Refreshing to hear of a boss not being a lemming
https://www.theregister.com/2025/08/21/aws_ceo_entry_level_jobs_opinion/

I love computing history, but I often find computer museums and history books focusing a lot on super early computers and then almost skipping to the microcomputer boom. I guess having a working NES, BBC Micro and C64 in a museum will attract more visitors than an operational Burroughs or Ferranti.

In this aspect, I really appreciate all the awesome machines in TNMOC (e.g. WITCH) and CHM (IBM 1401). I feel like I need to make friends at TNMOC and ask them for an in-deep tour they don't offer to casual visitors. :D

I understand that very few computers of the first, second and third generations of computers did not survive, but I feel this era of computing history criminally underappreciated. Early user interfaces, graphic tablets, vector graphics, 3D, all sorts of quirky data storage and processing hardware, dawn of the machine learning, and a massive, massive gap between governments, corporations and regular hobbyists...

Is it me or when you have your download location configured to iCloud in mobile #Safari but your storage is full, then your one-time downloads (e.g. etickets) just disappear without warning?

Also, what a great design to have downloads that you cant access without Internet...

#Apple

Kicking off a 4-part deep dive into AFD.sys on Windows 11: crafting a raw TCP socket, performing the TCP handshake, sending & receiving TCP packets - everything without Winsock.

1) Part1: https://leftarcode.com/posts/afd-reverse-engineering-part1/

2) Part2: https://leftarcode.com/posts/afd-reverse-engineering-part2/

3) Part3: https://leftarcode.com/posts/afd-reverse-engineering-part3/

4) Part 4: https://leftarcode.com/posts/afd-reverse-engineering-part4/

#reverseengineering #windows #cyber #malware

This feels like a very @SwiftOnSecurity story but I’m going to tell it.

Chat bots (not just LLM driven) are surprisingly old. In the mid 90s, a mark up language for string-driven bots called AIML was released. A small community of early hackers and devs got really into it. I was part as a teen.

DEFCON is fun, finding a V8 bug is even more fun

https://xia0.sh/blog/maglev-deopt

Hey folks! Compiler Explorer is free & open for everyone, but if you're planning to use our API for bulk executions though, please ping us! CE is a shared resource and heavy use can slow things down for the whole community. DM me to chat - happy to help figure out what works best for everyone! :)

Wanted: a #RustLang tool with 4 panes:
- desired generated code
- an in progress proc-macro being written
- input #Rust code where the proc-macro is being applied
- a live updating view of the actual generated code with diff annotations against what was desired

If you want to go fancier, tie things in the output to the input and provide suggestions on where things are missing pre-expansion for the output to march the expectation. I feel like 90% of this can be accomplished today with tmux+a file watcher+direct rustc invocations using -Zunpretty=expanded, but it'd be lovely to have an actual tool for this.

“War is war and hell is hell and of the two, war is a lot worse.” https://www.tumblr.com/jimstares/790549011146981376

We have updated the #Pwn2Own Ireland rules to clarify scoping for WhatsApp for Windows. For WhatsApp for Windows, both “WhatsApp” and the “WhatsApp Beta” applications are in scope for the competition. #P2OIreland https://www.zerodayinitiative.com/blog/2025/7/30/pwn2own-returns-to-ireland-with-a-one-million-dollar-whatsapp-target

Kubernetes is a lot of fun. Here's the layout of a 3-node HA cluster that's doing... absolutely nothing.

I have played me for an absolute fool!

#selfhosting

Finally got to the reel-to-reel museum at Keszthely #Hungary, highly recommended!

📣I will be reaching out all the #r2con2025 speakers next week, in order to confirm the details of every presentation and get the schedule published in September!

If you are willing to present the #CFP closes in October! Reach me out if you have questions or half-shaped proposals to show!

linker errors per Planck time

Interesting links of the week:

Strategy:

* https://wero-wallet.eu/ - a European replacement for PayPal, Google and Apple

Threats:

* https://the-sequence.com/rustypages-malware-part-i - some nice new shiney malware for OS X
* https://www.crowdstrike.com/en-us/blog/murky-panda-trusted-relationship-threat-in-cloud/ - don't you just hate being poked with bamboo?

Detection:

* https://camel-security.github.io/ - LLM guard rails from GOOG
* https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_logging?view=powershell-5.1#enabling-script-block-logging - MSFT's protected logging feature for PS
* https://adsecurity.org/?p=4510 - mm, honey
* https://blog.pypi.org/posts/2025-08-18-preventing-domain-resurrections/ - preventing domain resurrections in PyPI

Bugs:

* https://www.heise.de/en/news/Docker-Desktop-Critical-vulnerability-allows-host-access-10560707.html - attackers may no longer be contained
* https://bughunters.google.com/blog/5800341475819520/a-fuzzy-escape-a-tale-of-vulnerability-research-on-hypervisors - I hate being supervised, do you?

Exploitation:

* https://arxiv.org/abs/2507.09411 - feasibility of generating variant malware using LLMs
* https://phrack.org/issues/72/5_md#article - @phrack #72 lands and it's a goodie... aforementioned link is to @orange's work on PHP
* https://versprite.com/blog/the-shell-was-restricted-but-the-kernel-memory-was-wide-open/ - attacking Linux-based firmware for LPE via the kernel
* https://blog.anh4ckin.ch/posts/netexec-workshop2k25/ - nosing around an AD lab

#security, #research

Sam Altman calls AI a “bubble” while seeking $500B valuation for OpenAI
"Someone will lose a phenomenal amount of money," says CEO while fundraising at record prices.
https://arstechnica.com/information-technology/2025/08/sam-altman-calls-ai-a-bubble-while-seeking-500b-valuation-for-openai/?utm_brand=arstechnica&utm_social-type=owned&utm_source=mastodon&utm_medium=social

LLM's let's you use natural language to extract data from computers.

POML is a way to wrap your natural language prompts to XML to give them structure again:

https://github.com/microsoft/poml

Seriously.

Well AMD just made an oopsie! They accidentally posted the complete source code to FSR4, then tried to remove it, but uhhhhh... here's the repo: https://github.com/GPUOpen-LibrariesAndSDKs/FidelityFX-SDK/tree/01446e6a74888bf349652fcf2cbf5f642d30c2bf
and here's the commit history: https://github.com/GPUOpen-LibrariesAndSDKs/FidelityFX-SDK/commit/01446e6a74888bf349652fcf2cbf5f642d30c2bf
MIT license, have fun!

[RSS] exploits.club Weekly Newsletter 83 - Windows P20 Wins, LLMs + CodeQL, MCP Takes Down DEFCON CTF, And More

https://blog.exploits.club/exploits-club-weekly-newsletter-83-windows-p20-wins-llms-codeql-mcp-takes-down-defcon-ctf-and-more/

@blackhoodie_re will be back at @hexacon_fr this year, and we're currently looking for former BlackHoodies who would be willing to give a training, between Oct 6 and 9! https://blackhoodie.re/Hexacon2025/