← Feed

Posts

• View post

  Does any #OpenBSD arm64 wizard know how to let simplefb know to use the higher resolution on a Lenovo ThinkPad T14S G6 (Snapdragon X1E) with the 2880 x 1800 option? My eyes would be most grateful… :flan_piteous:​

• View post

  Like it or not, the Binance hack is a work of art. Putting a backdoor in an Anthropic extension for VSCode which they knew was in use at Binance is simply perfect adversarial thinking. Chapeau.

• View post

  Caveat: if you are updating to #macOS 27 there is this lovely fscking Apple Stupidity "feature" which starts quantising *all your disk* so that Spotlight can give you "better answers". It has been going for over 24hrs for me and it is at 7.1% … the I/O is floored and you simply cannot run any I/O intensive tasks (e.g. Parallels). To find out the state of affairs you can use: plutil -extract SpotlightKnowledgeV2.embeddingGenComplete raw ~/Library/Preferences/com.apple.spotl...

• View post

  OK, these #Protectli systems are getting on my nerves. Can anyone suggest a reason why they would not cold boot into #OpenBSD unless the serial console cable is connected *and* live (i.e. I actually connect both ends of the cable)? They reboot fine, but cold boot hangs until I connect a serial cable. The Protectli runs Coreboot and is set to use the serial console.

• View post

  Should anyone need to be reminded, once again, from someone who has been doing offensive security for 40yrs: we hack the endpoints, we have always hacked the endpoints, we shall continue doing so. Why? It is this incredibly simple concept called ROI, return on investment, it is cheaper, much cheaper, to get the endpoint. Whether it is the phone, the app, the headphones, the microphone, the user being socially engineered. Nobody in his sane mind wakes up and goes "we need to crack the doub...

• View post

  @fj@mastodon.social @gbarbey@tooting.ch faudrait utiliser l’IA pour trouver ceux qui ne comprennent rien du sujet mais, malheureusement, faut entrainer l’IA et… oups la plus part des contenus du web sont écrits par ceux qui comprennent rien. Oh well.

• View post

  My Unix Archive mirror was slaughtered by LLMs overnight, it is on a 10G link, they were taking over 1Gbps in requests to the same files over and over again. I have Geo-blocked the whole of the US to stop them (with PF). This is ridiculous.

• View post

  @jpmens@mastodon.social ah, thank goodness, I thought that there might be something serious about it. Now that there's a logo I know my initial evaluation was correct. The first FIPS-140 certified local root exploit via the cryptography framework.

• View post

  I have to say the #OpenBSD patch 031¹ is rather subtle… I wonder how it was discovered. :flan_hacker:​ __ ¹ https://ftp.openbsd.org/pub/OpenBSD/patches/7.8/common/031_pgrp.patch.sig

• View post

  Is there a _good_ course on Azure forensics I can attend? Serious question, please don't reply with "Meditation" or "Become a Monk", etc. :flan_despair:​ P.S. Please not a beginner's course, assume I've been messing around in Unix kernels since 1986 and have a pretty decent forensic skill set in civilised operating systems and networks. I just appreciate the subtleties of the VMS heritage of the NT kernel but little above it :)

• View post

  An interesting research paper on bitflips in SRAM: Laurent Pichon. Laurent Le Brizoual, Edna Ferrucho Alvarez, Ludovic Claudepierre, "Electrical modelisation of a bitflip in SRAM cell memory induced by laser fault injection"¹, Microelectronics Reliability, Vol. 179, April 2026. An electrical model of the bitflip in SRAM under laser illumination simulating laser fault injection is proposed. This model is based on a bipolar phototransistor responsible of the amplified induced photocurr...

• View post

  Lessons learned from the Artemis 2 mission: 1. some genius thought sending Outlook to space was a good idea, 2. some other genius thought that Bluetooth in space was a good idea, 3. plumbers are in demand, even in space. :flan_molotov:​

• View post

  A colleague and good friend of mine, with whom I have worked for 32 years (seriously), is looking for a job in one of The Netherlands, Belgium, Germany and Switzerland. They are fluent in English, German and Dutch, speaks French too! German nationality. They have been managing complex IT projects for decades, are an excellent programmer and used to managing large development teams. Was doing "agile" when it was still called XP and pair programming (I used to make fun of them...