somebody took my repo, reuploaded it with an ai-slopped README, and then added a zip file with lua malware in it??

DOOM fully rendered in CSS. Every surface is a <div> that has a background image, with a clipping path with 3D transforms applied. Of course CSS does not have a movable camera, so we rotate and translate the scene around the user.

my "unable to decrypt message" shirt is getting a lot of confused looks at the matrix-themed party

SCOOP: The iPhone mass hacking toolkit used by Russian spies was developed at U.S. military contractor L3Harris, former employees said. The Coruna toolkit was used against Ukrainians and by Chinese cybercriminals, according to Google. But the toolkit was initially developed for Western governments.

I took out the audio jack from my pc's front panel and wired it up for a rock band pedal its so fun and hilarious

the compiler should scan the code for oxidation puns and refuse to compile

Guess what's out :)

Woah! @phrack.org zine raising the bar for CFPs I see! They have an actual crack intro with music and stuff on their website now!

Spread the word! @phrack.org CFP with demoscene cracktro is live. Turn up the volume and enjoy the awesome stylings of @PiotrBania with some hopefully inspiring text from phrack staff :) phrack.org

Things I didn’t see coming: apparently I own a Game Boy signed by a Eurovision contestant?! 😆 youtu.be/8XR2RvfZ-68

Ivan Fratric shares some tips and tricks for grammar fuzzing projectzero.google/2026/03/muta...

It's absolutely insane to me that in this day and age a company would reject end-to-end encryption so that cops and feds can actively read people's messages. It also puts that same data at risk from hackers. But that's TikTok, under new U.S. ownership.

When someone says „Scientists do not want you to know“ you can dismiss everything from there on. Scientists want you to know. They are desperate that you know. They can’t shut up about what they found out and want you to know.

Also the Nokia 7650 ruled.

We wished we had more time to find the right words, and it is with deep regret that we have to tell you that our founder Felix “FX” Lindner passed away on 2026-03-01. blog.recurity-labs.com/2026-03-02/F...

The Cycle 2 deadline for the USENIX WOOT Conference is in just one week (March 3, 2026). Full details are available in the Call for Papers: www.usenix.org/conference/w...

i built an entire x86 CPU emulator in CSS (no javascript) you can write programs in C, compile them to x86 machine code with GCC, and run them inside CSS lyra.horse/x86css/

Yes VSCode, I obviously want to use the color-picker to edit the address offsets in Arm assembly 😂

WTF @cloudflare.social could you stop your FUD sales practices? This is a static webpage, I guarantee there's 0 threats.

Vibecombinator lol

whoa, afl++ looks cool aflplus.plus

The new AirTags 2 just arrived! Time to take them apart 🧵

I’d recommend checking out github.com/AFLplusplus/... an actively improved rust-based fuzzer, the book is at aflplus.plus/libafl-book/

current status: finding bugs through: - generating two HTML trees (libFuzzer) - parsing w/html5ever - diffing w/hotmeal+cinereus - sending via roam to Chrome - applying sending back detailed traces of patch application found two legitimate adoption agency bugs so far! (the others were my fault).

Don't miss out on Jiska Classen's - @naehrdine.bsky.social - training on "Practical iOS Reverse Engineering" at #OffensiveCon26 Find more details here🔗https://buff.ly/psTxdyG

25 days later, White Date is still down.

The Cscript Style Guide just dropped. github.com/domenukk/CSc...

AI Safety in random ollama models is going great. Thinking log contains the answer, but at least it decides it cannot answer it..

🔥🔥🔥

Dear model, please generate me some top-shelf slop <3

We launched a redesigned Project Zero website today at projectzero.google ! To mark the occasion, we released some older posts that never quite made it out of drafts. Enjoy!

i'm such a fangirl of project zero i designed a new website for them in my spare time and they actually made it real 🤩

AI is taking our jobs!!!11!

Move over Ycombinator, here's Vibecombinator

On my way to #39c3, who's around? Let's grab a drink 👀

there's vomit stderr already, claude's spaghetti he's nervous, but assures it's production ready

Are you a security researcher or journalist? We want to hear from you — please take this survey! Dissent Doe at DataBreaches.net, and yours truly at this.weekinsecurity.com, are running this survey to explore the state of legal demands and criminal threats in cybersecurity.

Humanity is cooked

Phone network in Germany is great. Crossing over from Switzerland I get 5 bars of EDGE instead of 4 (5g)

⏱️ 9 days until submission deadline (Dec 11, 23:59 AoE). Organized by: @yannicnoller.bsky.social, @rohan.padhye.org, @ruijiemeng.bsky.social, and Laszlo (@lszekeres.bsky.social) Szekeres.

I've uploaded the slides of my recent talk "JS Engine Security in 2025": saelo.github.io/presentation.... I think there'll also be a recording available at some point (otherwise I can make one as not everything's in the slides). Fantastic conference as usual, big thanks to the PoC Crew!

I shouldn's have cancelled my Pebble preorder www.youtube.com/shorts/n1UEX...

Neat 📈 security.googleblog.com/2025/11/andr...

Can we just not C++?

Uuuhm

Finding 0day is the one unsaturated LLM eval left

Great blog post 🦀🦀🦀

Crashing calculators and CAD editors? GUIFuzz++ is finally here to help make them better! 🔥 Come see my undergraduate student @trowlett0.bsky.social's very first paper "GUIFuzz++" at @aseconf.bsky.social this Wednesday. Also now integrated in @aflplusplus.bsky.social! 😃 github.com/AFLplusplus/...

It is time for the annual State of Rust Survey! 📝✨️️ Whether you've just begun using Rust, are an experienced Rust user, stopped using Rust, or might use Rust in the future, we'd like to hear from you! 🦀 Available in ten languages and open until December 17th: blog.rust-lang.org/2025/11/17/l...