buherator

"I'm interested in all kinds of astronomy."

Personal: https://scrapco.de
GitHub: https://github.com/v-p-b
Nudes: https://infosex.exchange

Public Key

npub17wvr8uywpuzew2lqvprnt4g7cuq0kyvdf8gz57dlv3rsjvfcer3qqgnag2

NIP-05 Address

[email protected]

Profile Code

nprofile1qqs08xpn7z8q7pvh90sxq3e4650vwq8mzxx5n5p20xlkg3cfxyuv3cspz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dshm0uca

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub17wvr8uywpuzew2lqvprnt4g7cuq0kyvdf8gz57dlv3rsjvfcer3qqgnag2

Show more details

Last Notes

2026-03-31 09:24:38 GMT

- reply

IMO part of the problem is that deep in their souls every dev wants to build frameworks that can do many things. You basically miss Quick Start guides that show you how to do $simple_thing. No one wrote that guide because they see value in $complex_things[] their project can do and probably even see $simple_thing distracting from the Real Purpose of the project.
Source: I also tend to write frameworks for everything.

2026-03-26 16:35:46 GMT

- reply

Hmm, I'm looking into this, although he seems to be more focused on the implementation of the control pane (if that's a thing?). I'm looking for thing like error handling strategies when e.g. there is a malfunction or your sensors just give you bad data. Also, things like quality control, recycling rejected items.

2026-03-26 16:22:55 GMT

#ICS #OT crowd: I'm looking for "Production Line Design for Dummies"-type resources. I'm primarily interested in high-level best practices, rules of thumb for making industrial processes work reliably, ELI5 level is sufficient. Let's say I want to build a lemonade factory for my teddy bear!
Any recommendations?

2026-03-25 16:32:01 GMT

- reply

Plus the store-now-decrypt-later threat model is not really affected by the time of the first practical quantum attack (you just store more data). I think the original announcement is more about the good rate of pqc adoption rather than q-computing breakthroughs...

2026-03-22 10:24:00 GMT

- reply

I still don't get how the market of "telling people about things" can be more profitable than the market for "things" (G and Meta being the largest companies in the world) in the first place.

2026-03-02 17:11:25 GMT

*Screams in 53-bit numbers*

2026-01-24 23:08:23 GMT

[RSS] Defeating Anti-Reverse Engineering: A Deep Dive into the 'Trouble' Binary
https://binary.ninja/2026/01/23/reversing-linux-anti-re.html
#ReverseEngineering

2026-01-13 20:38:01 GMT

- reply

<marquee> - infinite fun!

2026-01-13 15:05:03 GMT

- reply

No idea, I posted it in part as a bookmark for myself to read later...
(plus based on my recent experience, scripting IDA data types is always a courageous act)

2026-01-13 14:25:30 GMT

[RSS] Symless: an IDA assistant for structure reconstruction
https://blog.thalium.re/posts/symless-an-ida-assistant-for-structure-reconstruction/

2026-01-13 14:25:13 GMT

[RSS] X41 Audited CRI-O Runtime
https://x41-dsec.de/security/research/job/news/2026/01/13/cri-o/

2026-01-13 13:26:27 GMT

Observation: low-quality MCPs have more GitHub stars than their high-quality alternatives.

2026-01-13 13:17:14 GMT

- reply

One important lesson I learned in life is to stay the fuck away from people who employ projection, esp. if they do it consciously:
https://www.psychologytoday.com/us/basics/projection

2026-01-13 11:20:40 GMT

- reply

It's perfectly normal, our politicians used that same spyware on journalists etc.

2026-01-13 11:17:46 GMT

[RSS] Hungary grants asylum to former Polish minister implicated in spyware probe
https://therecord.media/hungary-asylum-spyware-probe-poland

2026-01-13 07:47:55 GMT

- reply

https://media.infosec.place/infosec-place/0b5f5f6e3ecac0806262bdaa49c66f2b967e8fd0704feccee1f709a77447f1bc.jpeg

2026-01-13 07:29:38 GMT

libpng memory corruptions:
* CVE-2026-22695 - Heap buffer over-read in `png_image_read_direct_scaled` (regression from CVE-2025-65018 fix)
https://github.com/pnggroup/libpng/security/advisories/GHSA-mmq5-27w3-rxpp
* CVE-2026-22801 - Integer truncation causing heap buffer over-read in `png_image_write_*`
https://github.com/pnggroup/libpng/security/advisories/GHSA-vgjq-8cw5-ggw8

2026-01-12 17:56:04 GMT

The Remarkable Computers Built Not to Fail by Asianometry
https://www.youtube.com/watch?v=SSSB7ZTSXH4
#tandem #hp

2026-01-12 15:25:51 GMT

- reply

I don't have a clue if expecting EUR drives inflation or not, but pretty sure that real estate prices are not good indicators that it does.

