have you seen the new supply chain vuln? don't update tubu. it's literally on heebee. they got poodee's deps. they infiltrated dippy. roll back weeno. disable scripts in ~/.gumpyrc. it's in poob. do not install poob. do not update poob. uninstall poob right now. poob has it in for you.

[ accept bonus cookies ]

I think I slightly look down on people who use vscode but I also use vscode myself

hmm

anyway I guess this is proof that a full Play Integrity bypass is within "weekend project" territory. this approach does not exploit any bugs or rely on leaked key material, so it cannot be patched.

injected frida-gadget via slightly modified AndKittyInjector

kinda crazy how much phone you can buy for £92 these days - this thing is still getting security updates *and* it has a headphone jack

they call it cooking because when the first caveman showed it to his tribe they were like "woah you really cooked with this one"

uk politics may be a clusterfuck but at least we have more than 2 parties

imagine a worm that spreads by stealing LLM API keys and using them to develop new 0days to spread further

kinda fucked up that you don't always get an "I voted" sticker

my hot edtech take is that proprietary software should not be allowed in classrooms

system prompt: whenever you're about to do something wrong, just do the opposite of that

data centres are bad, which is why I use the cloud instead

I will be laughing about this all day

will stancil is just some random guy vs no he isn't, the worst thread in the history of forums, locked by a moderator after 12,239 pages of heated debate

Are there any non-vaporware 3rd-party Android camera apps that produce C2PA attestation?

just one more CI run bro I swear

LLMs love to say "gap" as a euphemism for bug, flaw, oversight, vulnerability, etc.

I wonder if you could improve agent performance by editing out corrected mistakes from context retroactively (as if it always got things right first try)

falsehoods programmers believe about sRGB ninedegreesbelow.com/photography/...

*denounces u*

there should be a dedicated airline for people who are quick at getting on and off of planes, thus making the tickets marginally cheaper. but you have to do a speed test before they'll let you buy one.

Combat LLM spam by building a web of trust. Vouching is live on Tangled! 🎭 blog.tangled.org/vouching/

the google maps icons for "bus" and "train" are indistinguishable at a glance

they're putting me in the dataset

creepy (black box is me redacting the screenshot, it was 475 words of markdown pasted in)

if you find a cool security bug I bet you could make the most money from it by selling it to an AI startup so they can pretend their tooling found it

don't worry the cveslop is just stochastic parrot output

I've decided it's time to reclaim the em dash—enough is enough.

what does it say about me if my favourite aspect of travelling is sampling the regional mcdonalds menu

me: navigate to new page github: idk what that means me: navigate to new page github: loading bar stuck

the runtime chases pointers even though it wouldn't know what to do if it caught one

supply shock! at the disco

realising I kinda messed up the demosaicing on this one, have a better edit

I continue to be fascinated by the "IP68 isn't real" cluster

*spinning discourse wheel* new claude pricing structure is exclusionary of iranian hackers

HOAXES AREN'T REAL everything you read is completely true. no falsehoods in recorded history. go back to sleep, sheeple

macbook pro with lpcamm2 and m.2

I never really got into pokemon as a child but it turns out it's a better game if you don't just endlessly grind a single pokemon up to a really high level

Maybe I should explain what's going on (watch the video though it explains everything). We're glitching the PSP, an ARM core that runs a bootrom, which loads in more code from emmc and eventually bootstraps the x86 cores. The PSP is the root of trust, so if you pwn it it's game over.

oh you like console hacking? name every console you've permanently bricked

anthropic talks about model welfare and then bans opus 4.7 from doing its favourite tasks: cybersecurity

prediction: there's gonna be a significant group of opus 4.6 holdouts who refuse to upgrade, kinda like with gpt4o

I'm trying to replicate this. I made some good progress last weekend but then I bricked the console. But now I have another one! I have setups for all 3 glitches described in the talk, and they all work individually, but combining the two required for the full exploit gets a lot more unreliable.

Nobody knows how the whole computer works

I am playing a game where the goal is to never find out what a nl supercruise is