this is an absolutely fantastic license and i will certainly use it for some of my software https://github.com/meithecatte/bashfuck/blob/master/LICENSE

Part 2 of our new series on identifying and exploiting router vulnerabilities, including practical examples from real-world cases is now out:
https://medium.com/@odedvk/identify-and-exploit-vulnerabilities-in-routers-an-introductory-guide-technical-case-studies-d0f1a24d35ef

On C (and not only C) locales

https://github.com/mpv-player/mpv/commit/1e70e82baa9193f6f027338b0fab0f5078971fbe

#ragecommit

I do realize I'm screaming into a void, but writing this email was cathartic.

Top articles from this week: White hat hacker shines spotlight on vulnerability of solar panels installed in Europe http://dlvr.it/TBvXRM?utm_source=dlvr.it&utm_medium=mastodon

CVE-2024-38063 (the Windows TCP/IP vuln) patch diff by @clearbluejar

https://gist.github.com/clearbluejar/d13fba26cab3a7ff2a995558d62cdd80?s=09

MIT gets rid of their Elsevier contracts:

“For MIT to continue to pay millions of dollars to corporations that lock up the scholarship that comes out of our own campus was just inconsistent with MIT’s history of supporting open education and research,” said Chris Bourg, Director of Libraries at MIT.

https://sparcopen.org/our-work/big-deal-knowledge-base/unbundling-profiles/mit-libraries/

@fafo presents: Gardena zu Rasterelektronmikroskop Adapter

Motherfucker!

#Saturday #IFoughtTheNutAndIWon

"Ukrainian hackers block work of Russian nuclear weapons manufacturer"

Reeks propaganda but here you go:
https://www.ukrinform.net/rubric-society/3896123-ukrainian-hackers-block-work-of-russian-nuclear-weapons-manufacturer.html

@netblocks confirms outage:

https://mastodon.social/@netblocks/112977887336541171

Outlook Unleashing RCE Chaos

https://media.defcon.org/DEF%20CON%2032/DEF%20CON%2032%20presentations/DEF%20CON%2032%20-%20Michael%20Gorelik%20Arnold%20Osipov%20-%20Outlook%20Unleashing%20RCE%20Chaos%20CVE-2024-30103%20%26%20CVE-2024-38021.pdf

#BHUSA24 #BHUSA2024

OpenAI: Disrupting a covert Iranian influence operation
OpenAI announced Friday (16 August 2024) that they identified and took down a cluster of ChatGPT accounts that were generating content for a covert Iranian influence operation identified as Storm-2035. The operation used ChatGPT to generate content focused on a number of topics—including commentary on candidates on both sides in the U.S. presidential election – which it then shared via social media accounts and websites.

The operation generated content about several topics: mainly, the conflict in Gaza, Israel’s presence at the Olympic Games, and the U.S. presidential election—and to a lesser extent politics in Venezuela, the rights of Latinx communities in the U.S. (both in Spanish and English), and Scottish independence. They interspersed their political content with comments about fashion and beauty, possibly to appear more authentic or in an attempt to build a following.

IOC provided.

See related The Hacker News reporting: OpenAI Blocks Iranian Influence Operation Using ChatGPT for U.S. Election Propaganda

#threatintel #Iran #influenceoperations #openai #chatgpt #disinformation #propaganda #IOC

I just released pdbconv, a program to convert PDB files between the plain old MSF format and the new MSFZ format that MS hasn't officially released yet.

It's available on github: https://github.com/ynwarcs/pdbconv

I also made a blog post describing the new format and what lead me to write the converter: https://ynwarcs.github.io/pdbconv-pdb-compression

(Sorry for the duplicate posts, it seems everyone can see them except me so I can't delete them...)

"I think scientific education might do more to ease what is a very big transition: from learning what other people once discovered to making your own discoveries."

This is why love the work of 3Blue1Brown[1] and this (Hungarian physics) book so much: they rarely approach a problem from the known solution, but explain how the solution was discovered when there were no existing formulas/algorithms/theories to hold on to.

[1] https://www.youtube.com/@3blue1brown/about
[2] https://www.antikvarium.hu/konyv/dr-karacsonyi-rezso-egy-a-valosag-s-ezer-a-ruhaja-i-172577-0

#science #education

[RSS] Ghost in the PPL Part 2: From BYOVDLL to Arbitrary Code Execution in LSASS

https://itm4n.github.io/ghost-in-the-ppl-part-2/

The importance of stupidity in scientific research

(from the previous one)

https://journals.biologists.com/jcs/article/121/11/1771/30038/The-importance-of-stupidity-in-scientific-research

"Guess what; many of the problems you will actually face, both professionally and personally, cannot be solved using brilliance. They just take effort and stamina."

"Being 'smart' is not actually about knowing all the answers. One of the biggest parts is being aware of the limits of your knowledge and not running around like a headless chicken when you don’t know what to do."

https://fgiesen.wordpress.com/2016/02/05/smart/

I dockerized Binary Ninja so I can use it on my older OS's. Features:

- Shared X11 socket with the host so you can use the GUI (runs on Linux)
- Bind mounts the Binary Ninja directory to the container, so you can share your local installation
- Sets $HOME to the mounted Binary Ninja directory, so license information and plugins are stored in one location and persist across runs
- Executes Binary Ninja GUI from xterm so you can restart the GUI to apply updates

https://github.com/v-p-b/binaryninja-docker

(On a related note, it would be *so* nice if @binaryninja documented their dependencies so I wouldn't need to figure them out one-by-one based on Qt debug prints...)

1 #million views! Today is a momentous day for the #WHY2025 #MCH2022 #SHA2017 Youtube account.

The video of a talk called "Non-Euclidean Doom: what happens to a game when pi is not 3.14159…" reached 1 million views on Youtube a few minutes ago.

The video is of course also on media.ccc.de and has reached almost a hundred thousand views there.

The recommended way to watch the video is https://media.ccc.de/v/mch2022-236-non-euclidean-doom-what-happens-to-a-game-when-pi-is-not-3-14159-, but if you want proof of the milestone, check out https://youtu.be/_ZSFRWJCUY4