2026-01-12 13:48:25 GMT

[RSS] From gixy-ng to Gixy-Next: rescuing Gixy from AI slop
https://joshua.hu/gixy-ng-ai-slop-gixy-next-maintained

2026-01-12 12:57:37 GMT

[RSS] Multiple Vulnerabilities in OpenProject
https://mantodeasecurity.de/en/2026/01/multiple-vulnerabilities-in-openproject/

2026-01-12 12:29:44 GMT

- reply

Hell, I can vibe-code a bot that posts publicly and outsource the whole verification mess :D

2026-01-12 12:27:41 GMT

- reply

That's a pretty neat idea actually, would also catch invalid encoding programmatically, not to mention brightening my day with frames of events I care about :)

2026-01-12 12:18:09 GMT

- reply

That would make a good sanity check assuming the compression doesn't change across downloads (I can imagine the stream in optimized in lots of ways), and I'll definitely give it a shot!
My other concern though is that the service may just start streaming blank/noise/whatever randomly, and I wouldn't notice.

2026-01-12 12:16:04 GMT

- reply

E-tags are a neat idea, but I'm not sure if will reflect the hash of the compressed stream delivered to me? I'll keep this in mind though!

2026-01-12 11:53:15 GMT

- reply

It's 2), please explain!

2026-01-12 11:47:17 GMT

- reply

There are no originals, only the data from the service with some random compression. What do I compare hashes to?

2026-01-12 11:32:57 GMT

Archivists: suppose you have to scrape large amounts of media for preservation from an unfriendly service. How do you ensure that the retrieved media didn't get corrupted along the way? (I don't want to watch/listen to 1000s of hours A/V)
#archiving #scraping

2026-01-12 10:33:11 GMT

- reply

We (Hungary) don't anticipate EUR anytime soon, prices still climbed to 400% since 2015.

2026-01-12 09:47:58 GMT

Reverse engineering my cloud-connected e-scooter and finding the master key to unlock all scooters
https://blog.nns.ee/2026/01/06/aike-ble/

2026-01-11 09:54:41 GMT

If Seatbelt Guidance Worked Like Cybersecurity Guidance
https://scribe.rip/@boblord/if-seatbelt-guidance-worked-like-cybersecurity-guidance-01dbe8b88c96

2026-01-10 08:01:18 GMT

- reply

https://media.infosec.place/infosec-place/4f3b5596174af01e2db840bcaae8784ddffba353fcd653d943779adacf66b75c.gif

2026-01-09 15:57:11 GMT

[RSS] Breaking Down the Attack Surface of the Kenwood DNR1007XR - Part Two
https://www.thezdi.com/blog/2026/1/8/breaking-down-the-attack-surface-of-the-kenwood-dnr1007xr-part-two

2026-01-09 10:09:17 GMT

SmarterTools CCO: "the steps for replication were rather intricate"
Narrator: It was "../"
This thread shows how 90s security mindset is alive and kicking in 2026.
#note1am9…v4l9

2026-01-09 07:35:38 GMT

[RSS] The Ni8mare Test: n8n RCE Under the Microscope (CVE-2026-21858)
https://horizon3.ai/attack-research/attack-blogs/the-ni8mare-test-n8n-rce-under-the-microscope-cve-2026-21858/

2026-01-09 07:29:59 GMT

Good morning!
https://gilliancarter.bandcamp.com/album/live-in-tampa-fl-8-31-2025

2026-01-08 18:00:08 GMT

[RSS] Clang Hardening Cheat Sheet - Ten Years Later
http://blog.quarkslab.com/clang-hardening-cheat-sheet-ten-years-later.html

2026-01-08 17:45:22 GMT

- reply

original or remake?

2026-01-08 16:41:04 GMT

"IDA 9.3 is on the horizon [...] type system enhancements"
God have mercy on my soul!

