[RSS] Binary Ninja 6.0 (Krypton)

https://binary.ninja/2026/09/03/binary-ninja-6.0-krypton.html

TIL #MermaidJS supports packet diagrams since v11.0.0!

https://mermaid.ai/open-source/syntax/packet.html

Can't wait to try this!

Interesting Git repos of the week:

Bugs:

* https://github.com/MSNightmare/FalconFlank - everyone's favourite new source of 0day pops CrowdStrike Falcon
* https://github.com/MSNightmare/HardBreacher - everyone's favourite new source of 0day pops Kaspersky AV

Hard hacks:

* https://github.com/salmg/SIMtrace2-T1-Research - research into SIM cards
* https://github.com/i12bp8/TagTinker - messing with IR on the Flipper Zero
* https://github.com/nickdaria/wyze-bulb-color-pwned - and Nick opened the firmware and set "let there be light..."
* https://github.com/jprx/darwin-vm - the Apple never falls far from the tree

Hardening:

* https://github.com/a13xp0p0v/linux-kernel-defence-map - mapping the Linux kernel attack surface
* https://github.com/ryancdotorg/libclaymore - @ryanc defuses dd

Data:

* https://github.com/going-doer/Paper2Code - generate PoC code from papers 🤖
* https://github.com/adulau/ptrclassify - what's in a name asks @adulau

#security, #research, #code

make bad art

@ppb1701 @AAKL

- How drunk did you get last night?
- Oh, they just had to alert the Gripens...

@ppb1701 @AAKL small price for an epic story (if you live)!

What happens if a model is repeatedly asked to make a small, localized tweak to an image. In case you were wondering. You can thank me later.

Yes, we can.

PC Gamer: Go grandmaster becomes first human to win series against advanced AI engine in 3-hour match https://www.pcgamer.com/software/ai/go-grandmaster-becomes-first-human-to-win-series-against-advanced-ai-engine-in-3-hour-match/

@AAKL Still nothing compared to the drunk guy who recently stole a Cessna and flew straight into the no-flight zone of the nearby nuclear reactor so they had to alert fighter jets

https://migflug.com/afterburner/hungary-gripen-scramble-stolen-cessna-paks-2026/

@AAKL no shit :D

@predrag Is `min-publish-age` released already? How do I configure it?

@AAKL he did it for the first class seat

@ai6yr I'm surprised that proper disposal of typewriter ribbons isn't mentioned on these security poster I got via #foia from the FBI.

Oh my:

https://cert.pl/en/posts/2026/09/vulnerabilities-in-mikrotik-routeros-actively-exploited/

#routeros, #threatintel

The fedi isn't like email.

The fedi is like if you triple booked a BDSM meet up, a FSF convention, and a communist workers AGM all in the same German arena.

@osxreverser
teh fuck 🫣

"CVE-2026-67276 - SSH authentication bypass (CVSS: 9.2)
RouterOS did not properly verify public keys used for SSH authentication - in particular, it did not compare the entire RSA public key assigned to a user. An attacker who knew the username and the public modulus of the user's key could craft a different key and log in via SSH without possessing the corresponding private key. The privileges obtained were equivalent to those of the targeted account."

\o/ #klutshnik server now also builds with #zig v0.16 \o/

https://rad.ctrlc.hu/nodes/rad.ctrlc.hu/rad:zogkw4qiTrH7rKVa89BrKo8z5miA/commits/699e50ac9301b94b4854438f9021ef73160709f9

was quite easy after updating zphinx* before.

https://klutshnik.info - unlike the common tools like pgp and age - is an online threshold data-at-rest crypto system that provides very cheap and efficient key-updates and thus forward secrecy and post-compromise security.

*zphinx is an online threshold password manager far ahead of the competition in terms of security guarantees: https://sphinx.pm

@elizang 404 :(

The opposite of mass-destroying books to feed AI is this 1-minute video 📽️ of Charlotte Wainwright restoring and saving old/ancient books ...

(Definitely worth a watch)

https://www.wainwrightbookbinding.com/

#bookstodon #books

"The first step of any meaningful pursuit is to severely underestimate its difficulty." - Sara Hooker