The stream will be live soon at https://youtube.com/live/q6KgFezu8tw?feature=share

btw (on arm64)

Hyper-V from Windows 11 version 22H2/23H2 works without (and does not use) VHE

From version 24H2 onwards VHE is mandatory. Those releases also have ARMv8.1-A atomics and RCpc from ARMv8.3-A as required.

[RSS] The Alder Lake SHLX Anomaly

https://tavianator.com/2025/shlx.html

"It seems like SHLX performs differently depending on how the shift count register is initialized. If you use a 64-bit instruction with an immediate, performance is slow."

[RSS] Cross Cache Attack CheetSheet

https://u1f383.github.io/linux/2025/01/03/cross-cache-attack-cheatsheet.html

[RSS] Some Casual Notes for CVE-2024-26921

https://u1f383.github.io/linux/2025/01/04/some-casual-notes-for-cve-2024-26921.html

I love this so much, this is literally the physical form of a workaround that's grown to meet enterprise demands.

This is literally, physically, what developers mean when they talk about "tech debt".

Have a great weekend and enjoy some tunes:

https://youtu.be/j_Md8_7mhOU

I will stream in 8h about the basics of the PDF format, teaching how to make a basic PDF from scratch.

This is an easy-level introduction to the PDF [portable document format], aimed at all audiences: infosec, but also digipres, DFIR, and others.

This will not cover complex cases, polyglots, abuses or exploit.
That will come next but this stream is the start on the topic.
The stream will be recorded and available publicly.

Let’s try something new in 2025…
This saturday at 8pm CET, I'll stream about crafting a valid PDF file from scratch.
We’ll see how it goes!

Tenable says customers must manually upgrade their software to revive Nessus vulnerability scanner agents taken offline on December 31st due to buggy differential plugin updates.

https://www.bleepingcomputer.com/news/security/bad-tenable-plugin-updates-take-down-nessus-agents-worldwide/

Trying Out Binary Ninja's new WARP Signatures with IPSW Diff'ing
https://www.seandeaton.com/binary-ninja-warp-signatures/

#frombsky

#RetroFlash: PCGA-TKN1 #Sony #Vaio

Yes, it is exactly what you think it is:

an additional number pad you can flip out of the #notebook bay:

Big organizations have all sorts of problems that we employees can't help.

One problem I *can* help? The feud between the sysadmins and the network team.

I wrote the first edition of "Networking for System Administrators" in the hope that we tech flunkies would come together, freeing us to plot against the C-levels.

I'd appreciate your support for the new edition.

https://www.tiltedwindmillpress.com/product/n4sa2e-sponsor/

The eleventh LangSec (often featuring input validation, program analysis, program verification, parser hacking, specification analysis, and all sorts of related fun things) would love your submissions for 2025. See https://langsec.org/spw25 for the CFP 💚

In the old days if you clicked a link you would just get a web page. It was great.

~Windows 2 article minor updates~

Windows/286 vs Windows/386 vs Windows 3.0 Real / Standard / Enhanced mode. Do you know which is which? I added a table to the Windows 2 article comparing those, so it'll be easier to find the system you want.

Additionally, I added a section explaining why Windows 2 looks so... Unusual. It's hidden under "Wait, why does it look so ugly?" section, and covers fonts, resolutions, and EGA 3-plane graphics.

The URL is the same - https://www.ninakalinina.com/notes/win2/

Think you’ve got what it takes to pop shells and snag your ticket to... @reverseconf and @offbyoneconf ? 😏
https://github.com/star-sg/challenges/blob/main/Jan%202025/README.md

Project: python/cpython https://github.com/python/cpython
File: Python/Python-ast.c:10989 https://github.com/python/cpython/blob/2bd5a7ab0f4a1f65ab8043001bd6e8416c5079bd/Python/Python-ast.c#L10989

int obj2ast_stmt(struct ast_state *state, PyObject* obj, stmt_ty* out, PyArena* arena)

SVG:
dark https://tmr232.github.io/function-graph-overview/render/?github=https%3A%2F%2Fgithub.com%2Fpython%2Fcpython%2Fblob%2F2bd5a7ab0f4a1f65ab8043001bd6e8416c5079bd%2FPython%2FPython-ast.c%23L10989&colors=dark
light https://tmr232.github.io/function-graph-overview/render/?github=https%3A%2F%2Fgithub.com%2Fpython%2Fcpython%2Fblob%2F2bd5a7ab0f4a1f65ab8043001bd6e8416c5079bd%2FPython%2FPython-ast.c%23L10989&colors=light

Some people have asked that 404 Media moves from a magic link system (to login you are emailed a link to click) to a user/password system. We're four journalists trying to spend as much time as possible doing journalism. We don't want your password https://www.404media.co/we-dont-want-your-password-3/

Why do vendors claim reliable and secure and then have vulns like this?? Let me guess, ping again?? https://www.moxa.com/en/support/product-support/security-advisory/mpsa-241155-privilege-escalation-and-os-command-injection-vulnerabilities-in-cellular-routers,-secure-routers,-and-netwo