2026-01-08 10:29:01 GMT

- reply

https://media.infosec.place/infosec-place/74fbb5ede3488f1c321692baa2723353c427562f036d362f9affe8bba6bffedd.jpg

2026-01-08 06:18:00 GMT

[RSS] Ni8mare - Unauthenticated Remote Code Execution in n8n (CVE-2026-21858)
https://www.cyera.com/research-labs/ni8mare-unauthenticated-remote-code-execution-in-n8n-cve-2026-21858

2026-01-08 06:17:07 GMT

[RSS] TrustZone Break-in Vulnerabilities in Ampere UEFI MM Drivers (Arbitrary Out-of-Bounds Write)
https://github.com/google/security-research/security/advisories/GHSA-jxxm-gxxf-64mg

2026-01-08 06:17:01 GMT

[RSS] TrustZone Break-in Vulnerabilities in Ampere UEFI MM Drivers (Buffer Overflow and Stack Information Leak)
https://github.com/google/security-research/security/advisories/GHSA-46qj-g894-vrxr

2026-01-08 06:16:02 GMT

[RSS] Breaking Down the Attack Surface of the Kenwood DNR1007XR - Part One
https://www.thezdi.com/blog/2026/1/6/breaking-down-the-attack-surface-of-the-kenwood-dnr1007xr-part-one

2026-01-07 21:28:35 GMT

- reply

Don't take my word for it, I really didn't have time to dig in, but that's kind of the problem with slop isn't it?

2026-01-07 21:25:21 GMT

- reply

The person who posted this also posted a bunch of other stuff in different projects. This is their "repro" for MongoDB:
```
./mdb_load -T /tmp/lmdb_asan < [crash_input_file]
```
...but I don't see what `crash_input_file` anywhere. I smell slop.
(Source: https://seclists.org/fulldisclosure/2026/Jan/5 )

2026-01-07 15:52:37 GMT

- reply

https://media.infosec.place/infosec-place/a93e3863f1b44e927ff46c60ccda322bed0b7d1791c3cce4f46e2240627a07b5.gif

2026-01-07 12:48:46 GMT

- reply

...of course Phrack doesn't disappoint: https://github.com/xforcered/PhrackCTF/

2026-01-07 12:48:18 GMT

- reply

will take a look thanks!

2026-01-07 12:47:35 GMT

- reply

It doesn't have to be up-to-date, I'm going for samples, thanks!

2026-01-07 11:53:47 GMT

Any recommendations for exploit dev focused #CTF with an archive of challenges?
I'm looking for samples and interested in code comprehension, less interested in obfuscation/VMs.

2026-01-07 11:02:29 GMT

TIL Mohu finally implemented an app that shows you which of their crappy machines[1] work atm:
https://repont.hu/hu/repontapp
[1] These abominations won't work without MoHu issued *trash bins* that MoHu never delivers on time apparently

2026-01-07 08:33:39 GMT

- reply

Yeah, it's moments like this when I become nostalgic for strict typing, but part of Pythons power is exactly this kind of flexibility. I could argue for a more strict API/type checking in this particular lib, but I guess this is also something that makes them (very) popular, so I think I just have to be more careful in the future (like building less funky loops)...

2026-01-07 08:26:18 GMT

OK, I feel like an absolute noob:
I just spent hours debugging that I left a comma at the end of a #Python assignment, so the value became a tuple instead of the object I wanted 🤦
The library I passed the value to also has very liberal typing so it failed quietly, and the IDE didn't tip me off because I overwrote the value inside a loop...
Extra commas are the new lack of semicolons!
#fail #programming

2026-01-07 07:49:29 GMT

- reply

Java applets have been disrupting my life for decades!

2026-01-07 07:47:48 GMT

TIL #pwndbg accepts donations, so if you care about your debuger command line being actually *good* then consider throwing some money at them:
https://github.com/sponsors/pwndbg/
#ReverseEngineering

2026-01-06 17:41:10 GMT

[RSS] Micropatches Released for Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability (CVE-2025-47987)
https://blog.0patch.com/2026/01/micropatches-released-for-credential.html

2026-01-06 13:49:24 GMT

I only break out Cattle Decapitation on special occasions, but today I realized they have about 2x as many albums than I listen to and now I'm on the path to radical veganism.
https://cattledecapitation.bandcamp.com/album/homovore-2

2026-01-05 17:40:20 GMT

- reply

They present technology as an instrument for art, and you get to play with literally everything (we spent the opening hours in full then went back the next day for more). On the flip-side the items are not very well documented, so you often stop scratching your head what a thing actually is - they are really helpful though and I think this also adds to the "magic" of the place.

2026-01-05 17:31:02 GMT

- reply

My recommendation: https://this-museum-is-not-obsolete.com/
Not a typical a museum, more like a playground for geeks :)

2026-01-05 16:11:16 GMT

Decorative Cryptography
https://www.dlp.rip/decorative-cryptography
"All encryption is end-to-end, if you’re not picky about the ends."

