Project: mpengine-x64-pdb 1.1.24090.11
File: mpengine.dll
Address: 75a38b270

MemScanEnumProcesses

SVG:
dark https://tmr232.github.io/function-graph-overview/render/?graph=https%3A%2F%2Fraw.githubusercontent.com%2Fv-p-b%2Fghidra-function-graph-datasets%2Frefs%2Fheads%2Fmain%2F%2Fmpengine-x64-pdb%2F75a38b270.json&colors=dark
light https://tmr232.github.io/function-graph-overview/render/?graph=https%3A%2F%2Fraw.githubusercontent.com%2Fv-p-b%2Fghidra-function-graph-datasets%2Frefs%2Fheads%2Fmain%2F%2Fmpengine-x64-pdb%2F75a38b270.json&colors=light

"Even if I wanted to improve the app, I really didn't understand how to achieve the increasingly difficult goal I was aiming for. So, rather than writing an automation script that helped me skip over /the hard details/ I focused on learning the science I was trying to ignore."

https://seclists.org/dailydave/2025/q1/3

#fuzzing #llm

CONFIRMED: Facebook has *banned* anyone from linking to Pixelfed. #MetaBlockingPixelfed I just tried posting a message on Facebook that reads: "Anyone here using Pixelfed?" with a link to Pixelfed.Social Within *seconds* I got a post saying my post was banned. Screenshots below.

"He burned our libraries. Why did he do that? It's so destructive. Can you think of anything more evil?"
"I can, child. There is something worse than burning a library."
"How!"
"It happened long ago, this was a time when books were not rare as they are today. Everyone had hundereds of books."
"Hundreds! No!"
"Thousands."
"Oh!"
"So, the new kings realized they couldn't possibly destroy all of the books. They would always miss a few."
"What did they do?"

1/

[RSS] Why does inadvertently passing a std::string instead of a char const* to a variadic function crash on x86-32 but not x86-64?

https://devblogs.microsoft.com/oldnewthing/20250110-00/?p=110744

"There were changes made to file name rules in Windows 11 24H2 that have caused IFS access problems for customers" #IBMi

https://www.ibm.com/support/pages/node/7180720?myns=swgother&mynp=OCSWG60&mync=A&cm_sp=swgother-_-OCSWG60-_-A

I wonder if this has to do with DEVCORE's Worst Fit vulnerabilities: https://devco.re/blog/2025/01/09/worstfit-unveiling-hidden-transformers-in-windows-ansi/

[RSS] Windows 11 24H2 update causes issues connecting to IBM i

https://www.ibm.com/support/pages/node/7180720?myns=swgother&mynp=OCSWG60&mync=A&cm_sp=swgother-_-OCSWG60-_-A

"IBM ACS Application Package *WINLOGON support [...] is incompatible with LSA Protection." what the Hell is ACS doing in my LSASS?! #IBMi

[RSS] Static Keys, Shattered Security Dreams: A CVE-2024-5764 Story

https://medium.com/maverislabs/static-keys-shattered-security-dreams-a-cve-2024-5764-story-c76ee594adc2?source

(Sonatype Nexus Repository 3 exploitation walkthrough)

Great article from @stargirl describing VCOs and digitally-controlled oscillators (DCO) and why you may choose a DCO to avoid temperature-related frequency drift
https://blog.thea.codes/the-design-of-the-juno-dco
#synthesizers #synthdiy #electronics

Old digital cameras turn out to be great for kids:

- They come without all the invasive crap of smart phones
- They boost creativity
- They teach user interfaces and controls outside "push shiny moving button"
- They teach basic software concepts like files (yes, knowing about files is a skill) and how to move them around

And probably more.

Coming up next: MP3 players!

#parenting

Stay classy Meta.

#MetaBlockingPixelfed

It is good when computers make a sound when they are thinking hard. Computers used to click all the time when they accessed their hard drives and it was good cuz you could tell if it was working or frozen. Just now I started a long Rust build. The fans went on high. I was like, oh cool, I can half close the lid and when the fan eases off I'll know the build is done. 25 seconds later the fan stopped. Oh no, I thought. That's too soon. There must have been an error. I opened the lid. I was correct

Thinking of Aaron Swartz today & I’m stuck on this photo - he & OpenAI CEO Sam Altman (both circled) each scraped 1000s of docs but one did it to make the knowledge free for all while the other did it to make $$$$ through probabilistic plagiarism. The US DOJ only came after one of them & the other is feted by tech bros and executives.

Thank you Aaron for so much, for RSS, for Markdown, for Creative Commons and more. I’m sorry our society failed you.

Project: mpengine-x64-pdb 1.1.24090.11
File: mpengine.dll
Address: 75a5f5dbc

ParseRegistryList

SVG:
dark https://tmr232.github.io/function-graph-overview/render/?graph=https%3A%2F%2Fraw.githubusercontent.com%2Fv-p-b%2Fghidra-function-graph-datasets%2Frefs%2Fheads%2Fmain%2F%2Fmpengine-x64-pdb%2F75a5f5dbc.json&colors=dark
light https://tmr232.github.io/function-graph-overview/render/?graph=https%3A%2F%2Fraw.githubusercontent.com%2Fv-p-b%2Fghidra-function-graph-datasets%2Frefs%2Fheads%2Fmain%2F%2Fmpengine-x64-pdb%2F75a5f5dbc.json&colors=light

My parents to me: Watch less TV, it'll rot your brain.

Me to my kid: Watch more TV, it'll rot / hijack your brain less than the competing alternatives.

An Open Letter to All European Politicians and Leaders to Abandon X/Twitter:

"By abandoning X/Twitter, leaders can reduce its credibility, promote fairer alternatives, and take a stand against the spread of disinformation, ensuring democratic principles are upheld."

H/T to @everton137 for organizing this - already close to 1,000 signatures:

https://www.openpetition.eu/petition/online/an-open-letter-to-all-european-politicians-and-leaders-to-abandon-x-twitter

#Europe #EU

New Project Zero issue:

WebKit: use-after-free in DocumentFontLoader::fontLoadingTimerFired

https://project-zero.issues.chromium.org/issues/374377963

CVE-2024-54502

New Project Zero issue:

inotify_rm_watch() race with umount() can lead to superblock-related UAF

https://project-zero.issues.chromium.org/issues/379667898

CVE-2024-53143