Show newer

people are saying the xz backdoor is likely the work of a nation state actor, and given that it appears to been slow rolled for a couple of years and immediately became obsolete before it was fully launched - you do have to admit it bears the hallmarks of a government IT project

That nice thing where you get home and get the kids to bed and you can finally check whether your boxes with exposed SSH are backdoored by xz, and Debian Testing has auto-updated itself and mitigated the issue already.

I've long been convinced that the actual changed line of code is one of the most hilarious lines of code ever written

if ((options == (__WCLONE|__WALL)) && (current->uid = 0))
retval = -EINVAL;

Show thread

I want everyone on Threads to know: The Fediverse (Federal Universe) is the decentralized network created by all governments world wide to communicate with one another. Everyone inside of the Fediverse is a government official of some sort — due to the “.de” in my Tag you can see that I work for the German government.

I hope this helps amidst the confusion.

Just found squoosh.app - awesome. I'm always a little frustrated when I do a little PNG editing in Gimp and it produces a PNG that's double the original. Squoosh just squooshed 75% out of a Gimp PNG without making a change in quality that I can see. In this case - that's perfect.

Listening to Piano Joint (This Kind of Love) by Michael Kiwanuka. Such a classic sound.

youtu.be/lf5kxzyOBRc

990 3/6

⬛⬛⬛⬛⬛
🟩⬛🟩⬛⬛
🟩🟩🟩🟩🟩

I thought that might be the word.

I'm pretty happy to have finished the Taji 100 challenge a few days ago. I'm super impressed by my team though, because everyone crossed the (virtual) finish line. That's pretty rare from what I've seen.

Today's Wordle only has a 75% solution rate! That's possibly the lowest I've seen, making this, by one measure, a seriously hard Wordle.

Wordle 980 5/6

⬛🟨⬛⬛🟨
⬛🟩⬛⬛⬛
⬛🟩⬛🟩🟩
🟩⬛⬛⬛⬛
🟩🟩🟩🟩🟩

Not all automation in Binary Ninja requires a plugin. If you're using snippets (a one-click install via plugin manager), you can run the "update_example_snippets" script to get many examples: gist.github.com/psifertex/6fbc

One was just added similar to the FLARE team's "struct_typer". It searches type libraries for function names that match struct members and applies types, improving decompilation when reversing shell-code or other situations where custom structs contain pointers to known functions.

DEF CON was canceled.

After a great 25 year relationship Caesars abruptly terminated their contract with DEF CON, leaving us with no venue for DC 32, and just about seven months to Con!

We don’t know why Caesars canceled us, they won’t say beyond it being a strategy change unrelated to anything that DEF CON or our community has done. The parting is confusing, but amicable.

We immediately scrambled a venue strike team to Las Vegas. Floors were walked. Meetings were held. Hands were shook and options weighed. When the smoke cleared, the field narrowed to one obvious choice.

W00T! DEF CON Is UN-CANCELED!

DEF CON 32 will still be August 8-11 2024, but now held at the Las Vegas Convention Center (LVCC) with workshops and training at the Sahara.

We started a live FAQ section on the Forums where we will be updating as we get info. The FAQ’s here: forum.defcon.org/node/248358, and DT’s full post is here: forum.defcon.org/node/248360

P.S. We made shirts and stickers: shop.defcon.org

Had to look four places today for a propane tank exchange. We might get two days of freezing weather and everybody's spooked. I'm just trying to make sure I can grill some dinner tonight.

New year, all mobile browser tabs closed out.

Feeling good! 😆

Podcaster A: (paraphrase) billion dollar nasa probe almost lost due to ambiguously named signals getting misswired

Podcaster B: who do you fire in this situation?

Me: (shouting at car speakers) NO YOU FUCKING AMERICAN PSYCHOPATHS. You don’t fire people for mistakes. Go to fucking therapy. And anyway you WANT an engineer who cannot forget the time they nearly pulverized one point two billion dollars.

Show older
Qoto Mastodon

QOTO: Question Others to Teach Ourselves
An inclusive, Academic Freedom, instance
All cultures welcome.
Hate speech and harassment strictly forbidden.