In case anyone wanted to play chess on their AS/400:

https://github.com/PoC-dev/gnuchess-as400

ghidriff - mpengine.dll - VersionTrackingDiff - 1.1.24030.4 vs 1.1.24060.5

https://gist.github.com/v-p-b/f9aa39263e125c8e3b04c4d22fd4d78d#strings

This one executed much faster than SimpleDiff (with the O(n^2) FuncName:Param algorithm)!

Unfortunately the diff is so big it's difficult to judge quality, so the next step is to come up with some metrics that can be checked automatically.

#bindiff #ghidriff

demoparties prominently featuring genML stuff feels like the antithesis of the point of making demoscene productions. bleh.

New blog post! I've recreated the ZZM music format in JavaScript. What's a ZZM? Read the article and find out! https://nicole.express/2025/zoo-of-zero-motivation.html

Cloudflare's CEO recently floated the idea of a service to block AI companies that scrape media content without compensation. It's an intriguing and possibly useful idea, and one that they could probably pull off to some degree. I didn't see this brief interview anywhere else so...

https://www.linkedin.com/feed/update/urn:li:activity:7287149126188691458/

Anyway, this idea is interesting coming from CF because their CEO has long argued that it doesn't want to be in the anti-abuse business absent a court order, as anything less amounts to a slippery slope of censorship. But as long as the CEO is talking about being the arbiter of good and bad, how about we start with something more prosaic, like making it easier for people to decide what parts of CF's network they don't want to see at all.

BTW, Cloudflare's mantra is that they don't "host" content in the conventional sense, but rather they are a pass-through that caches content in multiple places to make it more quickly and globally available. At the same time, their mantra on abuse has always been that selectively booting bad customers without a court order is akin to censorship, i.e. their being able to decide whether some content deserves to be online or not.

But here's the truth: Even if CF were to boot a site off its network, that doesn't "censor" the booted property, which will still have its content served from the original location. And this is why I find their argument for not doing more so disingenuous.

I'm still stunned by the ICC having their evidence on Azure.

Public bodies need to have their own infrastructure. Especially when their storage is somewhere that serves shareholders and the country where they are incorporated.

Kinda hope the UN is on independent infrastructure.

You diff binaries and immediately find the single change that adds the overflow check.

I diff mpengine.dll and break all reversing tools out there.

We are not the same.

https://gist.github.com/v-p-b/513a8f70a32c62f3ab7bf0d6a90e0941

#bindiff #ghidriff

She most definitely needs a movie. She was part of the Resistance in Holland, and
Damn, she was a badass. She also helped Jewish people escape camps and blew up some train tracks the Reich used.

The second part of my #WinDbg deep-dive into the #Windows #bootloader is up: Get ready for a decades-old registry structure, unique sorting algorithms, and lots of corner cases. The result is a modern Rust replacement for Mark Russinovich's LoadOrder tool: https://colinfinck.de/posts/nt-load-order-part-2/

I have to admit this tweet of mine at the time of Elon's takeover didn't age well:

https://scrapco.de/twitter/buherator/status/1585874987617243136/

An article about an algorithmic advancement for leaving preallocated space between sorted objects in a way that minimizes how much you have to move things around for an arbitrary insert.
https://www.quantamagazine.org/new-book-sorting-algorithm-almost-reaches-perfection-20250124/

OK. Hear me out.

"IBM Software Download Tips: Three Easy Steps to Make Download Director Work Again"

I'm pretty sure that not a single soul wants to make Download Director work again.

[RSS] The invalid 68030 instruction that accidentally allowed the Mac Classic II to successfully boot up

https://www.downtowndougbrown.com/2025/01/the-invalid-68030-instruction-that-accidentally-allowed-the-mac-classic-ii-to-successfully-boot-up/

[RSS] CVE Farming - Problem & Solution

https://jericho.blog/2025/01/25/cve-farming-problem-solution/

Many important, but often overlooked details about CVE assignment and vulnerability management in this one!

Project: golang/go https://github.com/golang/go
File: src/cmd/compile/internal/ssa/rewritegeneric.go:20188 https://github.com/golang/go/blob/refs/tags/go1.23.4/src/cmd/compile/internal/ssa/rewritegeneric.go#L20188

func rewriteValuegeneric_OpOr16(v *Value) bool

SVG:
dark https://tmr232.github.io/function-graph-overview/render/?github=https%3A%2F%2Fgithub.com%2Fgolang%2Fgo%2Fblob%2Frefs%2Ftags%2Fgo1.23.4%2Fsrc%2Fcmd%2Fcompile%2Finternal%2Fssa%2Frewritegeneric.go%23L20188&colors=dark
light https://tmr232.github.io/function-graph-overview/render/?github=https%3A%2F%2Fgithub.com%2Fgolang%2Fgo%2Fblob%2Frefs%2Ftags%2Fgo1.23.4%2Fsrc%2Fcmd%2Fcompile%2Finternal%2Fssa%2Frewritegeneric.go%23L20188&colors=light

I want to see less nostalgia for Geocities design and more nostalgia for web standards / proto-web 2.0 aesthetics

E.g., early CSS Zen Garden - linking you intentionally to the oldest entries from 20 years ago (cw: some lean heavily on the Orientalism, remember it’s from 20 years ago before you put a creator on blast)

https://csszengarden.com/pages/alldesigns/?pg=12

Context: The CSS Zen Garden was a groundbreaking project at the time, aiming to change minds about the viability of semantic HTML and CSS 2, separating contents from design.

The site had fixed HTML for its content, and designers were invited to submit designs. All looked radically different from each other. It inspired many people to step up their game and keep up with the new tech.

Many had a very bold design to distinguish themselves from each other.

You might have to zoom a bit on some of those, 1024×768px resolutions were the norm at the time.

Hang on now. How did they get this Juniper backdoor installed??

https://www.theregister.com/2025/01/25/mysterious_backdoor_juniper_routers/

Slick C2 coding tho.

#malware #infosec

Which punk rock record would you have recorded on blank side 2 back then?

I got “Russia To Rocket” recorded on a cassette by a friend. My first punk rock cassette 📻

#punk #punks #punkrock #oldschoolpunk #hardcorepunk #history #punkrockhistory