fun fact: the landing zone on a hard disk platter has a special surface texture that reduces stiction. the rest of the surface is so smooth the head would get stuck if it landed on it.

The V8 Heap Sandbox by Samuel Gross

https://www.youtube.com/watch?v=5otAw81AHQ0

Finally managed to watch this (h/t @swapgs for the reminder), some things that struck me:

• Browsers are OS’s and now they demand CPU features for security
• We need security boundaries that are testable - so happy to see this concept implemented at such a fundamental component!

Also, make sure to watch the Q&A part :D

#OffensiveCon24

Goodbye Lynn.

As of today, Firefox Nightly ships with "HTTPS First". So, all new tabs, all links will try HTTPS🔒 regardless of the written URL scheme. When HTTPS fails, Firefox will fall back to using http.

This is thanks to the tireless work of our intern @mjurgens 👏👏👏.

[oss-security] Microsoft leak of PlayReady developer / Warbird libs

"On Jun 11, 2024 Microsoft engineer posted on a public forum information about a crash [...] The post had an attachment - a 771MB file (4GB unpacked), which leaked
internal code (260+ files) pertaining to Microsoft PlayReady" 🍿

https://seclists.org/fulldisclosure/2024/Jun/7

Random objects: Intel Edison, or a look at the misadventures of x86 in the IoT space - https://lcamtuf.substack.com/p/random-objects-intel-edison

Me: I have this genius idea to play with memory!
Alignment: Not on my watch!

https://www.youtube.com/watch?v=obHUTehMUMU

If you are still doing this to your customers, you're not understanding what has happened in the world of technology since 2004 and you are part of the problem.

[RSS] Uncovering ChatGPT Usage in Academic Papers Through Excess Vocabulary

https://hackaday.com/2024/06/22/uncovering-chatgpt-usage-in-academic-papers-through-excess-vocabulary/

"massive spikes in excess vocabulary that coincide with the public availability of ChatGPT and similar LLM-based tools" - Also see my previous suggestion: https://infosec.place/objects/a320c6c9-b6b4-4bf8-b685-0fd83b8a27e7

[RSS] Your NVMe Had Been Syz’ed: Fuzzing NVMe-oF/TCP Driver for Linux with Syzkaller (2024.04.25)

https://www.cyberark.com/resources/threat-research-blog/your-nvme-had-been-syzed-fuzzing-nvme-of-tcp-driver-for-linux-with-syzkaller

Urvile, of Legion of Doom, discusses dumpster diving at the Bellsouth phone company on NBC Dateline in 1992.
#hacker #hacking #history

The wonderful world of #OpenSource and #Mastodon! https://tech.lgbt/@nina_kali_nina/112659983582469484 where Nina asks a question, I answer with a partial solution based on a little project by @vadim which is missing a specific feature. Vadim sits down, codes that missing feature, commits it, I pull his updates, build a new container and now we all have an even better way to turn Mastodon threads into copy/pasteable #Markdown.

https://mtr.wildeboer.net

That all happened in less than 5 hours!

I have rebased the #illumos / #solaris port of #Tailscale onto 1.68.1

https://github.com/nshalman/tailscale/releases/tag/v1.68.1-sunos

And here's my occasional Fedi outreach about my dream retrocomputer - does anyone have a Sun Ultra 45 they are willing to part with? I'm just a sad, pathetic person living in Arctic Sweden who has been trying for more than two decades (!!) to get his hands on one.

Boosts are definitely love.

#retrocomputing #unix #sun #solaris

Frankly, I'm appalled by the prospect of LLMs taking offensive security research jobs from honest, hard-working fuzzers

I'm personally still not a fan of vlogs, but Laurie Wired is another creator I wish was around when I went to school:

https://www.youtube.com/watch?v=vc79sJ9VOqk

✍️ When Samsung Meets Mediatek - The story of a small bug chain by @max_r_b @pwissenlit Raphaël Neveu

https://www.sstic.org/media/SSTIC2024/SSTIC-actes/when_vendor1_meets_vendor2_the_story_of_a_small_bu/SSTIC2024-Slides-when_vendor1_meets_vendor2_the_story_of_a_small_bug_chain-rossi-bellom_neveu.pdf

so with the recent news i’ll ask again

does anybody have a uefi firmware image that includes kaspersky antivirus for uefi?

“For this you keep a lab notebook. Everything gets written down, formally, so that you know at all times where you are, where you've been, where you're going and where you want to get. In scientific work and electronics technology this is necessary because otherwise the problems get so complex you get lost in them and confused and forget what you know and what you don't know and have to give up.”

- Robert Pirsig, Zen and the Art of Motorcycle Maintenance

#engineering #space