Ever just run your hands through some nettle just for fun?

a man with a mustache is smiling and looking at the camera . ALT: a man with a mustache is smiling and looking at the camera .

No CVE, no exploit send skeet

moak.ai

Which one? I’m adopted.

Googly eyes on a Morton salt box

The kids have a great sense of humor.

Congratulations on your bounty award! Thank you for partnering with us to secure customers.

a man in a suit and tie is jumping over a blue car ALT: a man in a suit and tie is jumping over a blue car

Locking in and Sabotage comes on....

I held an iPhone 4 last night and I really want that size and squared off form factor back

can’t phish the man?

phish the lobster instead!

A WHOLE CIVILIZATION WILL DIE TONIGHT My son needs lunch, and I have to put his backpack together, but a whole civilization will die tonight, so I'm wondering if they've closed their schools. Like, a snow day, maybe, except instead of snow it's "keep your children home so if you die, you die together" — instead of "well open back up once the plows have cleared" it's "we don't know if we'll be here tomorrow, hold your babies tight." It's just "talk" I'm told, which I've been told before. "It's how the president makes his deals." But I've never heard anyone talk about other human beings this way, and I'm not certain I can look my son in the eyes if we all agree to stomach it one more time. A civilization will die tonight, but as I zip up his backpack and kiss him off to school I think: if this is what we call leadership then I'm not entirely sure ours isn't already dead. @michaelfdubois Mukad A QuBoy @michacifdubois

Brutal.

a man with long blonde hair and a beard is holding a gun in a forest . Alt: Zoooooooming in on a man with long blonde hair and a beard in a forest.

After all these years... my first bounty award from MSRC!

"Based on the assessment from our engineering team, we have determined that your case ###### is eligible for a US$6000.00 bounty award under the Open Source Bounty Program. Congratulations!"

This will be a fun one to get to share.

Dark times in supply chain security call for dark mode I guess.

Absolutely love the logo.

Lately it seems like I'm feeling and doing my very best and also feeling and doing my very worst at the exact same time.

A GPU-based rowhammer attack achieved root access on a Linux system

gpubreach.ca

a person is walking down a hallway holding a wrench in their hand ALT: a person is walking down a hallway holding a wrench in their hand

When you look at the value of some of these accounts. At what point is access to a dependency worth more than a crypto wallet and the wrench attacks start to happen?

Developers are in scope attack surface.

🥰 Analog data centers.

TasksJacker: Latest DPRK Attack Skips the Fake Interview and Goes Straight to Compromising GitHub Users A technical deep-dive into the next generation of DPRK attacks that borrows from Shai-hulud and Contagious Interview to compromise dozens of GitHub users

"By weaponizing VS Code's tasks.json auto-execution feature, attackers have created a scenario where simply opening a cloned repository in your IDE can compromise your system. No user interaction required beyond a git clone and opening the folder.

opensourcemalware.com/blog/tasksja...

I respect that the leaked source code for the Claude client is protected by copyright.

But wouldn’t it be ok for me to train my LLM on it?

You know, fair use and all that.

Asking for a friend

“We confirmed the behavior you reported.” is nice to hear back for once 😅

Do unsafe things where unsafe things can be done safely.

Not Today SAITAN!

It’s so nice to have computer processes that just do whatever the fuck they want.

If you don’t take breaks for yourself the universe will provide one for you that you will probably not enjoy.

Gary has a new hat for the Spring season. Now go away.

If you're heading out to a protest, there are a number of concepts to keep in mind to keep yourself—and your data—safe. ssd.eff.org/module/atte...

I am ready to log off.

Friend: "oh shit, I stole the wrong Adam Baldwin's identity... now I'm getting emails with bad scripts to review"

Me: "lol wrong bad scripts"

Today is Friday
I do not have a bug yet
but the day is young

A drill works really well to put a new hole in a leather belt.