[RSS] File-write on Gitlab via YAML parser differential

https://gitlab-com.gitlab.io/gl-security/security-tech-notes/security-research-tech-notes/devfile/

Is there a browser on this planet that doesn't ask you 28 stupid questions before allowing you to actually browse?

[oss-security] CVE-2023-49606, CVE-2023-40533: memory safety vulnerabilities in tinyproxy <=1.11.1

"Talos claims to have contacted them in December 2023, but according to the developer there was no contact before the above advisories were released. The developer also disputes the veracity of CVE-2023-40533." - Weird, esp. considering @TalosSecurity has plenty of experience with vulnerability reporting...

https://www.openwall.com/lists/oss-security/2024/05/07/1

It was a pleasure to work with @RIOT_OS maintainers to contribute in making their RTOS more secure! https://infosec.exchange/@hnsec/112398919861504786

The way sentences containing the German character ß get longer when uppercased was specially designed to create memory problems in C programs doing string handling

[RSS] Dive Deeper into Game Reverse Engineering with Packet Ripper, a Specialist Packet Logger

https://packetripper.live/

finally made an "AI" category (https://www.web3isgoinggreat.com/?collection=ai) for @web3isgreat to capture all the disasters pertaining to AI-powered cryptocurrencies and cryptocurrency-powered AI

Is it just me of the reliability (as in "shit works as intended") of #BloodHoundAD fell into a gravity well?

I'm proud to announce the launch of the public beta for Clew, my independent web search engine! 🎉🎉🎉

Try Clew: https://clew.se
Add to your browser: https://clew.se/add/

Clew maintains an independent index and is aiming to be a copyleft (APGLv3), self-hostable, privacy-respecting, customizable search engine which prioritizes independent creators/bloggers/writers and penalizes sites with ads and trackers.

Many features are yet to come. If you'd like to support Clew's development and server costs, you can donate to its Liberapay team: https://liberapay.com/Clew/

Boosts are very welcome, as is feedback of any kind!

@kaoudis It's probably not a complete answer, a couple of notes though:
- Not everyone in tech is a native English speaker, and many languages don't distinguish between male/female subjects at all! "He" is just an easy word.
- Although I consciously try to represent males/females in texts I write, it's not always easy to determine if a certain scenario is positive/negative and how to associate roles. E.g.: is a typical phishing victim a "he" or a "she"?
- The recent call for gender-neutral phrasing (they/them) actually helped with this, but for a long time it just read weird (at least as a non-native speaker like myself).

Any sufficiently advanced systems thinking is indistinguishable from premature optimization

Posting this link again because it's just so wonderfully written:

https://blog.trailofbits.com/2024/05/02/the-life-and-times-of-an-abstract-syntax-tree/

#compiler #decompiler #ast #literature

#vim package management always brings me this: >< close to converting to #emacs...

[RSS] SourceSync - Dynamic pdb generation and synchronisation between decompiler and debugger

https://github.com/Air14/SourceSync

Medieval humor! 9 Astonishing Gargoyle Statues: https://streetartutopia.com/medieval-humor-9-astonishing-gargoyle-statues-a-blend-of-art-and-functionality-in-gothic-architecture/
-
Photo: At Abbey of Sainte Foy, Conques, France (c. 1107).

From a friend's discord

#infosec #starWars

Me: puts on some grindcore

ML-node#1: Grindcore is music!

ML-node#2: Many users who like music also like Ed Sheeran!

UI: Do you want to listen to some Ed Sheeran?

We are *so* far from the machine uprising...

Kinda crazy that artificial intelligence needs the entire output of a nuclear reactor but actual intelligence can run on Twix bars and cocaine, for example.

I'm extremely proud to announce that I'll present my #IBMi POWER-AS research results at @recon:

https://cfp.recon.cx/recon2024/talk/AT399C/

I'm about to release considerable amount of code and a writeup, so stay tuned! ;)