← Feed

Posts

• View post

  Why do coders like to interact with LLMs from terminal apps, not from web interfaces or Electron wrappers? Antigravity/Codex/Claude Code/Copilot all offer web and Desktop (Electron) apps in addition to their CLI versions. I'm... not a very good programmer, so I spend most of my time asking the LLM to explain what the generated code does. This means lots of reading, copying, and pasting - all more easily done in the web UI than from the terminal UI.

• View post

  Had a go at making koiTerminal build in Android Studio, since I want to play with Android Virtualization Framework but don't want to build AOSP.

• View post

  Still reading through gracecondition’s DirtySlide writeup (https://gracecondition.github.io/posts/dirtyslide/). The writeup says it’s only usable in a macOS virtual machine - not a physical macOS/iOS device. Has anyone looked further into this? The writeup gives two reasons: Triggering 536 in the vulnerable context needs an application sandbox bypass. iOS does support residing shared caches: https://projectzero.google/2021/01/a-look-at-imessage-in-ios-14.html#:~:text=for%203rd%20party%20app...

• View post

  Figma runs a local server with a valid *signed* SSL certificate for https://figmadaemon.com:44960 (resolves to 127.0.0.1) ?! https://gist.github.com/Willamin/dedc1de2d1d5d4e8db4e49b25007a34c I thought this was not allowed? (https://groups.google.com/g/mozilla.dev.security.policy/c/eV89JXcsBC0/m/wsj5zpbbAQAJ?pli=1) What certificate authority allowed this?! > Comodo Ah

• View post

  32 GB of RAM? We're going to need a miracle. ██ENG███ █OOMSDAY

• View post

  Rapid7 got a stack smash on... a Brother laser printer https://www.rapid7.com/blog/post/multiple-brother-devices-multiple-vulnerabilities-fixed/ https://www.rapid7.com/cdn/assets/blt6495b3c6adf2867f/685aa980a26c5e2b1026969c/vulnerability-disclosure-whitepaper.pdf https://bsky.app/profile/stephenfewer.bsky.social/post/3lsg7ubf3ek2h

• View post

  wint @dril every generation deserves at least 5 ponies named "Twilight Sparkle"

• View post

  It-It's not like I like you or '1'='1'

• View post

  Due to misbehaving DRM, Intel forced to power gate the PG&E cores

• View post

  Diffing macOS 26.5.1 against 26.5.2: There’s several diffs in the virtual memory subsystem - that sure sounds like the two kernel memory corruption CVEs. Now, can someone let me know which CVE matches which? vm_map_remap: “downgrade JIT for entry” https://github.com/blacktop/ipsw-diffs/blob/20358f9cb214e9bca69d4b6c6bc5961c56c31666/26_5_1_23F81_vs_26_5_2_23F84/KEXTS/com.apple.kernel.md?plain=1#L76vm_map_copyout_internal: also has “downgrade JIT for entry”vm_map_msync: there’s now a few new checks...

• View post

  When did Ghidra start supporting reading DWARF debug data for macOS kernels? I got a surprise when Ghidra started showing decompiles with variable names.

• View post

  Has anyone gotten BinDiff/BinExport to work on Ghidra 12.0.4? I downloaded the latest build from the Github action (https://github.com/google/binexport/actions/runs/25504373565), extracted it, imported it to Ghidra, but File -> Export Program doesn't show BinExport format.

• View post

  Satoshi Nakamoto: Appeared in 2008 with no prior historyPublished the Bitcoin whitepaper on October 31, 2008Steped down from Bitcoin development on December 12, 2010 and was never heard from againSunset Shimmer: Arrived in our world from Equestria, 4 years before the start of My Little Pony: Equestria Girls (a movie first revealed in a trademark application in 2012) (When the movie starts, Sunset had already won 3 Fall Formal crowns, one per year, and is about to win her fourth)The Fall Forma...

• View post

  Daring Fireball reported on a new macOS root exploit from Calif: https://daringfireball.net/linked/2026/05/14/m5-mie-exploit https://blog.calif.io/p/first-public-kernel-memory-corruption Their demo video has: errno=72(expected) feature=1 That’s EBADRPC, So it’s in NFS, and is likely not exploitable on iOS, which doesn’t have NFS. Aww.

• View post

  A Windows zero day in transactional NTFS? usb stick says trans writes

• View post

  Huh, macOS 15.7.7 removes MACH_VOUCHER_ATTR_KEY_TEST from the kernel. https://github.com/apple-oss-distributions/xnu/blob/5c306bec31e314fa4d8bbdafb2f6f5a6b7e7b291/osfmk/ipc/ipc_voucher.c#L2761 According to the comments, iOS already removed the whole voucher subsystem, anyways, so it’s not interesting - but I wonder why they had something named _TEST compiled into a production kernel…

• View post

  Still diffing macOS 15.7.5 vs 15.7.7: On 15.7.7, msgctl(IPC_SET), after getting the message queue and computing ipcperm, no longer drops its lock during the copyin: https://github.com/apple-oss-distributions/xnu/blob/f6217f891ac0bb64f3d375211650a4c1ff8ca1ea/bsd/kern/sysv_msg.c#L492 So maybe this is the race condition of CVE-2026-28986?

• View post

  There is no electro-motive division

• View post

  "Mastodon is just like email." Like email? So I use Microsoft Outlook? "Use WHAT" (Tools -> Account Settings -> RSS Feeds -> New -> https://mastodon.social/@Gargron.rss)

• View post

  Kaspersky researchers just found and presented a Snapdragon 410/210/617 bootrom exploit - CVE-2026-25262 in this month’s Qualcomm security bulletin. It’s well known that every forensics tool supported exploiting those SoCs from the bootrom, but for 9 years, nobody knew how they were doing it. This is some amazing research that finally solves the mystery.. I’m sure the BananaHackers community of Snapdragon 210 flip phone modders will find a use for this.

• View post

  If our universe is a computer simulation, then all those "Can it run Doom?" demos actually all ran on the same computer

• View post

  Broadcom acquires the virtualization platform simulating our universe

• View post

  Want to tell a salesperson and an engineer apart? Ask them to pronounce "codesign"

• View post

  I think I understand why the USB exploit analyzed by Amnesty International uses both a virtual Extigy sound card and a FastTrackPro sound card. https://securitylab.amnesty.org/latest/2025/02/cellebrite-zero-day-exploit-used-to-target-phone-of-serbian-student-activist/ It took me 6 weeks to notice: in the logs, the Extigy and the FastTrackPro sound cards are not two virtual devices. They're one device with two interfaces. Which explains why the device "morphs": - it...

• View post

  At long last, we have stolen the macOS from classic kernel extension Dont Steal Mac OS.kext

• View post

  James Bond's "License to Kill" approved by Debian as a Free Software license

• View post

  Boot Device Selection/Masochism

• View post

  wen eta KFD for iOS 26.0.1??????? Seriously, any iOS experts looked into if CVE-2025-43520 from the DarkSword vulns could be used for KFD/MacDirtyCow-style file modding? https://cloud.google.com/blog/topics/threat-intelligence/darksword-ios-exploit-chain

• View post

  Sunday is the 10-year anniversary of the npm left-pad incident.

• View post

  I'm still amused that the Linux distro for Gamers is a Fedora remix. You'd expect, like, Gentoo, or at least Arch like SteamOS - but no, Bazzite is a Fedora Atomic distro.