What is OBJECT_ATTRIBUTES and how it's used?
The Windows API hides it, but every native create or open call needs it.

Full write-up: https://trainsec.net/library/windows-internals/object-attributes-explained-how-the-native-api-opens-kernel-objects/

I started with the “complicated” piece in 2021 or 2022. I finished the hand embroidery but it didn’t feel done, so I stashed it for years. I recently learned to do needle tatting and thought it would be exactly what this piece needed!

That was true enough to get me to also make the “simple” piece, which was tedious because I couldn’t leave any errors at all in it. I had to frog whole lines three times.

RIP Tony Hoare, whose wisdom is needed more every day.

#fiberarts #embroidery #crossStitch

New vulnerability report from Talos:

Foxit Reader Array resetForm Use-After-Free Vulnerability

https://talosintelligence.com/vulnerability_reports/TALOS-2026-2446

CVE-2026-91799,CVE-2026-91799

Happy announcement: My colleague and me will present a talk at hardwear.io NL 2026, "Vulnerabilities That Get Under Your Skin: Targeting the World’s Best-Selling Infusion Pumps". 100% human-brain VR 😛

Draw a fish and watch it swim in a tank with everyone else who's drawing them too 🐠🐟🐡

Silly, but also lovely

https://drawafish.com/

If I had a cent for every occasion I had to debug `if let Some(foo)=` moving `foo`, I had 2 cents...

#Rust

@christopherkunz I only ever encountered TACACS at the university, and I've seen shit o.O

TIL a recent? Zed update shows you the JSON path to the item you have the cursor at.

poll: in Git, do you ever use any of the references `MERGE_HEAD`, `REBASE_HEAD`, `CHERRY_PICK_HEAD`, `ORIG_HEAD`, `FETCH_HEAD`, or `REVERT_HEAD` etc? (and if so, what do you use them for?)

@ulldma that, or something from asciiartfarts.com

SharePoint CVE-2026-65660: From Anonymous Access to Pre-Auth RCE via EditingPageParser Type-Check Bypass https://blog.viettelcybersecurity.com/sharepoint_cve-2026-65660/

@ancientjames Michael Knight used this during his FLAG debriefings

@redsad
Reminds me to this by @catsalad

#kr2026 @gregkh on LLMs.

The main point is: DON'T PANIC:!

... At the end 10 bugs fixed, 1hour kernel development...

@ulldma or you could pipe fortune or cowsay? :)

[RSS] EvilVM: Forth shellcode (2019)

https://web.archive.org/web/20250418124519/http://evilvm.ninja/

[RSS] ATT&CKing TACACS+ to Pwn Your Network via a Pre-Auth RCE

https://www.elttam.com/blog/att-cking-tacacs-to-pwn-your-network-via-a-pre-auth-rce

periodic reminder that Wizard Zines has an educational use policy if you want to use them in your university courses! https://wizardzines.com/education/

My panic!() messages start to degrade to the quality of my commit messages

@dymaxion @kaoudis You are right, and now I think here lies the solution: with pentests you want priorities based on how an external party sees your system. Does this make sense?

(having to think about these things shows how much time passed since I started doing pentesting...)