Pinned post

#introduction 

# This is a shell archive. Save it in a file, remove anything before
# this line, and then unpack it by entering "sh file". Note, it may
# create directories; files and directories will be owned by you and
# have default permissions.
#
# This archive contains:
#
# introduction.uu
#
echo x - introduction.uu
sed 's/^X//' >introduction.uu << 'ceed7c5dd63177fdc63f505a0fd23268'
Xbegin-base64 644 introduction.txt.bz2
XQlpoOTFBWSZTWfJafNMAAcvfgAAQWOf/8D/u3+q/79/gYAeEUE+eLa2OO7oNzjumOGVuGgmgSeg1
XGjVPJlNGm0mg0aAbU02k09INT0BASBpTU/U0amTIDRoANGjQZDmEwCYATCYTTAAAJk00DCUymiZT
XUbSNJP0nqMpgA9RBho0mmaNA5hMAmAEwmE0wAACZNNAwlNIBBTYhpD0pP0iHlPSDygzU9Q0AOMyB
XSRfQaH9jK3xQD5ngvFSaGFZOKf1W2aeR8MXtfx85R4cXBvHBnHGslkU4b1Q/4o8lkEqFFo3wCJer
Xtc8Ju/1dbW0sGabjndFdbGfet6Qa352iNKd+Ct6uWJfbkNB1FgnI8n1mYRCfKmcQImVbn7FjKZjX
X+IrLftE/tVRWFrnqu+2gnFLGQh9/42hscZbGoy7DfaLN59gpw7OCOVeY7JskFXVFrnbLVDDBhkRD
XCF9TFt+blciLbphCDMWOcK7V24E5VbFNQiYjtFk61MZtrOz4dxV6qFfZFBWEIPw9Ke4+LV/NYWxE
XtHHM8r9GrWV6W5PXribYJvF69/rrBribi/C8z6DLJu4Q34cSeRB6oF0kL5FHCtngOa9z21oQoKFr
XkZtBePhCOjbrJfVYmDGCCCTUOCVqKvCAzVNvDa9tXv0+zwmuPQB9Avz3hCdvMB+z49W01x6UJ40X
XIoxp4O3nF+WVJWCw8o6GFf6I/qyl+qzPdY9DyVb+DYGOysdcdqgpQubXTrkQHP685A+jxZj1JMHT
XLyYFB3GF+Xme9eiPRx13wlKR5ET0pU/sO8m6V2tuv/IEj1Q6KCMLxz80QlAtW0ydxwWXKVKejp50
XdKIN2s2nYPTgxppI+iGjr+6GNuKzlR/DsNZ21iy71R17gdVChiV9ZIGkoFrG1jtfYC1pVrQd2GCX
XMFi/y7Vxuh8WXvFk1cW5N8kYoIy6v59De3tn7kbLmvJRTrFeSikd57/D5/Hx/b3e+UoHJoPlKXPm

Holy shit.

This guy takes a couple of minutes of audio from a security camera anywhere in the US, with no clues from the video whatsoever, and finds the exact spot where it was recorded.

How?

By correlating the Doppler curve sounds from two almost inaudible planes passing by with public ADS-B flight data.

youtube.com/watch?v=UytYrhYLOKI (29 min)

I think this is the #OSINT video of the year.

Everyone so worried about PHP and MCTP and we end up with "´all your fridge are belong to us."

As if we didn't get a warning shot just a few weeks ago, nobody thought to have a look at the other fridge controller manufacturers? Really?

:flan_XD:​

We have reached the 400€ mark of monthly recurring revenue from subscriptions for #Git hosting. Thanks everyone! :flan_flowers:

Like it or not, the Binance hack is a work of art.

Putting a backdoor in an Anthropic extension for VSCode which they knew was in use at Binance is simply perfect adversarial thinking.

Chapeau.

"So, why did you change from Terminal to Ghostty?"

"Because Terminal does not keep the window size between reboots or even app close & re-open."

Yes, a terminal window which is set to 80x60 and reopens as 78x53 or 82x65 pisses me off no end… it has been broken since OS X Tiger.

