https://www.republik.ch/2025/12/08/wie-hartnaeckig-palantir-die-schweiz-umwarb [German]

🎂 IDA Turns 35.
From DOS-era disassembler to one of the most widely used reverse engineering platforms in the world...

To celebrate, we’re launching:
• 35% off new licenses (see eligibility requirements)
• Limited-edition swag giveaway
• “35 Ways to Use IDA” as told by you
• Stories from the past and a few for the future

Read all about it here:
https://hex-rays.com/blog/ida-turns-35-lets-celebrate-together

For years, Rust binaries made reversing a nightmare. Modern decompilers only support C, lacking meaningful types, constructs, and language-specific functions. Led by @34r7hm4n, we're releasing our S&P work Oxidizer, the first deep Rust decompiler, built on angr!

Interested? 🧵👇

CVE-2026-40369: Twelve Bytes to Escape the Browser Sandbox https://voidsec.com/cve-2026-40369-browser-sandbox-escape/

github is like: "I see you're trying to look at a commit diff, how about skipping the files where the majority of the changes happened?"

@wdormann This must be another income source for Paper Street Soap Co's anarchist side-projects!

When Your VPN Opens Your Private Network to the Public https://www.hacktron.ai/blog/cve-2026-0265-panos-globalprotect-cas-auth-bypass

😎 We now push artificial variable declarations close to their use! 😎

Also, inline initialization.

Magnets Are Bad For Hardware Again

https://hackaday.com/2026/05/21/magnets-are-bad-for-hardware-again/

"I'm happy to share that #Fortinet has won the Best Government Supplier award" - LinkedIn

"They probably were government. Just not ours." - Whistler

@seecurity @freddy Damn, I have to level up my act!

@seecurity @freddy It helps me dealing with taxes a lot if I imagine myself as the protagonist of a Kafka novel (or any other absurd/surreal work). Maybe it helps with SAP/other horrors too?

I'll be back at @recon teaching a training with @KeithRamphal, we'll be bringing our combined malware reverse engineering experience to the masses! Whatever runs, wherever it runs, cause the days of your boring ol' Windows C bot are over. https://recon.cx/2026/en/trainingAdvancedMalwareRE.html

@TarkabarkaHolgy Heel hammer-kick to balls during sleep -> 2d6 minutes of temporary paralysis

@buherator This VSCode issue can also take some love from the community:

https://github.com/microsoft/vscode/issues/229861