Formal verification is a process for reducing programmers' confidence in their ability to write correct code.

I've been working on improving a few of Git's man pages and I could use a few more test readers to read the existing documentation and identify what's confusing about it! Here's the signup form: https://docs.google.com/forms/d/e/1FAIpQLSdYd9FrjiBg8IbJXk-51p7zewt7aiVOamUImnpb90hK29w3Qg/viewform

I'd especially love test readers who use Git on the command line but aren't 100% comfortable with it.

Today's star of the show seems to be Citrix...

https://www.cve.org/CVERecord?id=CVE-2025-7775
https://www.cve.org/CVERecord?id=CVE-2025-7776

/ht @cR0w

RE: https://infosec.place/objects/f89c1f12-08ad-4b8d-9a6e-33f954fbeb77

I've updated the first chapter of linux-insides on the Linux kernel booting process to reflect modern 6.16+ kernels - https://github.com/0xAX/linux-insides/blob/master/Booting/linux-bootstrap-1.md

The thing I like about writing blogposts is that I need to verify everything I say, so I usually find a few small errors and learn a couple of new things in the process. A lot of work but a very good learning exercise.

The slides from my keynote yesterday at the Open Source Summit Europe: https://www.slideshare.net/slideshow/giants-standing-on-the-shoulders-of-by-daniel-stenberg/282693094

"giants, standing on the shoulders of"

While waiting for the video to become available. I have no idea when that will happen.

#USB keyboards can't interrupt the CPU themselves, but the USB controller continuously polls them and will interrupt it on their behalf. Loudly.

#keyboard #shitpost

I FINALLY got a chance to chat with James Kettle @albinowax and hear about his latest research, with a cool caption "HTTP/1.1 Must Die" 😎 Mind-blowing work including desync attacks and critical vulnerabilities affecting websites & CDNs... and a demo! https://youtu.be/n3Bw8CASnHE

An example of algorithmic resistance

This is great news 🤩 I guess it’s about time to start learning CodeQL seriously

#CodeQL can be enabled at scale on C/C++ repositories in public preview using build-free #scanning

https://github.blog/changelog/2025-06-03-codeql-can-be-enabled-at-scale-on-c-c-repositories-in-public-preview-using-build-free-scanning/

[RSS] postMessaged and Compromised

https://msrc.microsoft.com/blog/2025/08/postmessaged-and-compromised/

"a deep dive into the risks of misconfigured postMessage handlers""

“Stack Overflow data reveals the hidden productivity tax of 'almost right' AI code | VentureBeat”

https://venturebeat.com/ai/stack-overflow-data-reveals-the-hidden-productivity-tax-of-almost-right-ai-code/

> AI tools don’t just produce obviously broken code. They generate plausible solutions that require significant developer intervention to become production-ready. This creates a particularly insidious productivity problem.

::sighs::

Google publishes security research on #GitHub, but instead of commiting to a repository they issue Security Advisories for a somewhat random repo:

https://github.com/google/security-research/security

Is there a way to clone this data as a #Git repository (from a service named after the aforementioned SCM system)?

[RSS] When CTF Meets Bug Bounty: A Critical UXSS in Opera Browser

https://medium.com/@renwa/when-ctf-meets-bug-bounty-a-critical-uxss-in-opera-browser-ee16f389e555?source=rss-3f8ae70e3957------2

[RSS] SQLite: Integer truncation in findOrCreateAggInfoColumn

https://github.com/google/security-research/security/advisories/GHSA-qj7j-3jp8-8ccv

CVE-2025-6965

I should write a summarizer for @talosvulns...

Until then, it's worth to check out the latest image parser bugs:

https://talosintelligence.com/vulnerability_reports/

Hungarian folktale opening formula:

"There was a tall poplar tree with 77 branches, on each branch it had 77 crow nests, in each nest 77 crows.
Whoever doesn't listen to my tale, may the crows blind them. Whoever does listen, may they never see Heaven.
I'm going to start the story now, and you can all consider which one you'd choose."

... Hungarian folk tellers had no chill. 😆

#folklore #folktales #storytelling #Hungary

Frame 174,023 of 207,800

Project: openssl-static-gcc-dwarf 3.4.0
File: openssl
Address: 00660540

asid_validate_path_internal

SVG:
dark https://tmr232.github.io/function-graph-overview/render/?graph=https%3A%2F%2Fraw.githubusercontent.com%2Fv-p-b%2Fghidra-function-graph-datasets%2Frefs%2Fheads%2Fmain%2F%2Fopenssl-static-gcc-dwarf%2F00660540.json&colors=dark
light https://tmr232.github.io/function-graph-overview/render/?graph=https%3A%2F%2Fraw.githubusercontent.com%2Fv-p-b%2Fghidra-function-graph-datasets%2Frefs%2Fheads%2Fmain%2F%2Fopenssl-static-gcc-dwarf%2F00660540.json&colors=light