Pinned toot

Introducing ZeroBB! A minimalistic forum (bulletin board) on the Tor network. If you have news to report, ideas to share, dislike moderation, and prefer to be anonymous, then this is for you. is based on ZeroBin which is an open-source online paste tool where the server has zero knowledge of pasted data. The data is encrypted/decrypted in the browser using 256 bits .

gd6is466quuhsgzbztyv4sjswdhgfi

You need Tor to access this URL. Boosts are welcome.

modrobert boosted

In other words. If someone wasn't aware of that yet. #radare2 turns 18 this year. So it means that it can legally drink alcohol, go to prison, vote in the upcoming elections, drive heavy machines and enter a casino. Not necessarily in this order.

modrobert boosted
modrobert boosted
modrobert boosted

want a serious macOS security flaw that has been public for a decade+? sshd_config gets rewritten every time you install an update which enables password authentication. really hoping this gets fixed one day
discussions.apple.com/thread/2

modrobert boosted

The backdoor author was working with #xz project for 2 years, and actively fixed "valgrind problems" caused by his backdoor. He also tried to push the backdoor to Fedora 40 and 41.

To quote the post at news.ycombinator.com/item?id=3 :
"He has been part of the xz project for 2 years, adding all sorts of binary test files, and to be honest with this level of sophistication I would be suspicious of even older versions of xz until proven otherwise."
#infosec #cybersecurity #backdoor #liblzma

"Red Hat Product Security learned that the latest versions of the “xz” tools and libraries contain malicious code that appears to be intended to allow unauthorized access. Specifically, this code is present in versions 5.6.0 and 5.6.1 of the libraries."

----

"Under the right circumstances this interference could potentially enable a malicious actor to break sshd authentication and gain unauthorized access to the entire system remotely."

redhat.com/en/blog/urgent-secu

modrobert boosted

There is a lot of prehistoric cryptography still out there. You just don’t realize it, but you depend on it every day.

modrobert boosted
modrobert boosted

#bird #crow #smart #spikes

These crows removing the bird-prevention spikes from this new condo. They are not having it!

youtube.com/watch?v=_Bn9FONAkU

modrobert boosted

In 2022, Tom Lehrer released all his songs, lyrics and works to the public domain, an amazing move. While checking on the site, I found out he silently released more material in September of 2023 - a DAT tape of his work with an orchestra and some solo piano takes that are not elsewhere. If you're a Lehrer fan, quite a surprise.

archive.org/details/Tom_Lehrer

modrobert boosted

We are happy to tell you that we accept your proposal "Broom not included: curling the modern way" in the Network devroom at #FOSDEM 2024.

It looks like I will blab at FOSDEM again.

"In this vulnerability disclosure report, we discuss details of 5Ghoul – a family of implementation-level 5G vulnerabilities. Such a family of vulnerabilities are present in the firmware implementation of 5G mobile network modems from major chipset vendors i.e., Qualcomm and MediaTek. Consequently, many 5G-capable commercial products such as smartphones, Customer-premises Equipment (CPE) routers and USB modems are potentially impacted due to the employment of vulnerable 5G modems in such products."
asset-group.github.io/disclosu

modrobert boosted

I can finally reveal some research I've been involved with over the past year or so.

We (@redford, @mrtick and I) have reverse engineered the PLC code of NEWAG Impuls EMUs. These trains were locking up for arbitrary reasons after being serviced at third-party workshops. The manufacturer argued that this was because of malpractice by these workshops, and that they should be serviced by them instead of third parti
es.

1/4

modrobert boosted

You probably never figured the Caribbean island of Anguilla would be a hotbed of AI activity, but here we are. One of the more interesting press releases I received this morning:

"Due to the rise in popularity of Artificial Intelligence (AI), .ai domain registration figures have skyrocketed. The small island of Anguilla, whose government owns the country code top-level domain (ccTLD) .ai, has had a huge spell of luck after reaping significant profits amid this tech-driven trend."

"Anguilla’s government is earning around $3 million every month from registrations, which has almost surpassed the revenue generated from all goods and services, from all of their shops and restaurants each month of the year so far. Should this trend persist, projections suggest a potential additional revenue of up to $45 million by the end of 2024."

"Although this presents a significant opportunity for a tiny island of only 16,000 inhabitants, such reliance on a single revenue stream poses potential risks to the nation’s economic prospects."

modrobert boosted
modrobert boosted

Always amazes me to find quotes like this one from a coder like Dan Scott: "While I was learning and coding, I was always in awe of the crackers. Cracking encrypted code, rearranging disk Content to find space for a cracktro, one filing games, squeezing 2 disk games onto 1 disk etc.. Seemed like voodoo to me" (eab.abime.net/showthread.php?p)

modrobert boosted

Did you know that there is full coverage of the C radare2 api for Rust and Python autogenerated with bindgen and ctypeslib respectively? It’s not idiomatic and certainly needs some maintainance and cosmetic work but the hard part is done. github.com/radareorg/radare2-b

Show more
Qoto Mastodon

QOTO: Question Others to Teach Ourselves
An inclusive, Academic Freedom, instance
All cultures welcome.
Hate speech and harassment strictly forbidden.