Plus one for the barge contact cement for foam, cloth, rubber, and other bendy things. Thin coat on both surfaces, wait until nearly dry, and press firmly together. Nice solid bond that can take a bit of abuse.
Microsoft Discloses DNS-Based ClickFix Attack Using Nslookup for Malware Staging
Days since somebody dropped a huge 0-day on the oss-security mailing list: 0
seclists.org/oss-sec/2026...
That's very sad to hear. This is the only year that I completely lost interest in the event after the first couple puzzles. Guess that explains why everything seemed disconnected and shallow. I hope they return to form next year.
I've gotta say.. playing SANS Holiday Hack Challenge (#hhc) this year and seeing that the entire thing was AI generated was so disappointing.. when I worked there, the human touch was the most important part. Now it's 100% slop.
I guess capitalism comes for everything eventually..
Developer attempts to replicate "Liquid Glass" in CSS, and once finished realizes what she'd actually created is an exploit for a fundamental, previously unknown, and rather serious browser vulnerability
lyra.horse/blog/2025/12...
"CSS hack accidentally becomes regular hack"
mckitterick (ADE.............- Yesterday 601 irritatingly, the list of Al settings in Firefox has grown. to kill them all as of today (Nov 20, 2026), go into about:config and set all of these to false (yes, you'll have to copy and paste them one by one): browser.ml.enable browser.ml.chat.enabled browser.ml.chat.menu browser.ml.chat.page • browser.ml.chat.page.footerBadge • browser.ml.chat.page.menuBadge browser.ml.link Preview.enabled browser.ml.pageAssist.enabled browser.tabs.groups.smart.enabled browser.tabs.groups.smart.userEnabled extensions.ml.enabled browser.search.visualSearch.featureGate in addition to nuking Al, it'll also speed up your browsing
here's an updated guide on how to remove all of the AI from Firefox
There is zero chance I can terminate a LAN cable in under two minutes, let alone 52 seconds. @saintcon.bsky.social
Scathing, but all too obviously accurate, take on the AWS outage by @quinnypig.com.
You're engaging in professional malpractice if you don't share this with your stakeholders. Corey may be an engineer, but he communicates about the issues in an accessible manner.
www.theregister.com/2025/10/20/a...
Klaus and Glen are ridin' into Wild West Hackin' Fest - Deadwood 2025 with their talk "Dungeons & Dragons: The Security Tool You Didn’t Know You Needed Klaus and Glen" Don't ya go missin' it, virtual con and virtual training tickets are still available! wildwesthackinfest.com/register-for...
When a SSRF is enough: Full Docker Escape on Windows Docker Desktop (CVE-2025-9074) blog.qwertysecurity.com/Articles/blo...
SpaceFromSpace now features over 500 declassified Cold War era spy satellite images from all over the world! Each one fully browsable, interactive, and free for anyone to view.
spacefromspace.com/declassified...
Gerrymandering: when data science meets moral bankruptcy.
Gerrymandering: the art of mathematically disproving majority rule.
a decorative elaborate wall display of five swords
a denuded wall where only hooks are
so someone broke into my apartment at night and stole all of my swords and im kind of. in shock
why did it take me so long to find out about @bennjordan.bsky.social these videos are so good
youtu.be/xMYm2d9bmEA
Definitely not just you. Unfortunately it seems like a lot of the old guard are tired of screaming into the void, and a lot of the newer recruits think that security is just some out of the box vendor alerts with an AI company logo stamped in the corner.
yep, this is the way.
Meta’s track record on privacy was already spotty, but the newest web-to-app trick is particularly brazen. Here’s what to do next.
Our highly popular and technical training, "Malware and Memory Forensics with Volatility", has been fully converted to @volatilityfoundation.org 3 and significantly updated, including many new sections and 8 new, in-depth labs. Available online & in VA in October
memoryanalysis.net/courses-malw...
“If the reports about Flock Nova are true, this is precisely the kind of dystopian panopticon we’ve warned about,” EFF’s @mguariglia.bsky.social told Government Technology News.
A very appropriate description of email these days.
Y'know, I've never taken any sponsorships, I'm very skeptical at the best of times and no sponsorship I've ever been approached about has ever passed my sniff test, so I thought I knew where this was going, but this is bigger scam than I'd expected.
www.youtube.com/watch?v=vc4y...
Nick Frichette’s research shows how gaining EC2 access can let you intercept and modify AWS SSM communications. By spoofing the SSM Agent, it’s possible to manipulate EC2 messages or sessions. Check out the tools and techniques explored in this fascinating deep dive:
You're supposed to hold onto them. Eventually there will be enough companies represented in that stack that they'll be able to file a class action lawsuit against you. Do you have any idea how much YOUR data escaping has cost them?! /s
Still have mine as well, with a couple old tokens still
in it. Lots of great memories.
Nice work! Looks like that was a fun project.
