'i learn so much by using an LLM' sure thing, just as anyone who ever 'learned' programming from a book while not bothering to type out a single line of code.

🔔CFP for #OffensiveCon26 is STILL open.
If you want a slot on one of the most technical offensive security stages out there, this is it.

We’re looking for real, original work: cutting-edge security research, novel exploit techniques, and deep technical investigations that actually move the field forward. Ready or not, the deadline is coming.

🗓️ CFP Deadline: 1 March 2026, 6:00 pm UTC
📬 Submit your talk: https://buff.ly/bPTM6wl

⏳ Last weeks. No extensions.

A useful chart on what type to use for flags in C/C++ depending on your D&D alignment:

Shot in the dark but is anyone else here a teacher? I am working on revising the literacy curriculum at my school and feel as though I’m doing it in complete isolation. I’d love to chat with another professional about it. #forkiverse #teachers #curriculum (im trying with this tagging stuff but I have legit never done it before)

On the morning of the 13th day of the year we have received *checks notes* 13 #curl vulnerability reports on Hackerone this year.

None a confirmed vulnerability.

libpng memory corruptions:

* CVE-2026-22695 - Heap buffer over-read in `png_image_read_direct_scaled` (regression from CVE-2025-65018 fix)

https://github.com/pnggroup/libpng/security/advisories/GHSA-mmq5-27w3-rxpp

* CVE-2026-22801 - Integer truncation causing heap buffer over-read in `png_image_write_*`

https://github.com/pnggroup/libpng/security/advisories/GHSA-vgjq-8cw5-ggw8

This is the Web of the 1990s and, to some degree, the early 2000s — that some of us experienced and remember.

The Web that some of us want to make a come back.

#WorldWideWeb

The Remarkable Computers Built Not to Fail by Asianometry

https://www.youtube.com/watch?v=SSSB7ZTSXH4

#tandem #hp

This is a super thought-provoking read: "your password doesn't matter": https://techcommunity.microsoft.com/blog/microsoft-entra-blog/your-paword-doesnt-matter/731984

It looks at all of the major failure cases of passwords, pointing out that only one password complexity choice (avoiding a password in the top 10) really influences those failure modes.

The rest can only be addressed with MFA.

[RSS] From gixy-ng to Gixy-Next: rescuing Gixy from AI slop

https://joshua.hu/gixy-ng-ai-slop-gixy-next-maintained

⚗️🧪 Periodic Table of Elements (UMT d.o.o. / Igor Pravst, 1996) - a very nice example of such a program with a lot of data, found on a floppy disk 💾 💾

[RSS] Multiple Vulnerabilities in OpenProject

https://mantodeasecurity.de/en/2026/01/multiple-vulnerabilities-in-openproject/

Archivists: suppose you have to scrape large amounts of media for preservation from an unfriendly service. How do you ensure that the retrieved media didn't get corrupted along the way? (I don't want to watch/listen to 1000s of hours A/V)

#archiving #scraping

"Reverse engineering my cloud-connected e-scooter and finding the master key to unlock all scooters" by Rasmus Moorats

https://blog.nns.ee/2026/01/06/aike-ble/

“Maybe don’t fill every available silence with the sound of people talking” is why I almost never listen to podcasts (or audiobooks)

I put my mouse in the microwave !!

Seriously. I have a bluetooth mouse that wouldn't enter pairing mode. It was connecting to *something*... maybe a smart switch or whatever. This cheap mouse has no way to enter pairing mode if it's connected to something.

So anyway, a microwave oven is a faraday cage. I turned the mouse on, tossed it in, shut the door and waited. It entered pairing mode quickly, and boom, connected to my tablet.

A+++ life hack by yours truly. Just don't start the nuker or magic smoke will come out 😆

#lifehack #bluetooth

Hot* take,

Phishing tests are a symptom of a failed security organization.

There's many potential causes for the failures - I'm not necessarily saying that the individuals in the org are incompetent; frequently the failure of the org is at the political level within the wider-scope org - but if a phishing test appears in a user's inbox, the security org has already failed and needs complete replacement.

* keep your opinions as to the heat value of this take to yourself.

there’s a windows 7 key in the epstein files and it’s totally functional and activates windows 7 home premium

https://www.justice.gov/epstein/files/DataSet%201/EFTA00002467.pdf

When Google restricted AlphaFold 3's commercial use, three MIT PhD students rebuilt the protein folding model in four months. Their open-source version, Boltz-1, now has $28M in funding and a Pfizer partnership. The move highlights tensions between proprietary AI research and scientific openness in drug discovery infrastructure. #OpenScience #ProteinFolding #AIResearch https://www.implicator.ai/when-google-locked-the-door-three-mit-students-picked-the-lock/

If Seatbelt Guidance Worked Like Cybersecurity Guidance

https://scribe.rip/@boblord/if-seatbelt-guidance-worked-like-cybersecurity-guidance-01dbe8b88c96