:flan_molotov:​

Nobody, literally nobody, I know has ever wanted a touch screen on their laptops. Some have used those ThinkPads which turn into a tablet because they were useful for their job, but poking at a screen? No thank you.

Steve Jobs is rolling the in grave.

great to see the print version available for all. 40 years of @phrack and here's to so many more

New: Proton, the company behind ProtonMail, emailed staff to say it will be 're-interviewing' workers about how they use AI. The implication is, if you're not using AI, or won't learn, you may lose your job. “These re-interviews are consequential,” a leaked email seen by 404 Media reads.

404media.co/proton-to-re-inter

Public Service Announcement: the macOS 27.2 upgrade breaks the previous tricks for stopping it from going off to create embeddings for your whole disk :(

:flan_molotov:​

For the umpteenth time, the upgrade between versions is marvellously smooth.

Thank you all for keeping it so wonderful and pleasant to run an OpenBSD machine.

:flan_aww:

One day someone will explain to me why the idiots running domains for state.xx.us and gov have decided that it is a good security measure to deny DNS requests from anything outside the USofA.

You cannot even use Quad9 or Cloudflare as a forwarder in your unbound configuration as they block those too.

I know DNS is hard, some of us who have been around since BIND4 have seen all sorts of horrors but, for Cthulhu's sake, do we really have to fragment the Internet like this?

:flan_molotov:

P.S. No, I don't need it to be explained to me, it is called "isolationism" and other fine words which are somewhat less diplomatic. I also realise this simply fuels the fires under "let's have isolated private Internets" which certain rather autocratic countries like so much. Oh, wait…

Dear BSD community,

I've got to reduce my number of books so here are some BSD related books I'd like to give away for free.

If you're in the EU and would like to have one, please reply. Can send them to you if you pay the shipping costs

#OpenBSD #BSD #FreeBSD #NetBSD

EDIT: They changed owner :)

Russia just performed another orbital manœuvre to get even closer to an ICEYE Synthetic Aperture Radar satellite used by Ukraine.

Bart Hendrickx: “In the past two days or so, Cosmos-2612 has made a further orbit adjustment which has now brought it in the immediate vicinity of the ICEYE satellite.
According to the latest TLE sets, the Russian satellite is now just about 1.5 km from ICEYE and getting closer.”
satobs.org/seesat/Oct-2026/005

Show thread

In a recent study on TEE build reproducibility, researchers tried to rebuild 115 SGX, TDX & SEV-SNP deployments and match their measurements.

Only 10 had build reproducibility and just 7 without help from the developers.

TamaGo was one of those 7!

arxiv.org/pdf/2609.11411

I’ve said this many times - have a playbook for Advanced Persistent Teenagers, ransomware and extortion groups. Practice it.

It’s far more likely to need to be used than nation-state espionage playbooks - and these incidents are far more damaging if not well handled.

You need to flood the zone with messaging, put it on the front page of your website, be calm and upfront with customers. If you have 15 lawyers on a call debating legal risks, you’ll lose customer trust. Get the CEO on BBC News.

Show thread

Having spent an inordinate amount of time returning my MacBook Pro to “usable” after the 27 upgrade I got conned into performing, I understand @robpike ‘s reticence at saying how he disabled Apple Stupidity.

I cannot fathom why companies think that stuffing their choices down your throat can be even remotely acceptable, especially in the absence of a toggle. If I wanted Apple Stupidity to go off and create embeddings for my > 1TB of data then I like this to be my choice and not something flooring the I/O completely (incidentally, Unix has had “nice” for literally decades, how about using it for background indexing?).

There’s a new tool which, for the time being, apparently disables Apple Stupidity but, assuming it does what I did, the side effects are:

* Apple Mail search is even worse (yes, it is possible)
* Apple Mail “auto-filing” (i.e. where it recommends a folder to file an email) is gone
* Apple Mail is now unable to sort folders in a directory in alphabetical order, they are in order of creation (yes, really…) which, see point above, is infuriating

There are more but these are the most egregious. Just wanted to point out that Emacs with Kyle’s VM used to auto-file email just fine back in 1994… and search was pretty good too.

Perhaps I should revisit Emacs + VM and resurrect my IMAP settings for it?

Show older