← Feed

Posts

• View post

  Whenever I hear someone say, "Department of War" non-ironically, I hear them saying, "I'm okay with violating US Code."

• View post

  RE: https://defcon.social/@jianmin/115766821282057197 The people who are willing to use non-statutory titles for the DoD are clearly signaling their willingness to violate the law. Take note when it happens.

• View post

  I'm looking for products to help my kids develop critical thinking, problem solving and stem skills. I try to keep them away from screens and the Internet and want these skills developed well before a time when I can no longer shield them from genAI. want to share what I've found and solicit any suggestions: - Crunchlabs and Hackpacks - subscription boxes from YouTuber Mark Rober. Big fan, really like these. But also expensive. Hack packs are advanced but it doesn't hu...

• View post

  give it a year and Texas and Florida will try to do this to women who have abortions.

• View post

  is 0.36 Scaramuccis a new record?

• View post

  https://blog.cryptographyengineering.com/2026/07/29/some-notes-about-anthropics-new-results/

• View post

  I'm thread-blogging on main. a story about searching for meaning in life. feel free to ignore. I grew up in a flavor of charismatic christianity where there was incredibly strong pressure to perform spiritually by "speaking in tongues," conjuring feelings during church services, or hearing a deity speak directly to me through "journaling." In high school I came across some of those journals. in entry after entry where I dutifully wrote conversations...

• View post

  Last year I looked at buying a maxed out framework build and it was around $2k for what I wanted. Now I'm looking at the same build and it's $3k. And yet, after pivoting to the cloud in the late 2010s, I feel like it is a strategic investment to buy local compute while I still can. AI is killing the market already, but if TSMC fabs go offline, the crunch is going to get way worse.

• View post

  RE: https://neuromatch.social/@jonny/116324676116121930 this is a great thread but also claude found rce in freebsd this week and then another claude operationalized it with two different exploit chains. both things can be and are true and maybe we're just all cooked. https://github.com/califio/publications/tree/main/MADBugs/CVE-2026-4747

• View post

  Remembering my 2019 refurbished Dell Latitude 7300 after it gave up the ghost last night and won't come back online despite my best efforts to revive it. Got me through the COVID era, grad school, and many projects since then. The Framework 13 I just ordered has big shoes to fill.

• View post

  a fun lunchtime reading https://www.nytimes.com/2026/05/05/opinion/trump-midterm-elections-2026.html?unlocked_article_code=1.gFA.LQL_.rirL6asxYti8&smid=url-share (gift article via a post I found on Reddit)

• View post

  Another day, another Linux LPE and container escape: https://github.com/V4bel/dirtyfrag

• View post

  python3 -c 'import socket; s=socket.socket(socket.AF_ALG, socket.SOCK_SEQPACKET, 0); s.bind(("aead","authencesn(hmac(sha256),cbc(aes))")); print("REACHABLE")' 2>&1 If you see: "file not found" then you're probably not vulnerable to copy.fail (#CVE_2026_31431 #copyfail) If you see "REACHABLE," that probably means the primitives listed online are reachable.