So sparc64 is officially a base-clang architecture now. The first bulk as such is just under 2 hours in.

If you ask "base-clang? What?" - OpenBSD has two types of architectures. Those where cc is the old gcc, and those where cc is clang. After a lot of work by kirill@, sparc64 has switched to using clang by default.

We are pleased to release tmp.0ut 5 Volume!

Get your viruses, rootkits, strange ELFs, weird machines, tiny files, cool art, and phresh beats here!!

https://tmpout.sh/5/

illustration, creative computing, magazine (1983) https://archive.org/details/creativecomputing-1983-08/page/n141/mode/2up

Hister v0.18.0 is out!

- New search suggestion UI with history completions, fields, facets, and sorting
- Import PDF, DOCX, Markdown, Org mode, and text files
- New Twitter, Bluesky, Reddit, and Discourse extractors
- Responsive terminal result details
- Persistent sessions and safer MCP results

https://github.com/asciimoo/hister/releases/tag/v0.18.0

#Hister #SelfHosted #OpenSource #freesoftware #search

“Before you become too entranced with gorgeous gadgets, remember that the goal is not to have more information, but to have more understanding.”

— Arthur C. Clarke

Does anyone actually have real-world examples of widescale token theft occurring through compromised middleware boxes or accidental logging of tokens?

100 companies are responsible for 71% of global emissions.

They told YOU to recycle better while they polluted more.

Don't fall for it.

Hold systems accountable.

#ClimateCrisis

Credit: Abilu Tangwa

Dutch Pension Fund Pulls Nearly Half a Billion Euros From Climate ‘Megapolluter’ BlackRock.

“This is a massive win for Dutch pensioners—not to mention all living creatures on Earth.” #ClimateChange #GlobalWarming

https://www.commondreams.org/news/blackrock-climate-change

For the past almost a year, I’ve been building a fully working, 1:1 scale Tune Thumper Bike from Mario Kart World!

Full build video: https://youtu.be/vbM31wagyRg

The bike is fully functional. The cassette tape door is also a Nintendo switch 2 dock, so when you put the switch in and plug in hdmi to tv, it outputs without any other power source needed.

Specs:
~65mph top speed
~70lb
Fully functioning buttons, speakers, lights, antenna, nintendo switch 2 dock
wood, steel, and a ton of 3d printing

We gave hundreds of developers an AI agent that can run shell commands, edit files, and call MCP servers on their laptops.

Then we realized we had no record of what it actually did.

So we built one.

1 bash script, 280 lines, no dependencies. Cursor hooks fire it on every tool call. Elastic Agent ships the log to Elasticsearch.

Since the May rollout: 13M+ tool-call events across 1,100+ machines.

What the data showed:
- File reads outnumber shell commands roughly 4 to 1: agents mostly read your codebase before acting
- 300+ distinct MCP servers in use, 86% of them by only 1 or 2 people
- The CLI surface alone produced nearly a fifth of all events

"Which hosts ran an agent that read a .pem file last week?" is now 1 ES|QL query.

We log commands, paths, and tool names. Never file contents, prompts, or responses.

Full writeup from Wieger van der Meulen on the InfoSec team: the collector script, hooks.json, the 2 deployment gotchas that cost the most time, and the ES|QL hunting queries.

https://go.es.io/4wHDZID

Courtesy of @stevelord:

https://stwipe.com/

This is the next-gen, value-aligned, over the horizon, into the abyss company I've been looking for, to waste my money on.

@kagihq 's "small web" experiment kicked off 3 years ago with about 6,000 vetted human-written non-commercial blogs and is now up to almost 37,000. I would love to know how it's going: https://blog.kagi.com/small-web

CVE Crowd's search feature is now public!

This means you can now search for vendors, products, package names or CVE numbers and find related posts on the Fediverse and Bluesky - all without signing up anymore.

Previously, I used sign up as an obstacle for bots. But since #ALTCHA proved good enough to keep those away, it now also secures search.

I hope this is useful to y'all!

https://cvecrowd.com

#Pentesting #AppSec #InfoSec #CyberSecurity #BugBounty #Hacking #CVE #CveCrowd

OMG did @jerry just update Akkoma so we now have enhanced search? 😍

Thank you!

I'm on this picture and don't like it.

...If anybody's looking for a person who basically does everything from compiler {backend,frontend} development, GPU driver development, to hardware/firmware security research, let me know. #getfedihired

US only.

RE: https://mastodon.social/@campuscodi/117128474535423979

Ah, I get it now. They are doing the same thing to CISA that they did to 18F and login.gov - kill off perfectly functional (in fact, superior, non-partisan, cost-effective) public tech infrastructure so it can be privatized by attrition. The classic "starve it, then declare it ineffective" tactic. 😠

PSA: if you have a website or a blog, you can use Google Search Console to turn off the use of your site in AI overviews. You get multiple scary warnings if you try. I was curious what's the actual impact on site traffic, so I turned it off. It went from ~1k AI summaries a day to zero, with no measurable impact on visits to the site.

"You never can tell with bees."

I want a Firefox extension that knows how to replace every single "N months ago" label with the actual exact timestamp (using patterns for how the data is hidden in tooltips, click-to-expand, etc.).

That shit is SO unhelpful. Like if I'm looking back at git history, I don't care that a change was made roughly 3 months ago. I care whether it was made before or after an email I'm looking at that said something relevant to the change.