After 6 years of waiting we are promised to finally be able to reliably open terminals in Windows VMs: github.com -> #progress Original->

Got reminded of this epic GeoHot talk: USENIX Enigma 2016 - Timeless Debugging www.youtube.com -> Original->

Team TESO CVS archive github.com -> Original->

[RSS] NSA, Theft, and the Original Quantum Lazlo jericho.blog -> Original->

It seems Cargo is the only software on Earth that hard fails if it can't find CRL info Original->

Worst part is they may be technically right Original->

[RSS] It rather involved being on the other side of the airtight hatchway: Tricking(?) a program into reading files devblogs.microsoft.com -> Original->

Amazingly, it's weekend and I kind of miss coding Rust. If this is not Stockholm syndrome I don't know what is. Anyway, I promised to finish my next #REshare exporter in a week two weeks ago so let's get back to Python! Original->

[RSS] Building a Custom Architecture and Platform: Part 1 binary.ninja -> #BinaryNinja Original->

[RSS] "They even thanked the coders for giving them such a difficult challenge." unsung.aresluna.org -> On how Spyro PlayStation edition (2000) was cracked. Original->

[RSS] Reverse engineering the Creative Katana V2X soundbar to be able to control it from Linux blog.nns.ee -> Original->

[RSS] Discovery & Analysis of CVE-2025-29969 www.safebreach.com -> (Windows MS-EVEN RPC Remote Code Execution Vulnerability) Original->

[RSS] OpenCFD OpenFOAM Code Stream directive arbitrary code execution vulnerability talosintelligence.com -> Original->

[RSS] Mailbag: URLs as UI unsung.aresluna.org -> Original->

[RSS] "Good enough" emulation: Fuzzing a single thread to uncover vulnerabilities blog.talosintelligence.com -> Original->

[RSS] CVE-2026-20841: Arbitrary Code Execution in the Windows Notepad www.thezdi.com -> ZDI analysis of the notorious vuln Original->

Paged Out zine #8 pagedout.institute -> Original->

So the apparent concurrency bug I've been chasing for the last couple of days turned out to be: - a thread panic!ing - because it couldn't allocate a trivial amount of memory - probably related to the fact that when I passed a struct to a library, the library apparently decided 1/2

[RSS] Carelessness versus craftsmanship in cryptography blog.trailofbits.com -> Original->

So I spent way too much time debugging today and this beer made me sentimental so here's a software success story: I use motibro.com to sign up for trainings and I think they became SW Buddha (or whatever): - The webapp just works - AFAIK there is no mobile app, but mobile view 1/3

This is me, arguing with rustc about various ways of setting one bit in memory: www.youtube.com -> Original->

Today in This Should Be Easy But in #Rust It Apparently Isn't: how do I encapsulate the widget initialization (without triggering E0515) in this example, so it becomes reusable? play.rust-lang.org -> Original->

[RSS] Cryptographic Issues in Matrix's Rust Library Vodozemac soatok.blog -> Original->

[RSS] Building a Secure Electron Auto-Updater blog.doyensec.com -> Original->

#wh40k #windows Original->

OPNSense managed to destroy itself during an update, still people wonder why companies buy Fortinet... Original->

What stage of #enshittification is it when Amazon adds a "Download Problems" option to it's Refund menu instead of fixing their system so people can download their digital purchases? (Would it be ironic if I supported Anna's Archive with Amazon gift cards after I downloaded the 1/2

[RSS] When Audits Fail Part 2: From Pre-Auth SSRF to RCE in TRUfusion Enterprise (CVE-2025-32355, CVE-2025-59793) www.rcesecurity.com -> Original->

Naming things is freaking hard... Original->

[RSS] vitoplantamura/BugChecker: SoftICE-like kernel debugger for Windows 11 github.com -> Original->

[RSS] IDA Pro 9.3 released docs.hex-rays.com -> Original->

In a world where proper keyword #search is excommunicated and engines refuse to index content based on arbitrary criteria, grep.app at least allows us to find and look at the source code: grep.app -> Original->

From Winslop release notes: "I do not own or operate winslop[.]com and I'm not affiliated with whoever registered it. Even if it currently redirects to this GitHub repo, a third-party domain can be changed at any time (phishing, fake releases, malware links)." 1/2

libpng CVE-2026-25646: Heap buffer overflow in `png_set_quantize` github.com -> Original->

Pillow CVE 2021-25289: Fix OOB write with invalid tile extents pillow.readthedocs.io -> Original->

Check Point Harmony Local Privilege Escalation (CVE-2025-9142) blog.amberwolf.com -> /via @badsectorlabs Original->

[RSS] Strengthening the Foundation: A Joint Security Review of Intel TDX 1.5 bughunters.google.com -> Original->

[RSS] Shellcode as 'XML' tmpest.dev -> Original->

[RSS] Intego X9: When your macOS antivirus becomes your enemy blog.quarkslab.com -> Original->

#Ghidra 12.0.3 released: github.com -> Looks like a fix to a cute little vulnerability too: it seems you could make users execute your commands via @execute annotations in Listings :) Original->

#Keycloak CVE-2026-1529: "lack of cryptographic signature verification allows the attacker to successfully self-register into an unauthorized organization, leading to unauthorized access." access.redhat.com -> #JWT Original->

Rust Crate: It's very easy to use me, here's a definition: ... Me: I don't even know how to type half of these characters :S Original->

[RSS] CVE-2026-2103 - Infor Syteline ERP - Keys Included: No Assembly Required blog.blacklanternsecurity.com -> Original->

[RSS] Windows containers network isolation RE safesws.github.io -> Original->

git ass Original->

[RSS] Memory Integrity Enforcement (MIE) on iOS Deep Dive - Part 1 - 8kSec 8ksec.io -> Original->

Original->

Coincidentally, keyboard suddenly stopped working in LibreOffice, so I'm sorry but I'm off to GDocs! Original->

It's great to see #EU open tech initiatives popping up, but somehow it feels like we are just **terrible** at making ourselves visible, esp. compared to US. Like how is anyone supposed find this (otherwise great) project - named "docs" - using a search engine? 1/2

[RSS] Pickling the Mailbox: A Deep Dive into CVE-2025-20393 starlabs.sg -> Original->