Should be part of his next test.

Predator Spyware's iOS Kernel Exploitation Engine: PAC Bypass, NEON R/W & More Threat Labs Jamf Threat Labs examines Predator spyware's iOS kernel exploitation engine, revealing FDGuardNeonRW, a PAC bypass via JavaScriptCore gadget hunting, a 256-entry signing cache, and cross-process kerne...

Jamf's Nir Avraham has published a report looking at how the Predator spyware exploits, interacts, and modifies the iOS kernel for its operations

"The engine has never been reported on — until now"

www.jamf.com/blog/predato...

The mystery of a globetrotting iPhone-hacking toolkit Tools used in a series of hacking campaigns by hackers in Russia, Ukraine, and China may have originated inside U.S. government contractor L3Harris, TechCrunch has learned.

SCOOP: The iPhone mass hacking toolkit used by Russian spies was developed at U.S. military contractor L3Harris, former employees said.

The Coruna toolkit was used against Ukrainians and by Chinese cybercriminals, according to Google. But the toolkit was initially developed for Western governments.

Šid Express VDL bus

Welcome to today’s #CrossBorderRail thread

Beograd 🇷🇸 - Drávakeresztúr 🇭🇺

I have no data currently as this morning was a bit of a rush

But this bus will take me to Osijek

This is Wiley. He has never seen snow before and wants to make sure he gets a real good look at it. For science. 12/10 (IG: smileywileydog)

Cartoon

A heartwarming tale of the feds failing to get any CODIS DNA matches thus being "forced" to continue the once quiet tradition that started around 2018 of running suspect DNA thru databases like 23andMe and Ancestry who all claim not to release info to cops without consent but obviously still do

Just occurred to me: A 29-year-old was something like 20 when Antifa rose up in 2017.

Before all the shit hit the fan here in the twin cities i had been working on some blog posts about systems thinking and paying attention to change. Here is a quick thread trying to distill some key points I wish more people understood. 🧵

Auf Begehren von Sebastian Kurz: Widerruf gem. § 13 MedienG. Ex-Kanzler, Unternehmer und Vater Sebastian Kurz begehrt folgenden Widerruf gem. § 13 MedienG. Also nicht von uns, aber vom "Standard".

Ex-Kanzler, Unternehmer und Vater Sebastian Kurz begehrt folgenden Widerruf gem. § 13 MedienG. dietagespresse.com/auf-begehren...

This looks like a concentration camp.

AOK Fehlzeiten-Report 2025: Mehr Krankmeldungen als je zuvor Die krankheitsbedingten Fehlzeiten in Deutschland bleiben auf hohem Niveau. Besonders in NRW liegt der Krankenstand über dem Durchschnitt. Doch warum ist das so? Welche Krankheiten treiben die Zahlen ...

Mehr Krankmeldungen als je zuvor

Die Zahl der Krankschreibungen in 🇩🇪 ist auf einen neuen Höchstwert gestiegen. Am häufigsten wurden Beschäftigte wegen Atemwegserkrankungen krankgeschrieben (27,9 %). Dazu gehört auch die klassische Erkältung oder eine Corona-Erkrankung.

rp-online.de/wirtschaft/a...

