The first known RDOFF exectuable file which runs in nasm's deprecated rdx loader was demonstrated by me last year for BGGP6. The second known RDOFF binary is a virus that targets the first file (and any other RDOFF). It will be published in the forthcoming @tmpout.sh Volume 5.
Absolutely love when devs leave their custom protocol source in a random dir in their firmware file system. Thank you for your commitment to OSS.
Limited edition stickers for @tmpout.sh (Volume 5 releasing shortly :)) I'll have some around defcon time. No computers were used in the design or production of these stickers!!
This paper is pretty interesting, creating harmonic distortions via GPU workloads to attack data center power infra Bit2Watt: A Cyber-Physical Vulnerability Exploiting GPU Workloads Across Power and Computing Infrastructures arxiv.org/abs/2607.05993
Bit2Watt: A Cyber-Physical Vulnerability Exploiting GPU Workloads Across Power and Computing Infrastructures
Modern data centers increasingly rely on large-scale GPU clusters and on-site renewable energy resources, resulting in a tightly coupled cyber-physical system between computing workloads and power-ele...
arxiv.org
I love pulling up 2 the call with a script that chains together well known deterministic tools to do repeatable tasks bc asking an LLM is unreliable, expensive, dumb etc, and all the AI heads are like "Oh Of Course, Brilliant!" as if they werent just hyped for a full AI pipeline.
Vendor: Our advanced hardware platform- Me: raspberry pi? Vendor, nervous: uses next gen computer vision sensors- Me: raspberry pi camera? Vendor, frustrated: to send real time insights to our cloud platform- Me: is this your storage bucket? Vendor: ...yeah, wait, shit...
Stop EOLing devices as soon as you get a bug report challenge 2026 (impossible!!!!)
dis.yaxpeax.net/x86_64/33c0e... now with actual valid html
dis.yaxpeax.net - x86_64
0x00000000: 33c0 : xor eax, eax 0x00000002: e878563412 : call $+0x12345678 0x00000007: c3 : ret
dis.yaxpeax.net
i wonder how the unfurl works on bsky: dis.yaxpeax.net/x86_64/33c0e... neat
I wrote about why I quit my job, and how weird and tiring tech feels these days.
Do I belong in tech anymore?
On quitting, the spread of AI, and the loss of an ideal.
ky.fyi
🧵 We tend to think the internet is permanent, but VANISHING CULTURE—the new 📚 from Internet Archive—starts with a simple reality: our digital record is far more fragile than we think 🕳️ 📖 Read for free: archive.org/details/vani... 🛒 Purchase in print: www.betterworldbooks.com/product/deta... ⬇️
ZionSiphon is an AI-generated, non-functional attempt at ICS malware. Malicious intent doesn't imply ability, and broken malware like this is a distraction when we have proven threats like VOLTZITE/Volt Typhoon out there hitting water utilities.: www.dragos.com/blog/zionsip...
ZionSiphon: Why This Malware Isn't A Credible ICS Threat
Dragos analyzed ZionSiphon and assessed it as non-functional OT malware. Here's why it poses no credible threat to dam desalination or critical infrastructure
dragos.com
LA Public Press provides independent news for Los Angeles. Donations fund reporting and the digital infrastructure required to serve the community and keep sources safe. Support strong independent journalism by donating today: givebutter.com/joinlapublic...
Become a Member of LA Public Press
Our work depends on your support!
givebutter.com
Is there a term for when people spend exponentially more time trying to get an LLM to do a task correctly, than it would have taken to just do the task themselves?
In Mario Kart Wii, crashing the game and activating the crash handler will eventually start playing back the contents of the Wii's RAM as sound. Since the data was never intended to be interpreted like this, it ends up sounding like experimental harsh noise music.
Whenever I use Chrome to debug a modern website, it's so funny to see all the requests usually blocked by my normal setup. It's like watching a fish being released back into the sea, swimming happily, gobbling up all the data and sending telemetry out to the other fish.
"MIPS" more like May I Please See the disassembly and hex dump because the decompiler has no idea wtf is going on
Random Atmel logo on a chip in the NBC logo animation for the super bowl
Deluded wine moms are committing deadly crimes in your area
Ladies you “Zumba-ed” too hard!
NEW BLOG POST: Gbyte leaks gigabytes of data - #FuckStalkerware pt. 8 the tale of a chinese stalkerware service with fully remote android spying, plus an MMO boosting service and patented ToS violations maia.crimew.gay/posts/fuckst...
cannot believe that the US kidnapped a foreign president and is holding him in the jail behind the Micro Center
Another conflict, another claim of wartime cyber capability being used. I really need you all to understand how unlikely it is that cyber-enabled power outage is going to be used in a conflict like this. Let me walk you through this...
Our "certain capability" is a single Reaper-bourne hellfire missile. The blue flash in the background an instant before the lights go out is the tell. www.instagram.com/reel/DTEY0B1...
"The lights of Caracas were largely turned off, due to a certain expertise that we have" It's honestly not particularly hard to attack critical infra, but if you do, you're just as bad if not worse than the people who ransomware hospitals.