I self-host now: this account runs on my own server and my own domain, @mbr

The old instance is shutting down and the auto-migration only carried a fraction of you across. If you can read this, you're already in the right place.

Everyone else has to re-follow by hand. Please BOOST this to help me get back everyone :)

#Fediverse #SelfHosted #Mastodon #mbr #masterbootrecord

Rob Pike received the 2026 USENIX Lifetime Achievement Award! https://www.usenix.org/about/awards/flame

Git, grant me the serenity
not to stage changes that don't matter
the courage to commit those that do
and the wisdom to know the difference.

Did you read our latest publication?

Our newest advisory highlights a Linux kernel use-after-free vulnerability discovered by independent researchers during TyphoonPWN 2026: https://ssd-disclosure.com/linux-bridge-stp-timer-use-after-free/

SSD Secure Disclosure is a trusted partner for advanced vulnerability researchers, providing a direct path from high-impact research to coordinated disclosure and competitive compensation.

We are actively looking for Linux vulnerability research, including kernel exploitation, privilege escalation, memory corruption, and other high-impact findings.

You focus on the research. We handle the rest. Learn more at https://ssd-disclosure.com/product-index/

We don't eat our own dog food because frankly it tastes like shit

https://finance.yahoo.com/technology/ai/articles/google-ai-team-tells-job-222929935.html

Dreams don't lie, my latest documentation issue just got fixed 🤩

https://github.com/Vector35/binaryninja-api/issues/7413#event-29360967336

RE: https://infosec.place/objects/f3eee898-f8d9-45c7-bf5d-101540b3eda6

[RSS] Bypassing Android Hardware Attestation from the Analyst's Chair

http://blog.quarkslab.com/bypassing-android-hardware-attestation.html

[RSS] How Trail of Bits helps verify the integrity of your Signal chats

https://blog.trailofbits.com/2026/08/11/how-trail-of-bits-helps-verify-the-integrity-of-your-signal-chats/

(Re-)New Nightmare Eclipse stuff!

https://git.projectnightcrawler.dev/NightmareEclipse/ShieldBreak

Essentially RoguePlanet 2, it seems like.

#NightmareEclipse #Windows #Malware #Infosec #Microsoft

Today the solution for the Halting Problem is: It does not halt.

#fml

Discovered while doing ethnographic research for a public library district. I was touring one of their branches when this caught my attention.

It’s genius. Smartest solution I’ve seen for this common problem.

Librarians could save the world if we’d let them. 😉

#DIY #Libraries #Library #Ethnography

PEOPLE/ARNOLD1.GIF

Any recommendations for books on #DistributedComputing?

I'm primariy looking for a best-practices kind of thing to recognize potential problems early and avoid reinventing wheels.

#Bookstodon #FediBooks

Rapid7 Analysis: Microsoft SharePoint JWT Token Authentication Bypass (CVE-2026-55040)

https://www.rapid7.com/blog/post/ra-microsoft-sharepoint-jwt-token-authentication-bypass-cve-2026-55040/

Slides and whitepaper of Gone in 60 Frames – USB Video Exploitation by @robherrera_ and myself seem to be on the #defcon34 media server now!

Slides - https://media.defcon.org/DEF%20CON%2034/DEF%20CON%2034%20presentations/DEF%20CON%2034%20presentations/DEF%20CON%2034%20-%20Alex%20Plaskett%2C%20Robert%20Herrera%20-%20Gone%20in%2060%20Frames%20-%20USB%20Video%20Exploitation%20-%20In60%20Slides%20v1.pdf

Whitepaper - https://media.defcon.org/DEF%20CON%2034/DEF%20CON%2034%20presentations/DEF%20CON%2034%20presentations/DEF%20CON%2034%20-%20Alex%20Plaskett%2C%20Robert%20Herrera%20-%20Gone%20in%2060%20Frames%20-%20USB%20Video%20Exploitation%20-%20In60%20Whitepaper%20v1.pdf

New video: Compiled V8 JavaScript for reversers 🎥

➡️ V8 compilation pipeline
➡️ bytecode caching
➡️ how bytenode abuses caching for protection

https://www.youtube.com/watch?v=YSSCMSMcpeM
#MalwareAnalysisForHedgehogs #JavaScript #V8

Richard Scarry already summarized everything there is to know about cyber security, about 50 years ago.

RE: https://fosstodon.org/@frehi/117077677106911268

paging all nerds who run their own mailserveres