Nice info graph of #hybrid attacks on Europe by The Economist. www.economist.com/briefing/202...

talibus Aeneas ardentem et torua tuentem lenibat dictis animum lacrimasque ciebat. (Aen. 6.467-8) We're up to Aeneid 6 in our group, and this is yet another line that makes one reflect on the impossibility of "accurate" translation...

Do something innovative today: think for yourself instead of using LLMs!¹ __ ¹ results may vary, previous performance before you burned your neurons on ChatGPT is no guarantee of future performance. Ask your friends if thinking is suitable for you. Stop thinking if thoughts become uncomfortable.

Team Degenerative AI

OpenSSH 10.1 has just been released. This release includes several new features, a minor security fix and many other bugfixes. Full release notes here: www.openssh.com/releasenotes...

The 'Clementina', Argentina's first computer, a Ferranti Mercury mainframe named for its demo program that played "My Darling Clementine." Installed 1961, and effectively destroyed in Onganía's Night of Long Batons in 1966.

Myths of nuclear graphite in World War II, with original translations www.osti.gov/servlets/pur...

This is pretty damn cool www.youtube.com/watch?v=TPyQ...

For all you Java☕ fiends^Waficionados, #OpenBSD now has a port of OpenJDK 25, just in time for the 7.8 release! marc.info?l=openbsd-po...

We fixed the vintage IBM printer at the Computer History Museum yesterday. Introduced in 1959, the IBM 1403 line printer provided fast, high-quality output, printing 132 character lines. Unfortunately, one column stopped printing, so we disassembled the printer to fix a bad hammer. Keep reading...

A FontParser in macOS 15.7.1 is 3.81GB, I learned today.

Bla bla bla "cloud", bla bla bla "multiple zones", bla bla bla "failover". Microsoft Switzerland North "degraded" over the weekend, stuff became slow as treacle but nothing failed over to "Switzerland East". OK cloud.

2021 cynicism. Still current.

Ransomware written in Rust Rust uses cargo and goes to fetch stuff from repos Time for a supply-chain attack on ransomware, methinks.

#OpenBSD acme-client(8) now supports the draft-ietf-acme-profiles specification, supported by certificate authorities like Let's Encrypt. This allows for different "profiles" to be provided that can be selected by the user, such as "shortlived" TLS certificates. marc.info?l=openbsd-cv...

Github is a can of worms. #sorrynotsorry

Now is your chance to demonstrate that all my promotion is pointless. Because #n4sa2e is live. mwl.io/ks

Good news! @mwl.io is writing the 2nd edition of "Networking for Systems Administrators" and has set up a Kickstarter for it: mwl.io/ks

Fascinating under the hood details on Wndows/386 (pre-Windows 3.0): virtuallyfun.com/2025/09/06/u...

In two weeks, at EuroBSDCon, Tom Smyth and I will be giving a Network Management with the OpenBSD Packet Filter Toolset events.eurobsdcon.org/2025/talk/FW... tutorial. Register via 2025.eurobsdcon.org/registration... #eurobsdcon #zagreb #openbsd #freebsd #pf #packetfilter #networkin #security

A few quotes about Steve Jobs from "Valley of Genius" by Adam Fisher.

It looks like the website for our Applied Cryptography course at AUB is now the top search result on Google for "applied cryptography". The website now has over 200 unique visitors a day from all over the world, and AFAIK the course materials are now being used in at least five universities.

My upcoming book, The Book of PF 4th edition, is part of B&N’s pre-order sale Sept 3–5! Use code PREORDER25 for 25% off (35% for Premium members). www.barnesandnoble.com/w/the-book-o... #bookofpf #bnpreorder #openbsd #freebsd #pf #packetfilter #networking #security #nostarch #barnesandnoble

My org at work is hiring for an #HPC Architect role to help design and build next-generation GPU clusters! Our team is remote-friendly, with in-office options, and our current team spans all US and most EU time zones. I’m one of the hiring managers, and happy to answer questions by email or DM!

