The Gardener's laboratory.

A new page of my comic Ekphrasis, which you can read for free at https://ekphrasiscomic.neocities.org/

[RSS] Working on VirtIO

https://www.linaro.org/blog/working-on-virtio/

[RSS] BMCs under Qemu repo

https://trouble.org/bmcs-under-qemu-repo/

[RSS] Scaling Memory Safety: AI-Assisted Rewrites of C/C++ Dependencies to Rust

https://bughunters.google.com/blog/scaling-memory-safety

The legendary Cliff Stoll gave a delightful talk at DEFCON on Stalking The Wily Hacker (40 Years Later) at DEFCON. It's now online. If you've never seen Cliff, a Klein Bottle, or an overhead projector before, rush over to the youtubes and fix that right now: https://www.youtube.com/watch?v=656058JxTM0

Released the 1st sample (https://pub.expmon.com/analysis/328592/, 594404aac2354fc0185f8de346c06382e4c203ec64673a41a0eae0ed7e37c113) here (password: "expmon"):

https://drive.google.com/file/d/140JTizPrejK28bP3kt-iPdS5bRIy5hLr/view?usp=sharing

As shared previously, the crash still affects the latest Adobe Reader, but probably just a null-pointer-dereference issue.
https://bird.makeup/users/haifeili/statuses/2090513692895154536

just got laid off this morning. so if anyone knows of a position for an experienced researcher please let me know. 🖤

flock ceo calls for compromise

you heard em, hackers

Chaining CVE-2026-55040 and CVE-2026-63520 for full auth bypass-to-RCE in Microsoft SharePoint: https://www.vulncheck.com/blog/cve-2026-63520-sharepoint-unsafe-type-rce

@foone That's enterprise security 101!

it's the last week of my summer sale -- get 50% a copy of "building git" using code BGAUG2026 at https://shop.jcoglan.com/building-git/

LAST WEEK to submit — #OffensiveCon26 Tokyo CFP closes soon.

We want real, original work: cutting-edge security research, novel exploit techniques, AI and deep technical investigations that actually move the field forward.

Can somebody give me a definition of metamorphism for something that aren't rocks? Specifically in binary code generation, how do you define metamorphism?
#metamorphic #metamorphism

Uh nice Keycloak critical 🔥 how did i miss that one x3

https://github.com/keycloak/keycloak/issues/51833

I should not have to use an LLM to figure out a menu hierarchy.

I should not use an LLM to figure out how to undo the result of a hotkey.

LLMs (and search engines) should not be excuses for shitty #UI.

So sparc64 is officially a base-clang architecture now. The first bulk as such is just under 2 hours in.

If you ask "base-clang? What?" - OpenBSD has two types of architectures. Those where cc is the old gcc, and those where cc is clang. After a lot of work by kirill@, sparc64 has switched to using clang by default.

We are pleased to release tmp.0ut 5 Volume!

Get your viruses, rootkits, strange ELFs, weird machines, tiny files, cool art, and phresh beats here!!

https://tmpout.sh/5/

illustration, creative computing, magazine (1983) https://archive.org/details/creativecomputing-1983-08/page/n141/mode/2up

Hister v0.18.0 is out!

- New search suggestion UI with history completions, fields, facets, and sorting
- Import PDF, DOCX, Markdown, Org mode, and text files
- New Twitter, Bluesky, Reddit, and Discourse extractors
- Responsive terminal result details
- Persistent sessions and safer MCP results

https://github.com/asciimoo/hister/releases/tag/v0.18.0

#Hister #SelfHosted #OpenSource #freesoftware #search

“Before you become too entranced with gorgeous gadgets, remember that the goal is not to have more information, but to have more understanding.”

— Arthur C. Clarke