I kinda wasn't expecting a multi trillion dollar industry to build its marketing campaigns on my tiny niche. Makes sense IMO, 0day have always been pretty easy and false positives don't really matter during the audits... and the entire world has been told 0day are impossible

The amount of people who aren't comfortable saying "I don't know" is staggering.

Make "I don't know" more common in y'alls vernacular. It's healthy and leads to learning new things

The PTFs for IBM i 7.6 TR2 and 7.5 TR8 are released today, Friday July 24 2026.

https://www.rpgpgm.com/2026/07/first-technology-refreshes-of-2026.html
#IBMi #rpgpgm #IBMChampion

New Project Zero issue:

Pixel Codec3P VPU driver: lifetime issues with fw_debug_buf

https://project-zero.issues.chromium.org/issues/492567103

CVE-2026-0125

New Project Zero issue:

LWIS kernel driver OOB write in lwis_io_buffer_write

https://project-zero.issues.chromium.org/issues/507772918

CVE-2026-0138

[RSS] Confidential Computing on Arm: Architecture & Use Cases

https://www.linaro.org/blog/confidential-computing-on-arm-architecture-use-cases/

[RSS] Rustifying Image Codecs in Chromium

https://microsoftedge.github.io/edgevr/posts/Rustifying-Image-Codecs-in-Chromium/

The man whose codebreaking may have helped to shorten the Second World War by two years met a grim reward: in 1952 Alan Turing was convicted simply for being gay and chemically castrated; a royal pardon came only in 2013, decades after his death

By Space Daily Editorial Team

https://spacedaily.com/m-the-man-whose-codebreaking-may-have-shortened-the-second-world-war-by-two-years-met-a-grim-reward-in-1952-alan-turing-was-convicted-simply-for-being-gay-and-chemically-castrated-a-royal-pardon-came/

More information about Alan Turing:
https://en.wikipedia.org/wiki/Alan_Turing

#computerScience #cryptanalysis #lgbt

Authenticated RCE PoC for Redis 6.2.22, 7.4.9, 8.6.4, 8.8.0 https://github.com/berabuddies/redis-poc

There's apparently scammers going round pretending to be Mastodon admins, demanding people "verify their identity".

Do not click on their links, do not give them any info. It is a scam. Genuine Mastodon server admins never demand verification like this.

Here's a guide to how to recognise and avoid various kinds of scams on Mastodon and the wider Fediverse:

➡️ https://fedi.tips/how-to-avoid-scammers-on-mastodon-and-the-fediverse

(Thanks to @amministratore for providing warning about the latest wave of scam posts.)

#FediTips

Apple has fixed the bug in Hide My Email that linked Hide My Email addresses to your real one, but leaked email addresses could still be in third-party logs: https://easyoptouts.com/guides/apple-hide-my-email-was-leaking-email-addresses

One more thought on the OAI vs HF thing:

If you are wondering how serious network isolation is at these companies, try to install an arbitrary subset of their tech stack without Internet access. Good, now try to install updates!

🎶 Here comes another bubble.
The VCs are backing,
Baby let's get cracking. 🎶

Here Comes Another Bubble (2007):
https://www.youtube.com/watch?v=I6IQ_FOCE6I

i don’t usually respond to these kinds of emails, but this one made me so fucking mad that i blacked out and regained consciousness with this in my outbox

Dotcom bubble nostalgia in the local pubs restroom

Any recommendations for generating annotated hex dumps for #documentation, optimally (but not necessarily) something like @angealbertini's format dissections:

https://github.com/corkami/formats/blob/master/image/PNGRGB_dissected.png

#ReverseEngineering

RefluXFS: Local Privilege Escalation via XFS reflink direct-I/O race
(CVE-2026-64600)

https://www.openwall.com/lists/oss-security/2026/07/22/14

Mythos writes Qualys advisories now FML :P

Google just had its first negative cash flow quarter ever due to massive AI spending

Google continues to report big quarterly revenue, but its AI spending has skyrocketed.
https://arstechnica.com/google/2026/07/google-just-had-its-first-negative-cash-flow-quarter-ever-due-to-massive-ai-spending/?utm_brand=arstechnica&utm_social-type=owned&utm_source=mastodon&utm_medium=social

The new #IDA UI quality of life improvements are pretty nice, especially jump anywhere and pathfinder. I'm starting to like them!

https://hex-rays.com/blog/ida-9.4-smarter-navigation-and-quality-of-life-improvements

Digging deeper into the SDK now, some recent changes in IDA 9.4 might impact my idalib-based plugins (hopefully in a good way).