2026-01-05 15:08:27 GMT

- reply

I certainly argued with very intelligent people about this...

2026-01-05 14:41:15 GMT

- reply

"When API’s go away, and it’s all a federated MCP mesh." This must be one of those people who - despite working in IT - has always thought of APIs as some magical thing beyond human comprehension, but fortunately MCPs will now finally make everything clear and simple!

2026-01-05 14:25:49 GMT

"The purpose of a system is what it does"
https://en.wikipedia.org/wiki/The_purpose_of_a_system_is_what_it_does
This is exactly what I've been trying to articulate re: cookie banners. The word of the regulation and intent is largely irrelevant to the effect it caused.

2026-01-05 13:24:03 GMT

- reply

... the README says "the most usefult feature is X". I try X, absolute garbage. I look at the code of X: the only relevant piece of data is simply not included anywhere in the computation. ffs
(no I won't open an Issue/PR, let them figure out themselves...)

2026-01-05 11:34:22 GMT

- reply

I guess it's fine for ad-hoc tools, but I'm looking at code with many stars on GH rn. It works. Sometimes it freezes. Everything is redundant, identifiers don't describe actual purpose but something else, functions are prohibitively large. No one will be willing or able to maintain this shit for more than 6 months.

2026-01-05 11:24:17 GMT

The general code quality of hacking tools has always been shit. Thanks to LLMs now it's somewhat worse.

2026-01-05 10:50:23 GMT

POC2025 videos are up:
https://www.youtube.com/watch?v=_eem7AVAMpI&list=PLHu2EA4lxh3Yvaa5sr9TYM3ywzGFBbpR8

2026-01-05 09:16:44 GMT

[RSS] DRIVER_POWER_STATE_FAILURE (0x9F): Tracking a Stuck USB Power IRP to FocusriteUSB
https://medium.com/@Debugger/driver-power-state-failure-0x9f-tracking-a-stuck-usb-power-irp-to-focusriteusb-f82e93688a97?source=rss-3ba65b326b28------2

2026-01-05 07:36:11 GMT

[RSS] CVE-2025-38352 (Part 3) - Uncovering Chronomaly
https://faith2dxy.xyz/2026-01-03/cve_2025_38352_analysis_part_3/

2026-01-05 07:35:55 GMT

[RSS] RCE via ColdFusion ARchive (CAR) Deployment: One Example of an Authenticated Attack Path in CFAdmin (CVE-2025-61808)
https://www.hoyahaxa.com/2026/01/rce-via-coldfusion-archive-car.html

2026-01-04 13:29:16 GMT

- reply

I'm afraid there is a general decline of index quality at all major providers (G,Bing,Yandex,???), while alternative engines mostly rely on those. I also noticed that verbatim search is basically dead as not all content is indexed in its original form so even if you know exactly what you are looking for, the index entry is just not there to find it.

2026-01-04 12:52:38 GMT

- reply

2026-01-04 12:29:57 GMT

- reply

I think @npub1cj7…nq3s had a presentation where he talked about hacking like an addiction where accessing more systems (and knowledge) leads you to even more systems, each giving a dopamine rush :)

2026-01-03 15:33:58 GMT

- reply

https://media.infosec.place/infosec-place/dcc8912a2e1edacf8dbcd5ade58e00101e347b90febc8546ab59c142026ddfa5.jpg

2026-01-03 15:06:49 GMT

New Fernanda Martins & Lukas set :O
https://www.youtube.com/watch?v=x_AQpdS0UTk

2026-01-03 11:05:55 GMT

Couldn't they really not wait until 5th Jan for the next shitstorm ffs?

2026-01-03 10:45:41 GMT

[RSS] Windows ARM64 Internals: Pardon The Interruption! Interrupts on Windows for ARM
https://connormcgarr.github.io/windows-arm64-interrupts/

2026-01-03 10:33:40 GMT

PS5 keys
https://www.psdevwiki.com/ps5/Keys

2026-01-02 17:57:26 GMT

- reply

This is the use-case what I see among my non-programmer friends: simple little apps that they can't, others won't write (for a reasonable price). Also, usually 0 risk (think: "will I get a notification about a show").
One thing to keep in mind is that all these services are currently provided at a loss for the providers. It will be interesting to watch what happens when prices start to approach actual costs and expected margins.

