I just noticed a maybe lesser emphasized parental instinct: letting children do stuff very inefficiently.

Helping in the kitchen, driving a screw, planting a flower.

Because that's how we learn things and improve.

RE: https://mastodon.social/@tdp_org/116614512704731546

It's probably over-attribution, but in the end politicians always first check what everyone else says! So I'll say it anyway: Republik journalism, the gift that keeps on giving.

https://www.republik.ch/2026/02/18/how-tenaciously-palantir-courted-switzerland [English]

https://www.republik.ch/2025/12/08/wie-hartnaeckig-palantir-die-schweiz-umwarb [German]

🎂 IDA Turns 35.
From DOS-era disassembler to one of the most widely used reverse engineering platforms in the world...

To celebrate, we’re launching:
• 35% off new licenses (see eligibility requirements)
• Limited-edition swag giveaway
• “35 Ways to Use IDA” as told by you
• Stories from the past and a few for the future

Read all about it here:
https://hex-rays.com/blog/ida-turns-35-lets-celebrate-together

For years, Rust binaries made reversing a nightmare. Modern decompilers only support C, lacking meaningful types, constructs, and language-specific functions. Led by @34r7hm4n, we're releasing our S&P work Oxidizer, the first deep Rust decompiler, built on angr!

Interested? 🧵👇

CVE-2026-40369: Twelve Bytes to Escape the Browser Sandbox https://voidsec.com/cve-2026-40369-browser-sandbox-escape/

github is like: "I see you're trying to look at a commit diff, how about skipping the files where the majority of the changes happened?"

When Your VPN Opens Your Private Network to the Public https://www.hacktron.ai/blog/cve-2026-0265-panos-globalprotect-cas-auth-bypass

😎 We now push artificial variable declarations close to their use! 😎

Also, inline initialization.

Magnets Are Bad For Hardware Again

https://hackaday.com/2026/05/21/magnets-are-bad-for-hardware-again/

"I'm happy to share that #Fortinet has won the Best Government Supplier award" - LinkedIn

"They probably were government. Just not ours." - Whistler

I'll be back at @recon teaching a training with @KeithRamphal, we'll be bringing our combined malware reverse engineering experience to the masses! Whatever runs, wherever it runs, cause the days of your boring ol' Windows C bot are over. https://recon.cx/2026/en/trainingAdvancedMalwareRE.html

General Devices for Lowering Morale and Creating Confusion

[RSS] A gentle introduction to binary analysis and Ghidra's SLEIGH

https://blog.thalium.re/posts/sleigh/

Impacket 0.13.1 is out, with a lot of improvements and some new relay options. https://www.coresecurity.com/blog/whats-new-impacket-0131

FatGid+4
A four-byte type, an eight-byte stride, one root shell. #FreeBSD

https://fatgid.io/

/via @Hetti

Your next AI agent

I love how the Unix commands have such intuitive naming. Like 'find' if you need to find a file, or 'grep' if you need to grep for a string

Part of why I'm baffled and outraged by #AI is because I'm a traditional storyteller. The stories I tell are fascinating to me because they have been told by countless generations. Shaped by every single person who passed them on. In spoken word, person to person, retelling them in the moment with deep attention to their audience's moods and needs. The stories kept changing but they changed through human connection.

Stories are not "content" or "text". They are connection.

#storytelling

How to Treat Sunburn on the Face

Micropatches released for Windows Accessibility Infrastructure Elevation of Privilege Vulnerability (CVE-2026-24291, CVE-2026-25186, CVE-2026-25187) https://blog.0patch.com/2026/05/micropatches-released-for-windows.html