I think the secret reason that so much open source software is designed for CLI use is NOT just that we really like the console, but the deeper and much more true reason is that writing a GUI is a pain

"Any increase in European sovereignty will lead to a loss of business for US big tech, and they know this. They do not come to your event to help Europe lower their profits. They come to raise doubts or with dubious attempts to be “part of the solution”.

We also no longer invite the tobacco and alcohol companies to health events. These people too wanted to be part of the solution and look where it got us."

via @bert_hubert

https://eupolicy.social/@bert_hubert/116760961230164976

#DigitalSovereignty

everyone knows that the best thing a piece of software can have is geometric growth in the amount of code it has.

edit: keep in mind this is the number of minified characters in the distribution, not lines of code, since it is not an open source project. usually more than one character per line, but also usually lines include comments and whitespace and like docs and tests and stuff when counted on a repository.

edit2: yes this is after unbundling the releases that have bun embedded, this is counting the js in the source only

I don't know where the misconception "you can't boot Windows using coreboot" came from, but I'm tired of correcting people... so here's the proof which should (hopefully) put that misconception to rest for once and for all

All you need are sane ACPI tables (which makes booting windows a great test, otherwise it'll throw a BSOD at you) and payload providing UEFI services (for consumer versions). That's literally it.

NEW macOS 26.5 🥫🍝 sauce! 🎉

xnu:
https://github.com/apple-oss-distributions/xnu/compare/xnu-12377.101.15...xnu-12377.121.6

dyld:
https://github.com/apple-oss-distributions/dyld/compare/dyld-1376.6...dyld-1378

Security:
https://github.com/apple-oss-distributions/Security/compare/Security-61901.101.4...Security-61901.120.67

Libc:
https://github.com/apple-oss-distributions/Libc/compare/Libc-1752.100.10...Libc-1752.120.2

- this post was generated by `ipsw` 🤖

"Call me snake". Plissken is BACK!!!! #SnakePlisskin #escapefromnewyork

https://screenrant.com/escape-from-new-york-john-carpenter-new-entry/

Mastodon 4.6 released today. It lets me force 2FA on accounts.

Also, heads up, I am going to force 2FA on accounts.

Note: this is only applicable to: infosec.exchange
infosec.space
ioc.exchange
convo.casa

Yeah sex is cool but have you tried time-travel debugging?

⏱️ IDA 9.4 pre-release teasers start now.
First up: wider processor and platform support.

The upcoming release adds a Qualcomm Hexagon module, MCore and C-SKY V1, complete AArch64 SVE/SME, improved TriCore analysis with proper calling conventions, and expanded RISC-V coverage including Hazard3/RP2350 and new vendor extensions.

👉 https://hex-rays.com/blog/ida-9.4-wider-processor-and-platform-support

I just received a pair of 18650 cells I ordered. They are 70mm tall (not "65").

Is this normal?!

Happy Birthday to M. C. Escher, born on June 17, 1898, in Leeuwarden, Friesland, the Netherlands.

Like other famous artists such as Michelangelo, Leonardo da Vinci, Raphael, Picasso, Toulouse-Lautrec and Rubens, Escher was left-handed. Escher was forced at school to become ‘double-handed’, which was beneficial for his artform.

More at https://escherinhetpaleis.nl/en/about-escher/escher-today/left-handedness?lang=en
https://www.dailyartmagazine.com/left-handed-artists/
1/n

RE: https://infosec.exchange/@aristot73/116500590393191853

this aged well #exportcontrols

An ecrime group has somehow gained access to 75k Fortinet firewall devices - dubbed Fortibleed

Blog https://www.infostealers.com/article/fortibleed-75000-fortinet-firewalls-compromised-global-enterprises-exposed-claim-your-ethical-disclosure/

Check if your domain is impacted: https://www.hudsonrock.com/fortinet

I’ve verified the data is real. They’ve been dumping the Fortinet config - not sure how yet - and then cracking the passwords it appears. Data is being resold online. #fortibleed

Claude 'Jia Tan' Code

New Project Zero issue:

apple-zlib: uninitialized memory leak during decompression in inflate

https://project-zero.issues.chromium.org/issues/488250572

CVE-2026-28920

New Project Zero issue:

Linux: recursively oopsing task can get preempted while TASK_DEAD, causing stack refcount overdecrement

https://project-zero.issues.chromium.org/issues/510793286

CVE-2026-46173

New Project Zero issue:

vpu driver close instance ioctl races with itself causing UAF

https://project-zero.issues.chromium.org/issues/493643407

CVE-2026-0163

New Project Zero issue:

libheif: Heap-based Buffer Overflow in Uncompressed Image Tiled Decoding

https://project-zero.issues.chromium.org/issues/507396184

CVE-2026-47178

So many calcs so little time.

OMG. Apparently tons of people have been generating secrets on an old server-side key generation website that had incredibly weak entropy. Like, 10 bits or something.

The website was allkeysgenerator[.]com. Here is a dump of 1000 keys generated on it. Searching for the URL finds hundreds of people recommending it for key generation.

Some of these snippets have hundreds of GitHub results.

The exact algorithm is unknown but (see below) It generates extremely predictable strings, you can visually see how the delta from character to character is almost constant. Thanks @dramforever for doing some analysis here. Their script here can generate the vast majority of sequences from this website.

Update: This script generates the entire list from a single seed, and large chunks of another.

I'm certain you can break into production websites using these keys for cookie signing etc.