Will be cray cray when you can hack those embedded systems. Also can't wait for the "grok make me make myself a sandwich" 💀💀💀

The smell of burning flux is the "umami" of hardware engineering.

Fourier transform of a mechanical music box shows up the imprinted pattern 🎶

What really happened with cyberattacks on Poland's power grids. No FUD. "The attacks targeted numerous wind and solar farms, a private company in the manufacturing sector, and a combined heat and power (CHP) plant supplying heat to nearly half a mil‑ lion customers in Poland. All of the attacks were purely destructive in nature" cert.pl/uploads/docs/CERT_Po…

Useful for #idapro - you can add custom xrefs very easily, e.g. if you know a `call eax` references some function, you can manually add an edge: add_cref(here(),get_name_ea_simple("some_func"),XREF_USER) Then reanalyze the binary and get func parameter propagation for free!

May I present to you; a full copy of doom, running inside of a Rollercoaster Tycoon 1 save game exploit ✨ Thanks for everyone that came to check out our @DistrictCon Junkyard talk! We had a lot of fun putting it together. (check the thread for slides / exploit)

A book from the 19th century that depicts the Rhine Valley by creating an impression of three-dimensionality and spatial distance.

PLEASE CLICK TRANSLATE ON THIS POST

Join us this Friday (Halloween!) at 11AM PT for the next @offby1security stream with guest Philippe Laulheret (@phLaul): Revault! Compromised by your Secure SOC! youtube.com/watch?v=W8mMmUVS…

I show up to the job site 52 minutes late. The foreman, a pot long past simmering on a good day, tilts his head as he digs into me. “Well look who decided to grace us with his presence. Where the hell were you?” “Sir, I apologize. I couldn’t sleep. My Eight Sleep stayed hot all night.” He blinks once. “What.” “It sends like… 16GB of sensor data to the cloud to decide if I’m cold or hot. The cloud was down, so the bed just… simmered me.” He looks at me like I just blamed the sun for sweating. “So your bed needs Wi-Fi to know you’re hot?” The whole crew coughs laughter into their gloves. “It collects biometrics,” I add, doubling down like a man who has never met a shovel. “Heart rate, HRV, movement, humidity, and sends them to an AWS server. AWS was down, so the bed wouldn’t let me adjust anything.” “So you got governed by a cloud.” “In a sense, sir, yes.” “Unplug it.” “I can’t.” “Why.” “It’s… on a subscription.” He actually staggers. “You’re RENTING temperature?” “Back in my day,” he says, “a bed was a rectangle and it didn’t email nobody. You got hot, you rolled six inches south.” He pulls a laminated card: APPROVED REASONS FOR TARDINESS. It lists “flat tire,” “bridge out,” “cow in road.” He clicks his pen, adds: ONLINE BED MALFUNCTION. “Thank you, sir,” I say. That night I switch off the bed, put a box fan on a milk crate, and sleep like a rock in airplane mode. Next morning I’m 10 minutes early. He nods at the fan in my passenger seat. “Local solution?” “Local solution,” I say. He tapes the revised card above the time clock. Under ONLINE BED MALFUNCTION he’s added a second line in Sharpie: TRY A FAN. I punch in. The crew snickers. I deserve it. Somewhere, a server farm cools an empty mattress.

bro did a study abroad program

Omg. Perfect for @DistrictCon junkyard 🤯

this headline is a light novel waiting to be turned into an anime

@BSidesPDX is happening on Oct 24 & 25 in, you guessed it, Portland! The call for paper is open for another few weeks, send us your best stuff!! bsidespdx.org

DistrictCon CFP is now open! 🪩 Give us your best technical content - we'll also select a few excellent policy talks 🖤 districtcon.org/cfp

Our work on solving @Raspberry_Pi's RP2350 Hacking Challenge is now online! 5 different attacks and lots of lessons learned. Joint work with Aedan Cullen, Kévin Courdesses, @ghidraninja and @azonenberg! Full paper: usenix.org/system/files/woot… Source code: github.com/bhamsec/woot25-rp…

Good Morning! Just published a blog post analyzing Hyper-V functionality, design, and key binaries, hvix64.exe (hypervisor), securekernel.exe (secure kernel), and winload.dll (boot-time loader and CPU check). r0keb.github.io/posts/Hyper-…