@infoseclogger been there when the CISO who ordered the gig started to create users for initial access like red.team1, red.team2...

"Everything sucks and it's all connected" w/ @adz and @tbernard @ Localfirst Conf

[RSS] LIEF v1.0.0: Brand-new Runtime API and DWARF/PDB -> C/C++ generation!

https://lief.re/blog/2026-07-13-lief-1-0-0/

[RSS] Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)

https://blog.amberwolf.com/blog/2026/july/dell-bios-passwords-weak-xor-encryption-allows-recovery-from-spi-flash-cve-2026-40639/

@wirepair A major difference between old/new-school hacking is "how to get the boxes" vs. "which boxes to open" :)

In response to a #FOIA request from me the #FBI have released records relating to late 90s #hacker group milw0rm. Additional records not included in this Vault release were located by the FBI and I have requested these be processed for potential release as well.
https://vault.fbi.gov/milw0rm/milw0rm-final/view

@twomikecharlie The behavior changes depending on location, zoom and viewport size, a common problem is that by dragging along a long street while keeping the zoom level at some positions no street name label is visible. Desktop is much better than mobile though. The consumer focus argument makes some sense, although I'd still be in trouble to find the direction to the döner place if I can't tell which part of an intersection is which road right after I got out of the subway (also happened to me).

RSS is a secret trick to making the internet more usable. https://www.eff.org/deeplinks/2026/06/hate-algorithm-rss-one-tools-youve-been-looking

@twomikecharlie As I wrote I have this problem all the time with different maps. That includes OSM (also mentioned in the ticket) and GMaps.

#Geoinformatics geeks: why is it a hard problem to make all street names visible on a given window over a map?

This is an old support request of mine:

https://kagifeedback.org/d/8256-missing-street-names/8

... but I'm struggling on a weekly basis with this problem using different maps.

@gilduran.com Link is 429 though...

@gilduran.com 10/10 title

RE: https://infosec.exchange/@CrackMeIfYouCan/116904210214745592

I will be joining as an internet random... no real hope of cracking much.. If anyone wants to form an infosec.exchange or infosex.eccgang team, I am open!

CMIYC registration is now open! https://contest-2026.korelogic.com/howto_register/
#defcon #DEFCON34

Look what I found on archive: Beavis & Butthead Doom Add-On GAM-098

https://archive.org/details/beavisbuttheaddoomgam098

New video: App Execution Aliases.

Type notepad, get the Store one, not the System32 one. Why? App Execution Aliases.
https://trainsec.net/library/windows-internals/how-windows-app-execution-aliases-work-and-how-to-read-them-in-c/

RE: https://mastodon.social/@d_olex/116902388645366483

Many people have drawn entirely wrong conclusions from this post. Meanwhile, an actual solution for preventing this kind of tracking lays in a different ballpark:
1) Get a burner laptop for your hacktivism or organized crime activities, never use it for anything else;
2) Get some dedicated hardware to run your VPN or Tor client, for example -- a portable battery powered router with OpenWrt;
3) Configure and use this setup in a way that prevents the laptop from accessing the internet directly;

"Good morning, Little Piglet," said Eeyore. "If it _is_ a good morning," he said. "Which I doubt," said he. "Not that it matters," he said.

How do the closed-source parts of Apple's Private Cloud Compute work? We had a look at it 🍎👀

Paper: https://dl.acm.org/doi/abs/10.1145/3765613.3811691
Slides: https://hpi.de/fileadmin/user_upload/90_Research_Groups/classen/Documents/ACM_WiSec_26_PCC_Presentation.pdf