Posts
2492Following
575Followers
1286Heretek of Silent Signal
repeated
Electrospaces
Electrospaces@mastodon.social
NEW: The phones of the new NATO Secretary General Mark Rutte (including a hotline with the White House):
https://www.electrospaces.net/2024/12/the-phones-of-new-nato-secretary.html
1
2
0
repeated
Jason Scott
textfiles@mastodon.archive.orgThe Archive has definitely hit the phase of "it works unless it doesn't, and then it will suddenly work". This is where the urge to just throw open what's left just to drop bug reports or complaints is high, but you just need to keep tracking things down. This was a quarter century codebase! It's beyond amazing it got this far, this fast. But every time I go back to work at my interfaces, the team has made them run better and better.
0
2
1
repeated
Eric Wastl
ericwastl@hachyderm.ioThis was my tenth(!) year building 25 days of puzzles for #AdventOfCode. You can solve them all for free! Most people write code to solve them, but you can solve them however you like. I hope they help people become better programmers. đ
The first puzzle comes out in two hours: https://adventofcode.com/
6
4
0
repeated
melanie ensign (she/her)
Wednesday@defcon.socialThe 2024 Economist Word of the Year:
âkakistocracyâ - Government by the least qualified or most unprincipled citizens.
https://www.economist.com/culture/2024/11/29/the-economists-word-of-the-year-for-2024
0
4
0
repeated
cynicalsecurity 
cynicalsecurity@bsd.network
Show content
After my recent experience with a new laptop, imposed upon me by a client, I feel the need to describe what Iâd want from computing, both as a âpractitionerâ (âshamanâ? âfoolâ?) and as a user.
First and foremost I like to know where my data is, both physically and logically.
I would, therefore, appreciate having some form of storage server which does everything from storing files to my calendar and email. It would be redundant, etc. (i.e. a NAS of some form).
Secondly, weâd have IPv6 so that I could reach said server from everywhere without NAT, CGNAT, transparent carrier-to-carrier NAT (you donât want to know), etc.
Then, for those who have computing needs, we would have a co-system we would connect next to the NAS, automatically speaking some form of NFS (no, not SMB, not over my dead body) and which would be used automatically by the NAS when a request needed oomph (e.g. video editing on a stored video).
All of this would be topped with a beautiful âportable viewerâ which would have a laptop size / format and would do nothing other than connect over the network to your server and allow you to âdo things.â
A mobile phone would, similarly, tap into your server to do what it needs to do.
There would be minimal storage on these edge devices.
Wait, you say, this is âThe Cloudâ.
No, it is absolutely not because I want the data to be mine and nothing to be on the edge devices.
Wait, you say again, this is âPlan 9 meets VNC (in its original Olivetti Research Labs incarnation)â.
Yes, it is.
I still believe that one of the worst ever decisions to be taken was the PC back in 1981 followed by the obtusity of many in thinking that somehow PC âdemocratisedâ computing or could replace mainframes, minis and servers with its architecture.
Quoting âThe 6M Dollar Manâ: We can rebuild him; we have the technology.
We donât need to continue using the crap they peddle us, we need to sit down and say âOK, now letâs be grown ups and build what we need, not what others want to us to build.â (note: 0xide is a step in that direction)
2
2
1
repeated
Fooneđłïžââ§ïž
foone@digipres.clubI love programs with anti-debuger checks. By definition, the people you're "stopping" from debugging your program are the same ones who have the tools to delete your debugger check.
It's like specifically locking a door to keep lockpickers out
0
2
1
buherator
buheratorMy friends at Ravenfortech wrote an introductory #malwareanalysis post on the INC #Ransomware:
https://translate.kagi.com/https://scribe.rip/@ravenfortech/inc-ransomware-elemz%C3%A9s-a909b5aed114
This gang recently pwned the Hungarian company responsible for military procurement (VBĂ) and now selling the data for $1M.
Based on the analysis the malware is very simple. INC uses 2023 CitrixBleed (2023) and spear phishing for initial access:
https://www.sentinelone.com/anthology/inc-ransom/
This doesnât paint a picture of mature security at VBĂ to say the leastâŠ
1
3
5
repeated
bert hubert đșđŠđȘđș
bert_hubert@fosstodon.orgI've started a page listing for many fields (physics, computing, biology, history..) the most Totemic Books. The ones that are central to the field, the books you wished you had learned about earlier. The work no one in a field can do without. Please send me your suggestions so we can share the love more broadly! https://berthub.eu/articles/posts/totemic-books-for-many-fields/
18
5
0
repeated
buherator
buheratorhttps://jericho.blog/2024/11/28/dont-be-a-cve-dummy/
"So please, if you are writing documentation and need to use dummy CVE identifiers, please use one of the ones MITRE designated a decade ago"
1
3
8
repeated
Andrew Kelley
andrewrk@mastodon.socialIf you are planning to learn Zig via Advent of Code this year, I highly recommend the tips from @kristoff 's blog post:
0
2
0
repeated
stacksmashing
stacksmashing@infosec.exchangeCan someone send me the (untruncated) output of ioreg on an M4 MacBook/Mac Mini?
1
3
0
buherator
buheratorIt is just natural that in #Ghidra #Sleigh âThe [operand] identifier must appear in the [bit pattern section] as if it were a term in a sequence of constraints but without the operator and right-hand side of the constraint.â, see section 7.4.3:
https://scrapco.de/ghidra_docs/GhidraDocs/languages/html/sleigh_constructors.html
But it seems, you canât use the identifier in the display of the instruction if itâs part of a constraint.
Error: âwrong type (should be family) in pattern equationâ
Why is that?!
(Workaround: define an alias token for the same bits and use that in display)
0
0
0
repeated
Giorgio Maone đ«âđ§
ma1@todon.euI've just subscribed to MDN Plus, perhaps the most valuable resource for #WebDev, browser extensions & #developers in general, which I've used for free so many years. Stepped up to paid subscription as a small thanks to @mozilla , and also to unlock the offline premium feature 
https://developer.mozilla.org/en-US/
0
2
0
repeated
Hexacorn 
hexacorn@infosec.exchange
1 little known secret of ShellExec_RunDLL
https://www.hexacorn.com/blog/2024/11/30/1-little-known-secret-of-shellexec_rundll/
1
3
0