Lasers. Microscopes. $250K. One secured chip.
Ledger Donjon just showed how they cracked debug access on RP2350-A4, a break worthy of Raspberry Pi's own Hacking Challenge.
Respin or no respin? Raspberry Pi says no. Read why: https://www.raspberrypi.com/news/everything-is-better-with-lasers/

I love a cartoon that sums up a line of argument I have often made as a political economist, so here's a great example from the (recently deceased) P.C.Vey - whose work appeared in the New Yorker & elsewhere.

#economics #regulation #politics

h/t Loren Fox/LinkedIn

Windows Defender Update DoS Vulnerability https://github.com/MSNightmare/BigDiskBuster

My son is reading Lord of the Rings for the first time and he just stuck his head out the door:

"Who the fuck is Tom Bombadil??"

[RSS] What Go Taught Us About Java Garbage Collection

https://debugagent.com/what-go-taught-us-about-java-garbage-collection

At a high level, this was the full exploit chain.

1. HEIC/HEIF upload
2. ImageMagick decoding
3. Heap overflow on libheif
4. RCE on https://community.openai.com
5. Critical OpenAI SSO flaw
6. ChatGPT/Codex takeover
7. Connected GitHub access
8. Internal repo PR

This meme has so much telling about the current status of AI racing as well as how everyone seems to have forgotten the basic IT security.
https://bird.makeup/users/0xtib3rius/statuses/2101147121063751903

[RSS] Quarkdown: Turing-complete Markdown typesetting system

https://github.com/iamgio/quarkdown

~~There is a demand for this. Shut up.~~

Edit: actually, this seems really useful, although I don't know why Turing-completeness was chosen as the selling point :)

LMAO, can we just issue one giant CVE for the entire Linux kernel

PoC for CUPS LPE on Linux https://github.com/v12-security/pocs/tree/main/cups/cups2root

@buherator i remember reading during the second iraq war, operations led by the british had far fewer friendly fire casualties because they had not just a system for putting a case for a target together, but also researchers trying to rule out the validity of a target (that's a friendly, that's a school, etc)

the americans didn't have that

...then they automated it

and i guess, *now* the stakes are high enough to give them a target offramp, huh

@frobozz My prediction is that this will be covered by some bullshit about "adjustment" then a few million will be spent on additional guArDrAILs then the next hallucination will cause actual damage. So yeah, not a bad bet.

The future will be much more embarassing for humanity than Skynet

US military had close call after using AI for false intelligence report

https://edition.cnn.com/2026/09/18/politics/us-military-ai-false-intelligence-china-ship

They almost attacked a Chinese ship believing it was transporting nuclear weapons component (/via OSINTTechnical@X)

Sweden is also choosing @forgejo for their digitally sovereign government codeplatform, just like the Dutch code.overheid.nl 🥳🥳

https://github.com/diggsweden/ena-kodsamverkansplattform-poc

This is a nice step towards less dependence on US big tech, aka Github.

In my last days at the @BZKopensource I hope to set up a working group with other EU governments, to work towards a federated network of codeplatforms 🇪🇺

#codeplatform #forgejo #ospo #digitalsovereignty #opensource #foss #govtech

Buyers of pervert glasses join the war on pervert glasses: https://www.latimes.com/business/story/2026-09-18/meta-glasses-captured-shared-intimate-images-without-users-consent-lawsuit-claims

The quickest teardown ever. Zero screws removed. 👀 Your first look inside the iPhone 18 Pro thanks to Lumafield!

just in case you don't have it saved, here's the most important reaction meme for navigating the fediverse

Ramdom thought / further evidence that this universe is against me:

In the cycling world, clipless pedals are pedals that you clip into.

I don't like this.

@freddy I was hoping this is the Hungarian band Linx, still perfect for Fri thx:) Do you know Wizo's split with Auróra?

https://www.youtube.com/watch?v=_0xcwW3CqIQ