The ICECUBE experiment is so sci-fi, it deserved the Nobel Prize in Physics.

Francis Halzen was all, Hey, let's drill 2500-meter holes in the ice at the literal South Pole and put neutrino detectors down there.

The experiment fills an entire cubic kilometer. That deep ice is so pure that there's nothing for the neutrinos to hit except water molecules, and such collisions produce other particles that then move faster than light speed in ice so produce a flash of Cherenkov radiation, which is what the detectors see. Seeing high-energy neutrinos for the first time is helping with a bunch of outstanding astrophysics questions.

Funded by US tax dollars...yeah, we used to build cool stuff.

(Illustration from the Nobel Prize website.)

https://www.nobelprize.org/prizes/physics/2026/press-release/

#physics #astrophysics #science

Why nothing looks cool anymore?

https://www.youtube.com/watch?v=HgjXjPP_p3s

I've been following this guy for a while now, but this turned out exceptionally good and important! I won't spoil the conclusion, you should watch it.

(And the next one will be about Flock cameras!)

Happy CSAM for those who celebrate!

Disclosing Branch Target Reuse (BTR): speculative execute-after-free in JIT engines. Code gets freed, but branch predictions survive. BTR exploits this mismatch to mount practical Spectre-v2 attacks (cBPF /etc/shadow exploit demo below). Details at: https://vusec.net/projects/btr

You Won’t Hear About These, Even In Myths (Atlassian Jira, Confluence (and more) Pre-Auth Arbitrary File Read CVE-2026-21589) - watchTowr Labs https://labs.watchtowr.com/you-wont-hear-about-these-even-in-myths-atlassian-jira-confluence-and-more-pre-auth-arbitrary-file-read-cve-2026-21589/

A good friend of mine just posted a YouTube video breaking down all the discrepancies with the pod race from Star Wars Episode I. It's a fantastic deep dive with cited research, exploring multiple books and interviews on the topic. He even includes a custom made Blender recreation, all done without so-called "AI".

https://www.youtube.com/watch?v=IZ2nD680BA8

This is his first video on the channel, and if you're a fan of human made overthinking, you might want to subscribe.

Humble suggestion: add WinDbg's scripting language to the EsoLang wiki

note to ui designers. when i'm reading a long piece of text. i select text while i read it. I select text while i read it!. i select the text using my mouse. while i read the text i often select the text. when i select the text i just want to select the text. i don't want to perform actions on the text. i don't want a popup menu to appear when i select the text. i don't want to accidentally click on a Share link. i want to select text while i read it

Flydubai listed by Everest.

Total files: 16,517.

Total stored size: 4.36 GB.

Operational documents, software and content resources: 6,424 files.

AppleDouble technical metadata: 10,093 files; 39.43 MB.

#ransomware

In other news, ICANN announces the list of new gTLD applications tomorrow at 18:00 UTC. (Many applicants have announced themselves already.)

https://domainincite.com/31938-reveal-day-is-tomorrow-but-low-key

There's .furry, .meow and 1614 less interesting ones.

#Windows 11 has this nifty "desktop" icon on the taskbar. It's impossible to figure out what the icon is for unless you click it but I digress.

When you click the thing, the minified versions of the windows on the current desktop are arranged on top of the desktop, but the icons etc. underneath are still clearly visible.

Guess what happens when you click on an icon visible on the desktop, not one of the little windows? That's right, the little window closest to the click gets the focus!

I remember, when the intuitive #UI of Windows 3.1 where you could click things to do stuff with them (and not their closest neighbor) was all the rage...

Nobel Prize in Physics Is Awarded to Francis Halzen

https://www.nytimes.com/2026/10/06/science/nobel-prize-physics.html

#Science #NobelPrize #Physics

Hey. Hey.

Heat. [music]

[applause]

This week in #curl we get to experience not one, but two compiler bugs. All research by @vsz.

Two arm64-specific compiler optimization bugs, in gcc-15/16 and Rust respectively:

https://github.com/curl/curl/issues/23237

[RSS] Technical Analysis of WhatsApp Zero-Click Exploit

https://www.courtlistener.com/docket/16395340/741/45/whatsapp-inc-v-nso-group-technologies-limited/

From court documents

R2-6.2.4 is out (same for r2ghidra, iaito and r2frida). Here’s the long changelog, i’ll be posting edible release notes during the week. Meanwhile update and keep hacking! #reverseengineering
https://github.com/radareorg/radare2/releases/tag/6.2.4

Back in the day when I found an string during #reverseengineering that looked like some trademark, I could use a search engine and find the statically linked library, some API docs, etc.

Now I either get results from some obscure "AI" company SEO spamming or a random character from some even more obscure manga with unreasonably detailed fan wiki pages.

Reminder: We're less than an hour away from the drawing for #Pwn2Own Ireland 2026. Watch it on YouTube at https://youtube.com/live/QpP2xDXGa8M?feature=share

Interesting Git repos of the week:

Detection:

* https://github.com/fevar54/CVE-2026-76461-Detection-Kit- - hunting for Cisco's ESA oopsicle
* https://github.com/msuiche/hotcell - you can't even trust a document written by Apple these days

Bugs:

* https://github.com/pwardle/not-a-mused - stealing from the Muse

Exploitation:

* https://github.com/crypt0p3g/dpapi-toolkit - I got the key, I got your secrets...
* https://github.com/Mafifrizi/tanuki - @kraiiandrey operationalises Linux AD attacks
* https://github.com/ReversecLabs/virtual.attack - ATT&CK the hypervisor

Hard hacks:

* https://github.com/abrignoni/VLEAPP - would you spot @abrignoni tracking your car? 🤖

Hardening:

* https://github.com/douglasmun/macos-sudo-touchid - just touching an Apple is enough... 🤖

Data:

* https://codeberg.org/liberty/slopcheck - check your code for 🤖 interference with @liberty's slop check
* https://github.com/blader/humanizer - when the 🤖 is so bad, it needs to hide

Nerd:

* https://github.com/fglock/PerlOnJava - run Perl on JVM, thanks to @fglock 🤖
* https://github.com/pdjstone/riscos-conv - @pdjstone speaks RISC OS...
* https://github.com/pdjstone/archimedes-live - ...and runs an Archimedes in his web browser

#security, #research, #code

Here have some raveioli
As a treat.

Good night fedi.