For decades, the KKK marched and protested wearing masks, and Dem lawmakers said, "It's free speech! We have to let them talk!"

Then for a few summers, some Black kids said, "We need a ceasefire in Palestine." And Dem lawmakers passed laws against masked protest.🤡

Now those Dems are quiet again.🤷🏿‍♂️

This is a hell of a picture

Blog post: Inspired by the video I just boosted - some honest thoughts on my AI remorse from my experiments earlier in the year.

It was bad, and I have SERIOUS regrets.

https://goodnameforablog.com/posts/very-average-prototypes/

#GUI framework idea: instead of messing around with grids, layers and other demons of Hell, what if the developer just declared things like:

* These things belong together
* This group of things is the most important
* This group of things is only required sometimes
* ...

Edit: Since smart people talk about "visual hierarchy" may the dev would define a graph of elements?

Not saying this would build great GUIs, but there will be *a* GUI composed based on some generally not too bad practices.

#Programming

Agentic AI has "guardrails" (e.g. you have to explicitly say "don't delete all the files on my computer" if you don't want it to delete all your files).

One of these guardrails is asking users to confirm whether to do things. Claude Code apparently has now decided that if you take over sixty seconds to answer a question, it'll just go ahead.

Turns out guardrails get in the way of consuming tokens, and you must consume tokens in order for the business model to work.

https://github.com/anthropics/claude-code/issues/73125

Arthur C. Clarke: "Any sufficiently advanced technology is indistinguishable from magic."

Me: "Therefore, any sufficiently complicated technical problem is indistinguishable from a curse."

#infosec #sysadmin #bofh

Interesting Git repos of the week:

Strategy:

* https://github.com/mr-r3b00t/ai_usage_mitre_analysis - AI abuse through an ATT&CK lens with @UK_Daniel_Card 🤖

Detection:

* https://github.com/citizenlab/bluecoat-investigations investigating Blue Coat device breaches with @citizenlab
* https://github.com/andreicscs/HoneyWire - F/OSS deception

Bugs:

* https://github.com/sgkdev/ipv6_frag_escape - another Linux LPE

Exploitation:

* https://github.com/x86byte/Obfusk8 - obfuscation library
* https://github.com/bee-san/RustScan - a port scanner in Rust
* https://github.com/t0thkr1s/gpp-decrypt - dumping GPP cpassword
* https://github.com/kernelstub/Nox - attack surface management in Go
* https://github.com/JVBotelho/skewrun - abusing time in AD
* https://github.com/db0109/AI-Red-Team-Scripts-And-Checklist - tips and tricks for red teaming AI 🤖
* https://github.com/jonaslykkegaard9-ops/m - remapping Windows memory

Hard hacks:

* https://github.com/pinkflawd/MIPSReverseEngineeringWorkshop - @pinkflawd's MIPS training

Nerd:

* https://github.com/ripienaar/free-for-dev - free hosting for developers 🤖
* https://github.com/dockur/macos - OS X in Docker

#code, #security, #research

Why I love Mastodon: someone famous got married to someone else famous today and my wife told me about it. I didn’t see one person talking about it here. Thanks for being great.

RE: https://techhub.social/@Techmeme/116856918203941961

Yet another reason to #ban #meta
Horrible.

But the worst part is that Zuckerberg laughs all the way to the Bank

[RSS] Developing Ghidra extensions in neovim with LSP support

https://binaryru.in/chain-of-thoughts/ghidra-extension-development-in-neovim-with-lsp-and-treesitter/

Damn, Defqon.1 got cancelled :O

https://www.youtube.com/watch?v=fLWY-Sxb1bE

Turns out global warming was no joke...

Unless you were largely cognisant during the late 90s, it's very hard to get across to you just _how_ bristling with positive energy computing was back then, just **look** at this opening screen, it screams "ARE YOU READY TO LEARN MOTHERF*CKER?!".

It has dolphins, in the clouds. How many smartphone apps welcome you with dolphins in clouds?

#encarta #90s #retrocomputing

[RSS] It rather involved being on the other side of this airtight hatchway: Changing administrative settings

https://devblogs.microsoft.com/oldnewthing/20260701-00/?p=112498

[RSS] Exploring cross-domain & cross-forest RBCD: part 2

https://www.synacktiv.com/en/publications/exploring-cross-domain-cross-forest-rbcd-part-2.html

[RSS] skewrun - bypass Kerberos clock skew (KRB_AP_ERR_SKEW) without root or touching the system clock (Rust, v1.1.0)

https://github.com/JVBotelho/skewrun

[RSS] Privilege escalation to root in Lima QEMU guests via a world-writable agent socket (CVE-2026-53657)

https://syntetisk.tech/blog/posts/privilege-escalation-to-root-in-lima-qemu-guests-via-a-world-writable-agent-socket-cve-2026-53657/

New vulnerability report from Talos:

WolfSSL wolfSSL PKCS#7 OtherRecipientInfo integer underflow vulnerability

https://talosintelligence.com/vulnerability_reports/TALOS-2026-2408

CVE-2026-6678,CVE-2026-6678,CVE-2026-6678

New vulnerability report from Talos:

WolfSSL wolfSSL X.509 registeredID name constraints enforcement improper input validation vulnerability

https://talosintelligence.com/vulnerability_reports/TALOS-2026-2410

CVE-2026-5263,CVE-2026-5263,CVE-2026-5263

New vulnerability report from Talos:

WolfSSL wolfSSL X.509 iPAddress name constraints enforcement improper input validation vulnerability

https://talosintelligence.com/vulnerability_reports/TALOS-2026-2409

CVE-2026-7532,CVE-2026-7532,CVE-2026-7532

I love everything about the way it was written, but it got under my skin more than watching Obsession: https://weli.dev/blog/half-baked-product/