My first watchTowr post is out! It was my first take on a CMS solution and I was able to get some interesting pre-auth RCE chains on Kentico Xperience. 😎

"In today's post, we dive into Kentico's Xperience CMS - highlighting multiple Authentication Bypass vulns chained with a post-auth RCE..."

https://labs.watchtowr.com/bypassing-authentication-like-its-the-90s-pre-auth-rce-chain-s-in-kentico-xperience-cms/

The first TUI disassemble and debugger I used which I spent lots of time in there for reversing viruses and understand better the internals of the DOS operating system was HACK from the nocash dude. I'm always happy to find its website up and use it in dosbox https://problemkaputt.de/hack.htm #reverseengineering #tui

CVE-2025-24016: Unsafe Deserialization Vulnerability in Wazuh Leading to Remote Code Execution https://cvereports.com/cve-2025-24016-unsafe-deserialization-vulnerability-in-wazuh-leading-to-remote-code-execution/

De-google-ify Internet

Amazing campaign by the French not-for-profit association Framasoft.

The De-google-ify Internet project offers 26 ethical and alternative online tools that may be used by everyone.

They build open source alternatives to many Google services like Youtube, Agenda, Docs, Forms, Maps etc, as well other services to replace Doodle, Facebook Event, Github, Zoom, Slack and much more!

Check their beautiful website, watch the videos to know more about their work and follow them here in Mastodon:

@Framasoft

https://degooglisons-internet.org/

#europe #opensource #europeanalternatives #EUtech #boycott #degoogle #google

What unholy mess is this? Do I need to install VS Code now to edit a text file?

The State of Personal Online Security and Confidentiality

https://www.youtube.com/watch?v=AyH7zoP-JOg

Full interview with Signal's Meredith Whittaker.

Four hundred and nineteen Twitter accounts that posted on Brexit were localized to Russia’s Internet Research Agency… About a third of the discussion of Brexit on Twitter was generated by bots—and more than 90% of the bots tweeting political material were not located in the United Kingdom. Britons…had no idea at the time…that the bots were part of a Russian foreign policy to weaken their country. The margin of the vote was 52% for leaving and 48% for staying. … Brexit was a triumph for Russian foreign policy, and a sign that a cyber campaign directed from Moscow could change reality.
—Timothy Snyder, The Road To Unfreedom: Russia, Europe, America
#russia #unitedkingdom #uk #brexit

Mark Rober maps Disney Lands Space Mountain dark roller coaster with a LIDAR *and* drives a Tesla to a Roadrunner-style "fake road" wall in a single video 🍿

https://www.youtube.com/watch?v=IQJL3htsDyQ

Special shoutout to the repair site iFixit who are now on the Fediverse, you can follow them at:

➡️ @iFixit

They provide repair forums and free repair guides for phones, computers, consoles, kitchen equipment, tools, medical devices, cars etc. They also review and tear down new gadgets to see how repairable they are.

Repairing your existing stuff is much, much better for the environment than buying replacements.

#Repairs #Electronics #DIY #Environment #Gadgets #Tech #RightToRepair

Would you like to participate in one or more Livecode events at Revision?
Please get in touch here: https://framaforms.org/revision-2025-livecoding-events-participation-1736285169
We are excited to hear from you!

Seems freshly pained.

#Art #StreetArt #Paris

“In everyone’s pocket right now is a computer far more powerful than the one we flew on Voyager. I don’t mean your cell phone — I mean the key fob that unlocks your car.”

— Rich Terrile, JPL scientist and member of the Voyager imaging team

#space

squid: RISC-V emulator for high-performance fuzzing with AOT instead of JIT compilation 🦑 https://github.com/fkie-cad/squid

"This Direction requires Australian Government entities to prevent the installation of #Kaspersky Lab, Inc. products and web services from all Australian Government systems and devices, and where found, to remove all existing instances."

https://www.protectivesecurity.gov.au/news/pspf-direction-update-kaspersky-lab-inc-products-and-web-services

An interesting recap of how the #Plan9 OS developed at Bell Labs, with many familiar names, including, of course, Ken Thompson, Dennis Ritchie, Rob Pike, and many others, making appearances.

"What I Saw at the Evolution of Plan 9" by Geoff Collyer

https://adi.onl/oral.pdf

#unix

Project: golang/go https://github.com/golang/go
File: src/cmd/compile/internal/ssa/rewritegeneric.go:7413 https://github.com/golang/go/blob/refs/tags/go1.23.4/src/cmd/compile/internal/ssa/rewritegeneric.go#L7413

func rewriteValuegeneric_OpEq16(v *Value) bool

SVG:
dark https://tmr232.github.io/function-graph-overview/render/?github=https%3A%2F%2Fgithub.com%2Fgolang%2Fgo%2Fblob%2Frefs%2Ftags%2Fgo1.23.4%2Fsrc%2Fcmd%2Fcompile%2Finternal%2Fssa%2Frewritegeneric.go%23L7413&colors=dark
light https://tmr232.github.io/function-graph-overview/render/?github=https%3A%2F%2Fgithub.com%2Fgolang%2Fgo%2Fblob%2Frefs%2Ftags%2Fgo1.23.4%2Fsrc%2Fcmd%2Fcompile%2Finternal%2Fssa%2Frewritegeneric.go%23L7413&colors=light

Project: golang/go https://github.com/golang/go
File: src/cmd/link/internal/loadelf/ldelf.go:846 https://github.com/golang/go/blob/refs/tags/go1.23.4/src/cmd/link/internal/loadelf/ldelf.go#L846

func readelfsym(l *loader.Loader, arch *sys.Arch, elfobj *ElfObj, i int, elfsym *ElfSym, needSym int, localSymVersion int) (err error)

SVG:
dark https://tmr232.github.io/function-graph-overview/render/?github=https%3A%2F%2Fgithub.com%2Fgolang%2Fgo%2Fblob%2Frefs%2Ftags%2Fgo1.23.4%2Fsrc%2Fcmd%2Flink%2Finternal%2Floadelf%2Fldelf.go%23L846&colors=dark
light https://tmr232.github.io/function-graph-overview/render/?github=https%3A%2F%2Fgithub.com%2Fgolang%2Fgo%2Fblob%2Frefs%2Ftags%2Fgo1.23.4%2Fsrc%2Fcmd%2Flink%2Finternal%2Floadelf%2Fldelf.go%23L846&colors=light

[RSS] Making sure that a DLL loads only from your application directory

https://devblogs.microsoft.com/oldnewthing/20250313-00/?p=110963

[RSS] Buffer Overflow Vulnerability in Astrolog v7.70 (CVE-2025-29625)

https://blog.reodus.com/posts/cve-2025-29625/