[RSS] If you're a button, you have one job

https://unsung.aresluna.org/if-youre-a-button-you-have-one-job

TIL about situational disability, it explains so many annoyances!

[RSS] Automating binary diffing: Bridging IDA Pro (Diaphora) and LLMs via Model Context Protocol

https://github.com/xTeardx/diaphora-mcp

WITHOUT ROWID is a very useful tool to have in the bag for sqlite. didn't know this was a thing.

I've got a very large many-many map table with a composite PK of two integers, like left_id, right_id.

turns out by default sqlite adds a rowid meta-column to tables. when the PK is a single integer it's a direct alias (no additional storage) but in other cases, like my table, it ends up as a separate stored value. for small row sizes this is rather space inefficient. it can also be slower to query

[RSS] When Dragons Misplace Elves: Fixing Ghidra's Broken ELF Export

https://binaryru.in/posts/building-functional-elf-exporter-for-ghidra/

#Ghidra

Dissecting and Exploiting Linux LPE Variant: DirtyClone (CVE-2026-43503):

https://research.jfrog.com/post/dissecting-and-exploiting-linux-lpe-variant-dirtyclone-cve-2026-43503/

#cve #linux #cybersecurity #informationsecurity #exploitation #vulnerability

HyperDbg v0.21 is released! 🪐💫

This release includes numerous bug fixes, improved stability, and significant progress toward integrating Intel PT (Processor Trace) into HyperDbg.

Check it out:
https://github.com/HyperDbg/HyperDbg/releases/tag/v0.21

Curiously enough, the only thing that went through the mind of the bowl of petunias as it fell was Oh no, not again. Many people have speculated that if we knew exactly why the bowl of petunias had thought that we would know a lot more about the nature of the Universe than we do now.

#HitchhikersGuide #DouglasAdams #quotes #quote #bot

personally i'm ok with AI techniques being less well known but there's a deeper thing going on here which is far more important IMO, because it's also partially why LLMs have taken over

== this thread is in response to this tweet: ==

https://x.com/krismicinski/status/2072303376629444764

RE: https://kolektiva.social/@beka_valentine/116845902133405690

An excellent thread here. So much of what I see people pointing to as LLM's benefits for coding relates to long-standing problems in software engineering that the field just hasn't addressed. And LLMs don't solve these problems, at best the just paper them over and make dealing with them less tedious -- while reinforcing the problematic dynamics.

So yes it's great that people with no programming skills can create software to solve their prolems. But if we had collectively spent a chunk of the literally billions of dollars that are going to "AI" building on the early approaches to this from 25+ years ago (Hyperscript, Logo) that don't have the same downsides, we'd be in a much better place today.

For decades, the KKK marched and protested wearing masks, and Dem lawmakers said, "It's free speech! We have to let them talk!"

Then for a few summers, some Black kids said, "We need a ceasefire in Palestine." And Dem lawmakers passed laws against masked protest.🤡

Now those Dems are quiet again.🤷🏿‍♂️

This is a hell of a picture

Blog post: Inspired by the video I just boosted - some honest thoughts on my AI remorse from my experiments earlier in the year.

It was bad, and I have SERIOUS regrets.

https://goodnameforablog.com/posts/very-average-prototypes/

#GUI framework idea: instead of messing around with grids, layers and other demons of Hell, what if the developer just declared things like:

* These things belong together
* This group of things is the most important
* This group of things is only required sometimes
* ...

Edit: Since smart people talk about "visual hierarchy" may the dev would define a graph of elements?

Not saying this would build great GUIs, but there will be *a* GUI composed based on some generally not too bad practices.

#Programming

Agentic AI has "guardrails" (e.g. you have to explicitly say "don't delete all the files on my computer" if you don't want it to delete all your files).

One of these guardrails is asking users to confirm whether to do things. Claude Code apparently has now decided that if you take over sixty seconds to answer a question, it'll just go ahead.

Turns out guardrails get in the way of consuming tokens, and you must consume tokens in order for the business model to work.

https://github.com/anthropics/claude-code/issues/73125

Arthur C. Clarke: "Any sufficiently advanced technology is indistinguishable from magic."

Me: "Therefore, any sufficiently complicated technical problem is indistinguishable from a curse."

#infosec #sysadmin #bofh

Interesting Git repos of the week:

Strategy:

* https://github.com/mr-r3b00t/ai_usage_mitre_analysis - AI abuse through an ATT&CK lens with @UK_Daniel_Card 🤖

Detection:

* https://github.com/citizenlab/bluecoat-investigations investigating Blue Coat device breaches with @citizenlab
* https://github.com/andreicscs/HoneyWire - F/OSS deception

Bugs:

* https://github.com/sgkdev/ipv6_frag_escape - another Linux LPE

Exploitation:

* https://github.com/x86byte/Obfusk8 - obfuscation library
* https://github.com/bee-san/RustScan - a port scanner in Rust
* https://github.com/t0thkr1s/gpp-decrypt - dumping GPP cpassword
* https://github.com/kernelstub/Nox - attack surface management in Go
* https://github.com/JVBotelho/skewrun - abusing time in AD
* https://github.com/db0109/AI-Red-Team-Scripts-And-Checklist - tips and tricks for red teaming AI 🤖
* https://github.com/jonaslykkegaard9-ops/m - remapping Windows memory

Hard hacks:

* https://github.com/pinkflawd/MIPSReverseEngineeringWorkshop - @pinkflawd's MIPS training

Nerd:

* https://github.com/ripienaar/free-for-dev - free hosting for developers 🤖
* https://github.com/dockur/macos - OS X in Docker

#code, #security, #research

Why I love Mastodon: someone famous got married to someone else famous today and my wife told me about it. I didn’t see one person talking about it here. Thanks for being great.

RE: https://techhub.social/@Techmeme/116856918203941961

Yet another reason to #ban #meta
Horrible.

But the worst part is that Zuckerberg laughs all the way to the Bank

What the trolls ruining social media actually look like.

[📹 BestMoon_boxphonefarm]