Posts
4059
Following
730
Followers
1618
"I'm interested in all kinds of astronomy."
Java code can become overly complex due to unnecessary abstractions.

With Rust on the other hand you can simply open up a portal to the Dimension of Pain while trying to implement an interface.
1
1
9
... this other damn thing works, but is "dark mode" only, so I can't see shit :P

The only thing that worked today so far was a debugging sleep().
0
0
0
The year is 2026:
- My Windows VM can't handle more than 2 serial ports
- My hexeditor won't run without a GPU
2
1
6
repeated

PRESS RELEASE
Today, our engineering team announced a streamlined editorial workflow powered by the Unix tool sed, enabling instant, consistent replacement of the symbol & with the word “and” across all communications. This improvement strengthens clarity, supports accessibility, and ensures brand‑wide linguistic consistency. By integrating sed into our publishing pipeline, we reaffirm our commitment to precision, efficiency, and high‑quality content delivery.

1
1
0
repeated
Edited 11 days ago

While everyone was on Holiday we scanned a few thousand hosts for (CVE-2026-48710): zero auth required and we found clinical trial databases, email mailboxes, MCP server for SSH industrial IoT via bastion servers, and live PII APIs wide open. The FastAPI/MCP ecosystem is sitting exposed - patch to Starlette 1.0.1 now and check your exposure at https://badhost.org

1
4
0
repeated

We paired time travel debugging with an agent on a noisy 7B-instruction ARM64 Android trace.

In ~10 minutes, it traced the MTProto v2 decryption chain down to AES-IGE and correctly described the execution flow.

Full write-up 👇
https://www.eshard.com/blog/telegram-ttd-trace-analysis

0
2
0
repeated
repeated

Hoshino Lina (星乃リナ) 🩵 3D Yuri Wedding 2026!!!

Holy crap, clang in C++ mode is *evil*!

https://godbolt.org/z/hM7W1WPsE

gcc at least puts a `ud2` in there...

3
2
0
repeated
current status
1
0
1
The epoll uaf

https://guysrd.github.io/epoll-uaf

"That one call fixed a uaf that had been reachable from any unprivileged process for a few years on any Linux / Android running a 6.6 and above kernel with the affected optimization."
0
5
4
repeated

Micropatches released for Windows Shell Link Processing Spoofing Vulnerability (CVE-2026-25185)
https://blog.0patch.com/2026/05/micropatches-released-for-windows-shell.html

1
3
0
repeated
Edited 11 days ago

Fuzzing finds bugs in Rust code - reliably so. But async Rust has largely stayed out of reach with its complexity making it hard for fuzzers to explore meaningfully.

At Oxidize 2026, Morgan Hill (@pcwizz) walks through what it takes to actually fuzz async Rust: the naive approaches that don't work, and an involved technique that does - involving LibAFL, user mode QEMU, and a fair amount of head scratching.

🔗 https://oxidizeconf.com/sessions/awaiting_exploitation

0
4
0
repeated

hack.lu is celebrating its 20th edition!

There is still time to be part of this special anniversary edition: submit your talk, presentation, workshop, or even a short talk for the Call For Failures.

Twenty editions of sharing, learning and community deserve something memorable. Don’t miss the chance to contribute, this year will be special!

Call-for-Papers Submission Site https://pretalx.com/hack-lu-2026/

CfP Details https://2026.hack.lu/blog/hack.lu-2026-call-for-papers/

@hack_lu @circl

0
4
0
repeated

Error: password must contain:

Three lower case letters for the Elven-kings under the sky,
Seven upper case letters for the Dwarf-lords in their halls of stone,
Nine digits for Mortal Men doomed to die,
One special character for the Dark Lord on his dark throne;
In the Land of Mordor where the Shadows lie.

One username to rule them all, one password to find them,
A second factor to bring them all, and in the darkness bind them;
In the Land of Mordor where the Shadows lie

3
12
1
repeated

It's . Have a good one and don't forget your

0
4
0
Show older