Got a new mac

I’m totally out of ideas, ssd trimming without user interaction seems like a very thing to happen. The whole disk is empty. Data cant be recovered by how the hell can this happen? Ideas? https://infosec.exchange/@astralia/115826133528375938

I hope to come back to NetBSD on real hardware this year. It’s been a while since i was an active contributor and daily user and I really miss it

Today I saw this UNIX v4 PDP11 emulator (running simh in the browser) and decided to write an IO plugin for radare2 to load tapes. Here's the source in case you are curious about how tapes are structured and how to extend r2 with new features like IO backends […]

TIL /dev/tcp has never been a kernel thing, not even a real file or character device. Korn shell emulate it in the 80s and bash followed in the 90s. So it’s just a shell thing, not even part of posix. Inferno and plan9 have something similar to do networking with just the filesystem abstraction […]

NO BENDING OVER NO SKETCHERS HANDS FREE SLIPINS AIR COOLED MEMORY FDAM!!111! #angryrandomads

Why the Great Meme Reset will fail https://youtube.com/shorts/-wJKIEW4-Ks

Ready to update the year in all your copyright statements?

Finally I can doomscroll instagram reels in the terminal https://github.com/supreme-gg-gg/instagram-cli

I swear I just wanted to have a desktop-like keyboard on Android. Seems like hackerkeyboard is no longer an option here. Wtf is this shit, anysoft from fdroid seems like the way to go, even if the feeling is quite off

Today I saw this UNIX v4 PDP11 emulator (running simh in the browser) and decided to write an IO plugin for radare2 to load tapes. Here's the source in case you are curious about how tapes are structured and how to extend r2 with new features like IO backends […]

“The tiktok alternative for intelligent people”

It’s crazy to see the amount of features to edit pictures in Google Photos that require network.. they can clearly implement them all in local, but you are forced to send all your pictures to their servers soon or late. Coming from iOS, shit like this burns my nerves. Luckily f-droid comes with […]

Relax 😎! GPG is not OpenPGP! Yesterday, vulnerabilities were published https://gpg.fail but they don't affect #deltachat or any other #chatmail client because A) We never used #gnupg for anything; we use the modern #rustlang #openpgp implementation @rpgp, security audited multiple times. B) […]

Today is the spanish aprils fool. There’s a large story behind the All Saints day that involves religion, dead babies and the pun about innocents. So yeah just warning you not to trust all you read online today, specially if it’s in spanish

I bought an android tablet just because of the paper-like screen and pencil support, i was afraid of having just another gadget abandoned in the drawer, but the non glossy screen really makes a difference for reading or drawing and the metal touch feels great in hand.

Surprising that there are zero coding agents for Termux. And all the existing ones segfault because node and bun just don’t play well with musl or bionic. The only option left is codex-rs but there are no builds available and compiling rust in a phone is just not an option

Am I still in time for an xmas present? After some time coding that in a private repo i’m publishing r2hermes! A zero dependency library in pure C for parsing, disassembling, assembling, emulating and decompiling React Native binaries. Ships a cli program inspired in hbctool and all the […]

Merry 0xmss

git checkout hamster

In the beginning, there was Trance https://www.youtube.com/watch?v=hFSwWzxrqUA

I got the The Oracle archetype! https://infosec.exchange/@pancake/wrapstodon/2025/3e07db5c93f9496e #wrapstodon2025

For $5 I've vibecoded with codex-rs/gpt-5.2 different optimization passes for r2dec decompiler. The final output could be improved with some tweaks in the local variable analysis in the r2 side. But without any change there, the results are quite impressive. […] [Original post on infosec.exchange]

Tell me you live with cats at home without saying it

Insomnia, mosquitos, anxiety, cats fighting, migraine. Why all at once tonight?

Spoiler: nobody cares and everyone hates me in secret

The default io plugin of radare2 now supports fifo files, which means that you can use the funny bird operator: $ r2 <(o )

If I find some time I’ll try to write a blogpost on how i find a 0day (with exploit and patch included) in vp9 a month ago in just 1h following the very same coding workflows i use to develop r2. Yes, I’m so lazy to report or request a CVE and i have tons of more important tasks going on already.

Happy to see that ollama is taking care of the jetson boards and last updates dont require manual hacks from me to work

Just fixed a bug where varnames where ignored in the r2ghidra output. I may add more tests and enable this option by default

Instagram now have autodoomscroll

The unsloth guide to train and run models in your phone https://docs.unsloth.ai/new/deploy-llms-phone

The question without answer I found in Threads today. It really gets you thinking

macOS 26.3 is around the corner and I still didnt installed 26.0

Can you imagine r2 without memory leaks? Because i’m getting there 😎

Nobody expected that using a client side library for server side backends could end up in such mayhem of automated attacks with tons of trojanized servers from day 1 https://thehackernews.com/2025/12/react2shell-vulnerability-actively.html

This is the way. #bash #shell #scripting #vim https://youtu.be/2A4bs40scSo?si=8X5oAXBUo8T3rXyJ

Oh yeah the GF2P8AFFINEQB instruction was obviously self-explanatory https://www.youtube.com/watch?v=40tyEVx_umY

There’s always room to install one more coding agent. I bet this one will be the last. I swear

Rust is the new forkbomb. Cant say how many times i had to reboot my i7 32GB ubuntu because “cargo b” was just killing the whole system

If you are blaming or blessing AI without specifying which model, which prompts, which tools, which workflows and procedures and usecases it’s pretry clear that you have no idea what you are talking about

Few less lines in this refactoring

OpenAI’s real world practice experience on vibecoding the Sora Android app. I quite agree on all exposed here. In short: use AI as a tool and only in expert hands. https://openai.com/index/shipping-sora-for-android-with-codex/

Dropping this session here in case anyone needs some Acid https://music.youtube.com/watch?v=vmkGIHMgkaM

Today 3 more people were enlightened with r2ai. Always happy to hear some good results even from people that don’t know a single r2 command

Just tried gpt5.2 for some coding tasks and it was basically brilliant. Expensive but totally worth for the final code quality

OpenAI aren't talking about it yet, but it turns out they've adopted Anthropic's brilliant "skills" mechanism in a big way Skills are now live in both ChatGPT and their Codex CLI tool, I wrote up some detailed notes on how they work so far here: https://simonwillison.net/2025/Dec/12/openai-skills/