first we got "prompt injection" aka "deciding to forget two decades of knowledge about secure composition of code and inputs, langsec, etc" and now we have "deciding to forget everything about capability-based security and writing a call of duty script about it"

if your "containment" is "telling the robot to be a good boy" you're not a serious person

"The intrusion started where AI platforms are uniquely exposed: the data-processing pipeline"

Sure, before AI no system ever had a "data-processing pipeline". Whatever that means.

rare lore: back in 2018 I came across a 500-page technical deep dive guidebook on SimCity 2000. In a process that took several years because they had so much backlog of manuals, magazines, etc, I sent it to Gaming Alexandria and they made a proper professional scan of it and uploaded it to archive.org. You can read it right now!

When I say technical... I mean there's a section on how to hex edit your save files.

https://archive.org/details/sim-city-2000-power-politics-and-planning-revised-edition-strategy-guide/

#gaming #retrogaming #simcity

@schrotthaufen @jcoglan And coding agents gaslight the user by injecting "system reminders" prefixes that are invisible to the user but the LLM sees them as user messages and regularly refer back to those as user requirements.

I feel it's time to reshare this excellent piece, as it explains some general problems that relate to my previous posts:

Can chatbots craft correct code?

https://blog.trailofbits.com/2025/12/19/can-chatbots-craft-correct-code/

somehow I only recently learned that LLMs need the whole conversation fed back to them on each prompt so their i/o cost scales as O(n^2), something that would be considered completely unacceptable in almost any other production network-accessible software

"DecBench is an experimental benchmark for comparing decompilers and modern LLMs on the task of recovering exact source code."

https://decbench.com/

#ReverseEngineering #decompiler

@castaway That's an Akkoma frontend issue (it should highlight the specific post in the replies and jump there, except it doesn't jump...). I replaced the link to point to my archived copy!

EXCLUSIVE: Pepsi Co. insiders say that the latest Pepsi formula is so delicious it escaped Pepsi flavor-containment facilities

@freddy I can 100% believe their model did *something*, but first and foremost the official report tells me that their frontiers models are so great they outright steer away from the original problem statement ("write an exploit") and burn a shit ton of tokens on something entirely different ("find an exploit on the Internet"). Second, OAI either didn't have the means to monitor what's going on or didn't care to intervene.

This OpenAI vs. HF story stinks to high heavens, I tell you this much...

#Pwn2Own Ireland returns for 2026! We've got lot's of targets and plan on lot's of good times on the Emerald Isle. We've got a new registration process, so please read the rules carefully to know what to expect. Check it out at https://www.zerodayinitiative.com/blog/2026/7/21/pwn2own-ireland-2026-new-targets-and-categories #P2OIreland

@root42 I think that's a UI issue with the frontend, the linked quote post shows up as a reply to the original with highlight, but the in-page anchor isn't triggered...

This is the gist:

"Turns out this was an unintentional trick question, because two games mixed up in my memory (30 years is a long time):

- I mainly remembered Ecstatica (thanks @BryanGreyson and your friend!)
- ...but giant worms (which weren't even green?) definitely came from Magic Carpet (thanks @g !)"

You guys are AWESOME! Thanks for all the help, I really didn't expect this much effort from the community!

Turns out this was an unintentional trick question, because two games mixed up in my memory (30 years is a long time):

- I mainly remembered Ecstatica (thanks @BryanGreyson and your friend!)
- ...but giant worms (which weren't even green?) definitely came from Magic Carpet (thanks @g !)

Now I'm off to figure out what little me was supposed to do in front of our first color CRT :)

#retrogaming

RE: https://infosec.place/objects/370500d6-2960-412c-b30c-d2cc19e59c67

Let's see if Fedi is smarter than LLMs:

When we got our first PC a friend installed a bunch of games (Win95).

One of these was a 3D adventure game (maybe 3rd person view?). It was a miracle it ran on that HW and was very low poly. I didn't know English at the time so I have no clue what the game was about.

I remember that could walk around in a village and NPCs occasionally talked to you. Then giant green worms appeared and that's when I usually died :D or the game just went on because the worms weren't very targeted/hostile?

I'd appreciate any guesses on this! I'm not a huge gamer but want to know what that game was about.

EDIT, SOLVED: https://infosex.exchange/std/post/?id=https%3A%2F%2Finfosec.place%2Fobjects%2Ffd8ecdde-e47d-4304-a749-b80b9db81c56

#retrogaming

Celebrate 10 years of Binary Ninja! For the first time ever, we’re offering a 35% discount! Join us for 10 full days of giveaways including licenses, merch, and more. Huge shoutout to everyone who has been with us since the beginning, and here’s to everything still to come. Join in on the celebration: https://binary.ninja/10years

[RSS] Dark Elevator: Windows Install Service Local Privilege Escalation (CVE-2026-50343)

https://blog.calif.io/p/dark-elevator-windows-install-service

[RSS] GitHub - NtProtectVirtualMemory/PE-Library: A modern C++ library for parsing and manipulating Windows Portable Executable (PE) files.

https://github.com/NtProtectVirtualMemory/PE-Library