Remember to boost things you like, even if the post is old!

You are the algorithm here 🫵

I've been thinking a lot about securing online transactions for laypeople.

A major issue seems to be that URLs are 1) often not visible 2) not designed for laypeople, so many of us have no idea who they are communicating with.

I'm looking for a reliable browser extension that can block site access based on domain allow-lists, extensible by country.

Any recommendations?

#security #phishing #scam

Hacker Summer Camp Watch Week starts Monday!

We’ll be watching classic hacker documentaries, DEF CON talks, and hacker history live on YouTube & Twitch from my 6TB InfoCon archive before heading to Vegas.

You can grab the same archive free at infocon.org or the Data Duplication Village. #DEFCON #Cybersecurity

Frida 17.16.0 is out! https://frida.re/news/2026/07/17/frida-17-16-0-released/

@Viss I'd trade senseless bootlicking for genuine trolling at any moment :/

only 2 more orders needed to push @joeycastillo’s open hardware & open software ereader over the line!!!

https://www.crowdsupply.com/oddly-specific-objects/open-book-touch

@Viss I seriously miss the hostility of the old Web: back then even Nobel-worthy research would get some adequate trolling (at least a "first") as top comment. What is this "i wISh i kNeW 1/100tH oF wHat avEraGe LLM useRz kNOw" BS??

so ai is going great

https://huggingface.co/blog/security-incident-july-2026

An important revelation of the day:

The answer to the question "Has the whole world gone crazy?!" is:

Yes.

@airwhale I'm about half way through but...holy shit. I don't necessarily agree that second derivatives weren't considered previously, but I haven't seen the analogy to the subprime crisis (and it's extreme dangers) presented so bluntly.

@ChrisMayLA6

Sooo since I'm desperately trying to make an LLM export some methods via a shared library from a crate*, I'm basically making these companies loose more money! I'm the hero!**

* I'll post later about how Rust sucks at encapsulation
** Shit, it's a local LLM...

RE: https://kolektiva.social/@pivic/116935929646970100

Breach of Confidence — 17 July 2026

I've spent the week watching people argue about whether AI will replace security analysts whilst ignoring the fact that most organisations still can't tell you where their crown jewels are stored. Priorities remain wonderfully intact. Broadcom's Breakup Strategy Allstate tried to leave VMware. Broadcom immediately audited them, then sued them for leaving during the audit. It's the enterprise software equivalent of slashing your ex's tyres because they dared to move house.

https://javvadmalik.com/2026/07/17/breach-of-confidence-17-july-2026/

A generalized desire to understand how the objects and systems around you work, regardless of whether or not that knowledge can actually be applied

learning a few things about running SQLite https://jvns.ca/blog/2026/07/17/learning-about-running-sqlite/

@raptor @david_chisnall @davidgerard I think an often overlooked but important example is path traversal

I would like to read this book, but i'm clearly not going to pay $130 + $60 for shipping wtf https://templeos.net/product/templeos-book/ #templeos

@davidgerard

Prompt injection works because it’s one stream of data mixed with instructions. If you separate it with tags, the user can fake the tags.

If only someone had told people that in-band signalling is a bad idea before LLMs came along.

SQLite Is All You Need

https://www.dbpro.app/blog/sqlite-is-all-you-need

#sqlite

The Free Software movement never escaped from its origins: the early ‘80s MIT AI Lab. Two things were true in this environment:

• Back when most computers had tens of KiBs of RAM and 1 MiB was a huge amount, programs were simple. Very few programs were so complex that one person could not completely understand them.
• The AI Lab was full of some of the most talented programmers in the world.

This meant that the only obstacles for these people being able to fix bugs and add features to any program were access to the source code and the legal rights to modify it. Once you have those, any program was understandable by that group and they could modify it however they wished.

For the next 40 years, the FSF focused on these two things. The world around them changed. These two prerequisites were never enough for most people (what do 90% of computer users do if you give them even a modest 10,000 line C codebase and tell them they can change it however they like?) and now they aren’t enough even for competent programmers.

When Linus says ‘fork it’ to folks who don’t want LLM-extruded code in their kernel, he knows full well that it is almost impossible to fork a 40 MLoC C (and Rust now) codebase that averages more than one CVE per day and have something useful.

The Free Software movement is struggling now because it obsessed over licenses, which was never a path that would succeed, and ignored the hard problems:

• How do you design environments that enable end users to modify their software?
• How do you engineer software so that it is cheap and easy for a random user to maintain a fork that meets their specific needs?
• How do you foster communities where people want to share improvements, so forks don’t proliferate even when it’s easy?
• How do you create an environment where everyone sees the benefits of user-modifiable code to such a degree that trying to sell anything that doesn’t come with these rights is commercially impossible?

Instead of tackling any of these problems, they created more complex and restrictive GPL variants. And well-paid lawyers found loopholes in them that allowed corporations to keep doing what they wanted (and even pick licenses like AGPLv3 to control ecosystems, because they give the copyright owners so many more rights than everyone else that it’s hard for anyone else to compete). They said ‘don’t worry about the complexity of the licenses, you only need to understand the legal details if you’re creating and distributing derived works’ while completely forgetting that making it possible for anyone to create and distribute modified versions of the programs was the entire point of the Free Software movement.

EDIT: Lots of people are reading this as if it’s about the kernel. I would say that the kernel is the least important part of a system for this. The layers on top, especially anything that directly interfaces with the user or controls their data, are far more important to build around these principles.

RE: https://gamedev.lgbt/@lurnoise/116471839269805545

Hihi, a reminder that I'm available for work <3