Holy shit.

The Russian gov send in an abuse request for the @Bellingcat to be removed from mstdn.social

I am not gonna comply, and have replied to Hetzner

No way I'm gonna let the evils of the gremlin dictate stuff on anything I host

UPDATE: Hetzner ignores their requests and we're in the clear: https://mstdn.social/@stux/113662573364116275

A few weeks ago I bought my first iPod. It's a Classic 5 / 5.5 that has seen better days over it's 19 year life
Features include a battery that will last up to 30 mins. A damaged screen with an interesting black blob in the middle and a 30GB spinning hard disc.
But it does work. And can be repairs and bought up to date.

A thread...

New #PEsieve
& #HollowsHunter (v0.4.0) are released: https://github.com/hasherezade/pe-sieve/releases & https://github.com/hasherezade/hollows_hunter/releases - A lot has changed in the new version, check it out!

There's magic in listening to people talk about things they've done for a very long time.

Microsoft just released a tool that lets you convert Office files to Markdown. Never thought I'd see the day.

Google also added Markdown export to Google Docs a few months ago.

https://github.com/microsoft/markitdown

Kinda curious why the EU isn't bringing the hammer down on Microsoft with its Windows 10 end of life bullcrap. You'd think they wouldn't like the idea of a bad MS policy creating tons of e-waste and security issues for Europeans for no reason and tell MS that no, actually, they'll continue rolling out Windows 10 security updates in the EU free of charge OR make it so "incompatible devices" are made compatible

Reminder: infosec.exchange is about to be rebooted and will be unavailable for about 10 minutes at the top of the hour.

OpenAI whistleblower found dead in San Francisco apartment: Suchir Balaji, 26, claimed the company broke copyright law. Balaji helped gather and organize the enormous amounts of internet data used to train the startup’s ChatGPT chatbot. Information he held was expected to play a key part in lawsuits against the OpenAI https://www.mercurynews.com/2024/12/13/openai-whistleblower-found-dead-in-san-francisco-apartment/

🟠 "Pwned", The Book, Is Now Available for Free
by @troyhunt
In PDF & EPUB formats.

#TroyHunt #Pwned #freeEbook

https://www.troyhunt.com/pwned-the-book-is-now-available-for-free/

"Science cannot solve the ultimate mystery of nature. And that is because, in the last analysis, we ourselves are part of nature and therefore part of the mystery that we are trying to solve."
Where is Science Going? The Universe in the light of modern physics.

#OTD in 1900.

Max Planck presents a theoretical derivation of his black-body radiation law (quantum theory) at the Physic Society in Berlin.

https://en.wikipedia.org/wiki/Planck%27s_law

Max Planck at PG:
https://www.gutenberg.org/ebooks/author/35343

#bboks #science #physics

I will, in fact, claim that the difference between a bad programmer and a good one is whether he considers his code or his data structures more important. Bad programmers worry about the code. Good programmers worry about data structures and their relationships.

— Linus Torvalds

Oasis Security Research Team Discovers Microsoft #Azure #MFA Bypass

https://oasis.security/resources/blog/oasis-security-research-team-discovers-microsoft-azure-mfa-bypass

not as well know as Moore's Law, but Wirth's law states software is getting slower more rapidly than hardware is becoming faster. We might get new devices millions time faster than a decade ago but things are just as fast but using more resources and power. browsers always end up using all RAM.

#CVE-2024-49194 Databricks JDBC Driver via JAAS, Make JDBC Attack Great Again!!

I’ve included the link to my write-up below. Enjoy!!

https://blog.pyn3rd.com/2024/12/13/Databricks-JDBC-Attack-via-JAAS/

Where do you find musical scores when you don't find them in places like musescore.com?

I'm trying to find the score for an orchestral song by Bernard Herrmann (the prelude for the movie Mysterious Island[1]) but I cannot find it anywhere.

[1] https://www.youtube.com/watch?v=eBdtfxl2yUc

I am super excited to share that my forthcoming book with @alex, THE AI CON: How to Fight Big Tech's Hype and Create the Future We Want, is now available for pre-order!

All the details here: https://thecon.ai/

"I sure wish there was a CTF between Christmas and New Year's"

Good news! @hxp will be running the 38C3 CTF, and it's a qualifier for @defcon CTF too!

https://2024.ctf.link/