chart: which host, which protocol A flow chart describing some steps and decisions done within curl when a HTTP URL is provided. For hostnames, protocol and port numbers. _This flow chart ignores proxies, authentication considerations and use of unix domain sockets to keep things simpler._ ## URL An initial step is of course to extract the hostname part from the URL. The hostname in a URL can be provided as a plain IP address or as a name. If a numerical IPv4 or IPv6 address are not provided in the URL, curl checks if the hostname is provided using IDN (International Domain Names) and if so, it converts the name into _punycode_ that it then can continue with. ## Existing connection Given the protocol, the hostname and port number curl checks if it has an existing connection alive suitable for use. Reusing an existing connection is preferred as it is the fastest way to start the new transfer. Connection reuse is done based on the provided name and not the IP address so that curl can skip figuring that out if there already is a connection available. ## –connect-to When trying to connect to a host, curl first checks if there are any tricks selected, like this option that makes curl actually resolve hostname B even when asked to connect to host A. ## alt-svc curl might have a populated alt-svc cache from previous transfers. It is basically a mapping for specific HTTP versions and hostnames over to another HTTP version and hostname for a certain amount of time. This can change hostname A into hostname B. ## –resolve This is an option that populates the DNS cache with one or more user provided IP addresses for a given hostname. ## DNS cache Before curl resolves a hostname into a set of IP addresses, it checks if it already has the information in its DNS cache, as that is usually much faster than having to ask for that data again. Entries are typically only kept in this cache for a minute until evicted. ## Resolving When curl resolves a hostname, it wants the A, AAAA and HTTPS DNS records data. A and AAAA provides a list of IP addresses to try to connect to, and the HTTPS field provides HTTP version information, port number, ECH config and possibly more. ## HSTS curl might also have an HSTS cache, which is another map for when plain HTTP accesses should rather be internally _upgraded_ to instead use HTTPS. This changes protocol to use and default port number. ## Racing Depending on what IP versions and HTTP versions the above steps have determined curl should try to use, curl starts a _connection_ _race_ with potentially quite a few parallel connection attempts, each started a little delayed after the previous. 1. QUIC connect attempt over IPv6 starts first 2. QUIC connect attempt over IPv4 runs as number two 3. TCP connect attempt over IPv6 is third in line 4. TCP connect attempt over IPv4 is the fourth Of course, if any of them can’t be done or fails, they are immediately skipped and the next one in line starts. Each of them also possibly start a new one if the previous one has not connected with a certain time. The first contender to successfully connect to the host wins and the other attempts are quickly discarded. curl connection races to curl.se ## TLS handshake If the protocol is HTTPS (which it always is if HTTP/3 is selected), the TLS handshake is performed after the TCP connection is established. For HTTP/3, the TLS handshake is integrated into the QUIC connection setup. The TLS handshake can make curl reuse an existing session, decide ALPN, use ECH and send early data. The session id/ticket handling is also a cache curl holds that allows for faster reconnects to hosts it has connected to before. ## Connection Once curl has an established connection to use, it starts with sending off the HTTP request, which begins the transfer. ## The chart

time for a little #chart involving #curl!

daniel.haxx.se/blog/2025/10/16/chart-wh...

Or I’d like to stop talking about ICE disappearing people so I can talk about our disappearing ice.

AmphiFa assemble and UNITE!

War torn Portland.
I am

I'm the president of Signal. I love dance music in the mornings, night yoga, and acting like a tourist — here's a day in my life. Meredith Whittaker wakes up by 6 am whether she's in New York or Paris and checks her Signal, where the entire company operates and communicates.

For those who want to know about how I chop vegetables between meetings, or grind my coffee, have I got the article for you www.businessinsider.com/day-in-the-l...

One in six bacterial infections now resistant to treatment, says WHO Levels of antimicrobial resistance highest in south-east Asia and eastern Mediterranean

1 in 6 bacterial infections now resistant to treatment, says WHO - rising to 1 in 3 in SE Asia on.ft.com/46Zv7Dq

Endlich verstehe ich, weshalb Nobelpreise ausschließlich an Menschen über 50 verliehen werden.
Das sind die einzigen, die bei unbekannten Nummern noch abheben.

Finally, someone who understands the First Amendment and democracy in America. @justprotest.bsky.social

Der Comic zeigt oben den Text: „Manche Menschen sind schon morgens unangemessen munter.“ Unten rechts liegt eine erschöpft wirkende Figur mit großen, müden Augen bäuchlings am Boden. Neben ihr steht der Text: „Ich nicht.“ Unten links ist die Signatur „islieb“.

The Effect of Air Purifiers in Schools The Effect of Air Purifiers in Schools

Randomisierte Studie mobile Luftfilter Schule

1) Reduktion krankheitsbedingter Abwesenheit 12,5%
2) Kosten 11€/d
3) cost benefit 1:9

Nicht inkludiert sind die zusätzlich in Skandinavien nachgewiesenen Reduktionen der elterlichen Fehltage um 30%

Und nu
@PrienKarin @ninawarken?

a friend who goes to conferences way more than I do told me that something now common in question time is someone standing up and saying "So, I asked ChatGPT, and it said [x]"

👇😆😆😆

ME, IN TEARS: you can't just say every single part of a computer system is a file

UNIX, POINTING AT THE MOUSE: file

Trump will moralisierende Inhalte aus Museen entfernen - ZIB 2 vom 21.08.2025 US-Präsident Trump kritisiert seiner Meinung nach übertrieben moralisierende Inhalte von Museen. Viele Darstellungen der US-amerikanischen Geschichte seien zu negativ, zu "woke". Rechtzeitig zum 250-J...

Sehenswerter #ZIB2 Beitrag von Barbara Wolschek über die vom Trump-Regime angeordnete Revision der US-Geschichte.
on.orf.at/video/142884...

Phrack 40th Anniversary ansi art by Harvest

Phrack turns 40.
The digital drop is live.
Download it. Archive it. Pass it on.
💾 www.phrack.org
#phrackat40 #phrack72