OpenAI’s latest advertising

Just realized that today's youth fashion is basically copying the Hypa Hypa music video

https://www.youtube.com/watch?v=75Mw8r5gW8E

Oh damn I had not seen the details of the MicroTik RCE: the client can send a public RSA key with correct N and e = 1 and the server will use it.

Two primitives/protocol things that would have prevented it: if RSA was defined with a fixed e, and if SSH clients sent a key hash instead.

https://github.com/advisories/GHSA-j9wg-77fw-f22f

In recognition of bravery, patriotism and an unwavering love of freedom, we have decided to rename Microsoft Teams as Microsoft America.

Please update your SBOM, software directories and desktop icons; this change is immediate and permanent. Thank you for your attention to this matter.

🦅

vintage mobilek

#mobilek #unix_surrealism #iphone #apple #comic #fediart #mastoart

Reverse engineering an ASIC

https://kjartanvandriel.github.io/asic/

#Hardware #ReverseEngineering #ASIC

@jonny I think here you are underestimating human creativity when it comes to causing harm

Man this ethernet over powerline shit ain’t working 😭

RE: https://infosec.exchange/@decoderloop/117248341568750269

Slides for my #RustConf 2026 talk are now up! A recording will be posted some time after the conference as well, I'll post it when it's up.

@stf well played! Also, took me like 2 minutes to navigate away from this dark pattern orgy of Ali

I want a SMALLER phone.

Thank you for your attention to this matter!

@Viss they got popped again or is this an older story?

My latest article for ACM Queue about CHERIoT is live!

This describes the design decisions that we made in designing an aggressively privilege-separated OS with a single address space for embedded systems. It's part of a series of articles about designing single-address-space systems and aims to highlight which parts of CHERIoT are things that are a good idea everywhere and which are a good idea only for embedded systems.

EDIT: Looks as if they mangled the title, it should read 'usable' not 'able'.

EDIT2: And now they have fixed it.

#CHERIoT #CHERI #ACMQueue

New Project Zero issue:

PowerVR: PVRSRV_MEMALLOCFLAG_OS_LINUX_PREFER_CMA PMR allocations with a large page size causes page allocator corruption

https://project-zero.issues.chromium.org/issues/512492460

CVE-2026-45200

New Project Zero issue:

Windows: CrossDevice Dangling COM Registration Incomplete Fix EoP

https://project-zero.issues.chromium.org/issues/538151139

CVE-2026-66804

Who needs a foldable phone when you can just have a palm pilot

🍪 Tired of misleading cookie banners? The #EU Commission has finally proposed a solution: set your privacy preferences in the browser once, and never see another banner.

🥊 Unfortunately, the tracking industry is pushing back – and so far, they’ve been successful. Now we need YOUR help to #KillTheCookieBanner!

👉 To find out how, as well as read the joint open letter, visit the coalition website https://killthecookiebanner.eu

I’ve made a somewhat complete archive of my publications while at @TalosSecurity . With web archive links and copies where appropriate so it survives CMS changes.
https://blog.29b.net/talos_archives/

I don’t want a new phone. I want my perfectly good hardware to keep getting updates until it actually stops working. I want replaceable batteries that get recycled. If a company stops giving updates I want to be able to change the OS.

New vulnerability report from Talos:

Microsoft Windows Cloud Files Mini Filter Driver CldiStreamPrepareRequestForMoreProcessing Type Confusion vulnerability

https://talosintelligence.com/vulnerability_reports/TALOS-2026-2445

CVE-2026-80093,CVE-2026-80093,CVE-2026-80093