netspooky

@vacci.ne

knuck if you buck https://n0.lol

The first known RDOFF exectuable file which runs in nasm's deprecated rdx loader was demonstrated by me last year for BGGP6. The second known RDOFF binary is a virus that targets the first file (and any other RDOFF). It will be published in the forthcoming @tmpout.sh Volume 5.

Command line showing example1.rdf outputting a string "This is an example program!". The next command, test.rdf, runs the virus and displays ansi art. The last command shows example1.rdf running again, with the ansi art banner appearing before the string it normally prints.

Absolutely love when devs leave their custom protocol source in a random dir in their firmware file system. Thank you for your commitment to OSS.

Limited edition stickers for @tmpout.sh (Volume 5 releasing shortly :)) I'll have some around defcon time. No computers were used in the design or production of these stickers!!

Stickers that say tmp.0ut

I love pulling up 2 the call with a script that chains together well known deterministic tools to do repeatable tasks bc asking an LLM is unreliable, expensive, dumb etc, and all the AI heads are like "Oh Of Course, Brilliant!" as if they werent just hyped for a full AI pipeline.

Vendor: Our advanced hardware platform- Me: raspberry pi? Vendor, nervous: uses next gen computer vision sensors- Me: raspberry pi camera? Vendor, frustrated: to send real time insights to our cloud platform- Me: is this your storage bucket? Vendor: ...yeah, wait, shit...

ZionSiphon is an AI-generated, non-functional attempt at ICS malware. Malicious intent doesn't imply ability, and broken malware like this is a distraction when we have proven threats like VOLTZITE/Volt Typhoon out there hitting water utilities.: www.dragos.com/blog/zionsip...

ZionSiphon: Why This Malware Isn't A Credible ICS Threat

Dragos analyzed ZionSiphon and assessed it as non-functional OT malware. Here's why it poses no credible threat to dam desalination or critical infrastructure

dragos.com

Is there a term for when people spend exponentially more time trying to get an LLM to do a task correctly, than it would have taken to just do the task themselves?

In Mario Kart Wii, crashing the game and activating the crash handler will eventually start playing back the contents of the Wii's RAM as sound. Since the data was never intended to be interpreted like this, it ends up sounding like experimental harsh noise music.

Whenever I use Chrome to debug a modern website, it's so funny to see all the requests usually blocked by my normal setup. It's like watching a fish being released back into the sea, swimming happily, gobbling up all the data and sending telemetry out to the other fish.

Chrome network requests from browser tools

"MIPS" more like May I Please See the disassembly and hex dump because the decompiler has no idea wtf is going on

"The lights of Caracas were largely turned off, due to a certain expertise that we have" It's honestly not particularly hard to attack critical infra, but if you do, you're just as bad if not worse than the people who ransomware hospitals.