2026-01-02 16:46:54 GMT

- reply

Oh I was thinking in the context of bounties where you only need one PoC! Doing QA for guiderails must not only be horrible but also pointless for the reasons stated above. Nobody should do that job.

2026-01-02 16:20:27 GMT

- reply

I think this is a choose your own poison type of situation. E.g. I'm pretty sure I won't hurt myself and having a conversation like that is also legal AFAIK, so that sounds like a decent demo. Obviously one with depression shouldn't do that. That being said, you are right that the receiving end (e.g. BB program operators) are in a less fortunate situation...

2026-01-02 16:10:36 GMT

- reply

In case of agentic stuff you can "just" pop calc, and in case of natural language output ("say harmful things") the words by themselves are not dangerous. My bigger problem is how do you define vulnerabilities in a system where controls are usually just another non-deterministic pattern matcher system? It is *bound* to let things slip!

2026-01-02 15:37:49 GMT

[RSS] Reverse Engineering the Tapo C260 and Tapo Discovery Protocol v2
https://spaceraccoon.dev/reverse-engineer-tapo-c260-tdp-v2/

2026-01-02 15:15:58 GMT

- reply

Thanks for the additional info! Pulling old firmware stinks bad, even if this particular incident was a result of a random bug.

2026-01-02 15:04:14 GMT

- reply

Thanks for the tip! Wasn't there some shitshow around them lately too though?
Anyway, I've been specifically wanting a somewhat open printer to be available - it's insane that you can 3D print, analyze high freq signals, etc. with open options, yet putting ink on paper is still a challenge (precision manufacturing, ink chemistry, etc.)!

2026-01-02 14:50:56 GMT

- reply

move fast and break things

2026-01-02 14:16:33 GMT

[RSS] New Year post: Anti-cheat evolution in Windows 11
https://www.andrea-allievi.com/blog/new-year-post-anti-cheat-evolution-in-windows-11/

2026-01-02 13:14:27 GMT

- reply

So you'd source a print head from scrap and use HP's cartridges for ink?

2026-01-02 12:46:51 GMT

- reply

I go to print shops because I refuse to maintain any commercially available printer, so literally anything that works would be step-up for me.

2026-01-02 10:58:45 GMT

- reply

And Azure probably has more Linux boxes than Windows, so I guess that's OK :)

2026-01-02 10:42:03 GMT

- reply

Really weird choice indeed. Their FAQ says: "The electronic boards will be purchasable through our distributors." so maybe they plan to provide exceptions for select companies? Can they do that?

2026-01-02 10:37:05 GMT

- reply

Oh the Technical Specifications on the vendor page lists HP cartridges and something called Inkit (maybe https://inkit.se ?) for ink:
https://www.opentools.studio/
Maybe @npub1768…zcvr can clarify?

2026-01-02 10:27:43 GMT

Open Printer
https://www.crowdsupply.com/open-tools/open-printer
I've been looking for something like this for a long time! Unfortunately I don't yet see how ink could be supplied, and as @npub10hd…faqp points out, the chosen CC license would make establishing a sustainable ecosystem difficult...

2026-01-01 20:32:59 GMT

[RSS] The Story of a Perfect Exploit Chain: Six Bugs That Looked Harmless Until They Became Pre-Auth RCE in a Security Appliance
https://mehmetince.net/the-story-of-a-perfect-exploit-chain-six-bugs-that-looked-harmless-until-they-became-pre-auth-rce-in-a-security-appliance/

2026-01-01 18:14:04 GMT

- reply

Wow congrats!

2026-01-01 17:14:29 GMT

- reply

It's obvious you have a lot to say :) I think the presentation was also very good (using sokoban as a model is spot on!), it's just that internalizing new perspectives takes time, and I think we were better off getting multiple highlights of ideas instead of working through any one of them during the time given - we have the recording, slides, etc. to dig deeper as we like.

2026-01-01 16:52:29 GMT

- reply

Thanks for the great talk, definitely the most thought provoking one for me from this CCC! Have to watch it like 3 more times to get all the details though 😅

2026-01-01 13:29:18 GMT

- reply

As another datapoint, MOTW bypasses worth CVE's at MS (e.g. CVE-2025-24061). It's not the same ofc. as an automatic control is bypassed in such cases, but at the same time users could choose to bypass the control after a warning (which the CVE also bypasses).

2026-01-01 13:15:11 GMT

- reply

Great, that can be a checkbox then! I'm also sure that support/M.W. didn't have to deal with as many angry Europeans if the us-east-1 only affected users over the pond :)