It is terrifying to see how the concept of failsafe designs is completely lost on the current crop of "cloud-native engineers" (the engineers is within the "" because, by definition, that's not engineering). This idea that if a service you use fails then it is "not your fault" and that's it…

Today I have a more serious topic than usual, please consider reposting for reach: My wife and I are urgently looking for a specialist in neuropediatrics or a similar field for our autistic child with a diagnosed, but not further specified, movement disorder [1/4]

Uncle Vladimir and Konstantin Chernenko¹. __ ¹ yes, this ages me.

Interesting … web.archive.org/web/diff/202...

I'm thrilled to announce that after months of intensive work, the complete materials for my Applied Cryptography course at the American University of Beirut are now finished: both Part 1 (Provable Security) and Part 2 (Real-World Cryptography)!

What kind of advise is "We don't know what is going on, disable your VPN server" ? Also a 0day is not "a security bug that was discovered and exploited before the vendor could patch the issue". 0day is a vuln that is not publicly known. A known vuln that the vendor did not care to patch isn't 0day.

"In Cloud we Trust"™ www.seuros.com/blog/aws-del...

Periodic reminder about stunt hacking¹. You will get done by phishing. Nothing else matters. __ ¹ www.cs.auckland.ac.nz/~pgut001/pub...

Today is the 16th anniversary of the completion of se4’s proof of implementation correctness, and the 11th anniversary of seL4 being open-sourced. Happy #seL4 Day from all at Trustworthy Systems!

The long version of why you need key authentication for SSH servers: "The Hail Mary Cloud and the lessons learned" nxdomain.no/~peter/hailm... #ssh #passwordgroping #unix #linux #openbsd #freebsd #pf #packetfilter Also, The 4th edition of the Book of PF is coming soon: nxdomain.no/~peter/yes_t...

Perhaps if someone rephrased the UK ID verification as "sending information about minors to the USA where we don't quite know who is in the Epstein files" might actually help to focus minds?

Your cloud database is not co-mingled, it is co-pwned.

Latest Security Liberation Front issue is out! slf.fish

It must be really difficult to run a marketing campaign for a Russian windows & frames manufacturer.

One wonders whether the companies doing their risk assessments and completing their SBOMs actually have the courage to write something like "if this is backdoored we're stuffed" or "this is a critical dependency but we don't even pay for support". I bet the answer is "no".

It is 2025 and we have companies still expecting free, and immediate, 24x7 support from open-source maintainers of projects they liberally use and have never contributed to in any way or form, God forbid paying for support. Time to backdoor them all? Or timebomb them?

YES 😍 1 year till the next AREA41 conference🥳 The new location is www.thehall.ch and we are excited to grow🤩 18.-19.June 2026 -> a41con.ch

It is getting better by the hour: apparently now, since Iran got hit by Stuxnet, the US enrichment plant (which one?) is going to “be hacked back”… No issues there: no Siemens PLCs in US enrichment plants and, er, no enrichment plant except the Urenco in Louisiana doing reactor-grade fuel…

UPDATE: the complete report, in English, is out¹. __ ¹ archive.today/2kJ4i

The idea that you'd use enriched Uranium for a dirty bomb instead of just walking down to the nearest radiotherapy ward and stealing the Co-60 source really shows how scaremongering is rife.

For those interested in complex systems and their failures, the summary of the report on the Spanish blackout is out (in Spanish)¹. If you are into InfoSec it is like reading an incident report: the classic descent into the abyss. __ ¹ mcusercontent.com/2702b812ce1f...

"Pentesting is a point-in-time exercise of limited to no value. It is like weighing yourself when you are 18 and then giving that value for the rest of your life." -- @cynicalsecurity.bsky.social

Are you a young person starting in security? Open a beach bar, take cash only and enjoy life.

From Margaret Verrico @meverri.bsky.social : The IceCube collaboration presents the strongest limit yet on the proton fraction of ultra-high-energy cosmic rays. 🔭✨☄️ astrobites.org/2025/05/31/t...