[RSS] Microcode in Intel's 8087 floating-point chip: the scale instruction

https://www.righto.com/2026/09/8087-microcode-reverse-engineering-fscale.html

This IT Crowd episode predicted the AI boom (except instead of covering bad team dynamics we try to prevent $NVDA go down):

https://www.youtube.com/watch?v=uyV0IVItlM4

From Padding Oracle to Shell: Unauthenticated RCE in Telerik UI for ASP.NET AJAX

https://tantosec.com/blog/2026/09/telerik-padding-oracle-to-shell/

hack.lu 2026 agenda is live! (the 20th Edition) including more details about the keynote.

🔗 https://2026.hack.lu/blog/hack.lu-2026-agenda-is-live/

#conference #hacklu #cybersecurity

this was incredibly annoying but I've added 1Password SSH key import to ChiPass! this is our first significant feature work

https://codeberg.org/ChiPass/ChiPass/pulls/150

Look, you pay me to be paranoid. If I'm not worried about this, you definitely shouldn't be.

Seeing air defense rocket batteries deployed at the Bucharest airport reminds you how close you are to an active conflict zone around here 😬

poll: to look up the official documentation for "git pull", would you use: (you can pick more than one)

Some places of #Fedi literally require you to look up the Communist Manifesto.

Un-fucking-believable.

[RSS] IBM Db2 Mirror for i: pre-auth RCE and the road to QSECOFR

https://blog.silentsignal.eu/2026/09/14/IBM-Db2-Mirror-for-i-pre-auth-RCE-and-the-road-to-QSECOFR/

#IBMi #AS400 #vulnerability

Secret Panel HERE 🧠 https://tinyview.com/mrlovenstein/2026/06/14/memory-hole

🧹 rev.ng now does intraprocedural type propagation!
Enjoy less casts and better local variable types.

XCancel Shuts Down Again
https://daringfireball.net/linked/2026/09/14/xcancel-shuts-down-again

@jerry Are infosec.pub's communities/posts intentionally visible for registered users only?

Any recommendations for #Lemmy / #Kbin replacements for /r/netsec and the like?

I feel that my days of following Reddit without their app/website are numbered.

Now it's official: On Thursday, the EU Commission will propose a new law they call the #KIDSAct. It will ban young people from a range of different online services and be enforced by the Commission themselves.

What a waste of political capital and legislative resources.

https://www.politico.eu/article/eu-to-propose-new-legislation-on-minors-protection-on-thursday/

#MinorsProtection #ChildRights #OnlineSafety #DigitalRights

Reminder: it's easy to abolish #Monday and customise your week. All you need is a bit of creativity with time zones. https://timtfj.com/2010/10/11/abolish-mondays/

[RSS] Flicker and fall: rooting the Philips Hue Bridge both remotely and wirelessly

https://blog.thalium.re/posts/rooting-the-philips-hue-bridge-remotely-and-wirelessly/

Microsoft describing a ClickFix attack in 2026:

Make sure your web browser isn't 6 years out of date.

(Adobe stopped supporting Flash at the end of 2020, with major browsers automatically blocking it at the beginning of 2021)

After years inside datacenters, it’s hard to be afraid of AI killing all humans. I've seen the "secure facility." It's a chain link fence and a guy named Gary.

Night shift is usually 10-20 people. Two hundred people could shut a datacenter down with nothing but a Wikipedia article on fiber optics and some enthusiasm. Start swinging and you’ll hit something valuable pretty fast.

The "secure cages"? Chain link. The lobby's got badges and mancatchers and a guard who checks your ID like it insulted him. Out back it's a sliding metal door, propped open with a folding chair by whoever's waiting on FedEx.

It's not a fortress. It's a strip mall with better cable management.