Quake 3 Source Code Review: Architecture (Part 1 of 5)

"Carmack had decided, for the First time, to delegate the job of creating these bots to another programmer in the company. But he failed to follow up. Once again, Carmack incorrectly assumed that everyone was as self-motivated and adept as he was. He was wrong.

When Graeme struggled to rein in the work, it was discovered that the bots were completely ineffective. They din't behave at all like human beings. They behaved, basically, like bots. The staff began to panic. By March 1999, they had reason to be scared. [..]"

https://fabiensanglard.net/quake3/index.php

[RSS] How JWT Libraries Block Algorithm Confusion: Key Lessons for Code Review

https://pentesterlab.com/blog/jwt-algorithm-confusion-code-review-lessons

Major issue with CrowdStrike Falcon Sensor causing massive Windows 10 outages globally.

Fleets of 50k+ machines stuck in BSOD loop. 70%+ laptops down in some orgs.

Workaround:
1. Safe Mode
2. Delete C:\Windows\System32\drivers\CrowdStrike\C-00000291*.sys
3. Reboot

Regions impacted: EU-1, US-1, US-2, US-GOV-1, AU, MY, NZ

Check systems & invoke IR plans ASAP!

#CrowdStrikeCrisis #Windows10BSOD

Evaluating Security of banking apps against mobile theft: a Monzo case study https://fortbridge.co.uk/research/evaluating-security-of-banking-apps-against-mobile-theft-a-monzo-case-study/

Just published age v1.2.0 ✨

Minor release:

• binaries built with Go 1.22.4
• plugin client API
• CLI edge case fixes
• RecipientWithLabels to make auth'd or post-quantum recipients

Very happy about the last point, it was the last hardcoded thing about scrypt recipients.

https://github.com/FiloSottile/age/releases/tag/v1.2.0

Encrypt/decrypt with SSH keys https://yurichev.com/n/SSH_encrypt/