I don't know where the misconception "you can't boot Windows using coreboot" came from, but I'm tired of correcting people... so here's the proof which should (hopefully) put that misconception to rest for once and for all

All you need are sane ACPI tables (which makes booting windows a great test, otherwise it'll throw a BSOD at you) and payload providing UEFI services (for consumer versions). That's literally it.

NEW macOS 26.5 🥫🍝 sauce! 🎉

xnu:
https://github.com/apple-oss-distributions/xnu/compare/xnu-12377.101.15...xnu-12377.121.6

dyld:
https://github.com/apple-oss-distributions/dyld/compare/dyld-1376.6...dyld-1378

Security:
https://github.com/apple-oss-distributions/Security/compare/Security-61901.101.4...Security-61901.120.67

Libc:
https://github.com/apple-oss-distributions/Libc/compare/Libc-1752.100.10...Libc-1752.120.2

- this post was generated by `ipsw` 🤖

"Call me snake". Plissken is BACK!!!! #SnakePlisskin #escapefromnewyork

https://screenrant.com/escape-from-new-york-john-carpenter-new-entry/

Mastodon 4.6 released today. It lets me force 2FA on accounts.

Also, heads up, I am going to force 2FA on accounts.

Note: this is only applicable to: infosec.exchange
infosec.space
ioc.exchange
convo.casa

Yeah sex is cool but have you tried time-travel debugging?

⏱️ IDA 9.4 pre-release teasers start now.
First up: wider processor and platform support.

The upcoming release adds a Qualcomm Hexagon module, MCore and C-SKY V1, complete AArch64 SVE/SME, improved TriCore analysis with proper calling conventions, and expanded RISC-V coverage including Hazard3/RP2350 and new vendor extensions.

👉 https://hex-rays.com/blog/ida-9.4-wider-processor-and-platform-support

@freddy I'm disappoint, numbers used to mean things...

By this logic next time I pay the shop 7% less :P

I just received a pair of 18650 cells I ordered. They are 70mm tall (not "65").

Is this normal?!

load bearing hardcoded credentials for national security purposes

Happy Birthday to M. C. Escher, born on June 17, 1898, in Leeuwarden, Friesland, the Netherlands.

Like other famous artists such as Michelangelo, Leonardo da Vinci, Raphael, Picasso, Toulouse-Lautrec and Rubens, Escher was left-handed. Escher was forced at school to become ‘double-handed’, which was beneficial for his artform.

More at https://escherinhetpaleis.nl/en/about-escher/escher-today/left-handedness?lang=en
https://www.dailyartmagazine.com/left-handed-artists/
1/n

@phurd you are holding it wrong

RE: https://infosec.exchange/@aristot73/116500590393191853

this aged well #exportcontrols

An ecrime group has somehow gained access to 75k Fortinet firewall devices - dubbed Fortibleed

Blog https://www.infostealers.com/article/fortibleed-75000-fortinet-firewalls-compromised-global-enterprises-exposed-claim-your-ethical-disclosure/

Check if your domain is impacted: https://www.hudsonrock.com/fortinet

I’ve verified the data is real. They’ve been dumping the Fortinet config - not sure how yet - and then cracking the passwords it appears. Data is being resold online. #fortibleed

Claude 'Jia Tan' Code

New Project Zero issue:

apple-zlib: uninitialized memory leak during decompression in inflate

https://project-zero.issues.chromium.org/issues/488250572

CVE-2026-28920

New Project Zero issue:

Linux: recursively oopsing task can get preempted while TASK_DEAD, causing stack refcount overdecrement

https://project-zero.issues.chromium.org/issues/510793286

CVE-2026-46173

New Project Zero issue:

vpu driver close instance ioctl races with itself causing UAF

https://project-zero.issues.chromium.org/issues/493643407

CVE-2026-0163

New Project Zero issue:

libheif: Heap-based Buffer Overflow in Uncompressed Image Tiled Decoding

https://project-zero.issues.chromium.org/issues/507396184

CVE-2026-47178

@cure53 @joern More computing power -> more BTC

So many calcs so little time.