Looks like BlueHatIL talks are online now, so here’s my talk for anyone who wanted to learn about the latest episode of KASLR and couldn’t make it: www.youtube.com/watch?v=Dk2r...

AI search engines are the future

Microsoft threat actor found in the wild

For about a year now, WdBoot.sys essentially does nothing. Microsoft installs 2 versions: - \System32\drivers\wdboot.sys is the “full”, functional version - \System32\drivers\wd\wdboot.sys is the “empty” version, which is the one being updated and loaded. Does anyone know the reason behind this?

Oh look they’re going to vibe program the SSA systems. I’m sure this will be perfectly fine and will cause no issues.

This cute little thing sounds like a witch laughing in a dark forest and has tried to kill me twice so far

I was told Australia is scary but didn’t expect to land and immediately get threatened by a public bus

"Zen and the Art of Microcode Hacking" Tragic signature bypass enables custom microcode loading on AMD processors, and a tool to do it. The blog is extremely well written and provides concise explanations of topics mentioned + plenty of resources! A must read. bughunters.google.com/blog/5424842...

Small anecdote about thread priorities and throttling on Windows 11: I’m downloading a large file. Estimated time left: 28 minutes. Open notepad, put it as the front window. Download time left: 57 minutes. Close notepad, browser back in front. Time left: 27 minutes.

I’m not saying you definitely have to go to @BlueHatIL this year, I’m just letting you know it’s free, by the beach and I’ll be there dropping kernel pointers to anyone who asks nicely

I work with cool people who do cool things: www.eff.org/deeplinks/20...

Celebrating flat fuck Friday

Going to a Rocky Horror show in a quiet UK town and the crowd is almost entirely old British people so I’m expecting an incredible time

🎉🎉

More baking!

Every single Canadian stereotype is correct. It is -4c (24f) today and I've seen one people walking around in shorts and another one in a short-sleeved t-shirt. Not a single person is wearing a hat.

Did a bit of baking this weekend

Good morning

Does anyone know companies hiring for entry level roles (in Canada/remote)? And I mean *real* entry level, not degree + 2 certs + 3 years experience “entry level”. Not just cybersecurity, any entry level roles at all, in any area.

Yesterday Microsoft fixed 6 kernel address leaks that I reported CVE-2025-21316 CVE-2025-21317 CVE-2025-21318 CVE-2025-21319 CVE-2025-21320 CVE-2025-21321

The fact those toggles have a different design is driving me crazy

I see someone is working through their backlog

My grandma made this dinosaur tail vase

You should all see this photo that my phone just reminded me of

Important news: Microsoft is working to bring SMAP into Windows www.youtube.com/watch?v=-3jx... Great talk by Joe Bialek from MORSE team

Sudden eye infection and doctor visit is not how I planned to spend my Sunday morning. But it does mean I can spoil myself with the world’s largest pizza slice and not feel guilty about it.

My summer associate Michael Lin wrote a powershell script to help you find out which vulnerable/malicious drivers from loldrivers.io will successfully load on your HVCI-enabled system: github.com/trailofbits/...

Infosec, circa 2023, colorized

Friend and I were walking around when we heard a very loud bug. Started digging in the dirt to try and find it. Within 5 minutes 2 separate groups of men got curious and joined us. Is this how men make friends?

As of build 25915 (latest Preview) all known API based kernel address leaks no longer work unless requested by a process with SeDebugPrivilege (only available to admin processes)

Guess who got to visit an erupting volcano today

My new hair got my barista so distracted he forgot how to do latte art. I’m gonna count it as a compliment

When you stare long enough into the void of tax forms, eventually it’ll stare back and ask why you still haven’t filed your taxes for 2021

Looks like two major conferences in a month is more than I can handle. Conference fatigue is intense.

Cat

To one day be as confident as the student who approached me over break with a speech on how I can improve my class…

This coffee shop sticker wall is across from the anti capitalist art wall

Achievement unlocked: made an open source C++ project compile

Finally got the chance to try out SymbolBuilder and it's incredible. Here are some WNF callbacks generated with it. Symbol builder code and instructions are here: github.com/microsoft/WinD…

Good morning, here is a pile of kittens on a trampoline

This cat is living its best life

This baby deer is so tiny and so good at pretending to be a rock