Author | Lightnews

Marco Bonelli @mebeim.bsky.social · 1d

We should host CTFs in space more often @mhackeroni.bsky.social @esa.int dorbit.space 🛰️ finals.ctrl-space.gg

Marco Bonelli @mebeim.bsky.social · 11d

‪Hmm so it turns out shim_lock is not part of fw but part of the magical UEFI shim that Linux uses as signing workaround, but apparently my firmware does not like it and won't boot it?? This is truly magical... and by magical I mean I want to set my desk on fire.‬

1

Marco Bonelli @mebeim.bsky.social · 11d

Currently on my 4th consecutive firmware update because I decided that I want secure boot on my desktop but Grub complains that it cannot find the shim_lock UEFI protocol, so I realized I hadn't upgraded my motherboard's fw since 2021. Anyhow how's your Saturday night going?

1 1

Marco Bonelli @mebeim.bsky.social · 13d

Hey @defcon.bsky.social I think this DEF CON 33 presentation was uploaded to YouTube with the wrong title www.youtube.com/watch?v=SRAL.... The author and presenter is Philippe Laulheret (@phlaul.bsky.social), not Christopher Domas.

Marco Bonelli @mebeim.bsky.social · 25d

Pwners in Paris

1

Marco Bonelli @mebeim.bsky.social · 29d

YouTube music is just messing with me at this point

Marco Bonelli @mebeim.bsky.social · Oct 4

Absolutely love the design of the frontend, great work! Also table-based chall display FTW.

1

Marco Bonelli @mebeim.bsky.social · Oct 4

"I got volunteered" sounds like when your boss approaches you with "you really like X right? Nice, we got a bunch of work on X you'll take care of it right?" 😂

1

Marco Bonelli @mebeim.bsky.social · Oct 3

Linus LKML beef with big-endian RISC-V? I need some popcorn! lore.kernel.org/all/CAHk-=wg...

1

Marco Bonelli @mebeim.bsky.social · Oct 2

Systrack v0.8: S390 support and lots of small improvements github.com/mebeim/systr.... Another +118 tables at syscalls.mebeim.net for S390 v4.0-v6.17 64bit + compat 32bit. Sadly still need a workaround for broken relocs on v6.15+ RISCV 32bit builds lore.kernel.org/all/17143379....

Release Systrack v0.8 · mebeim/systrack

New arch support: IBM Z-Architecture S390 64-bit and compat 32-bit, tested on v4.0+ kernels. Thanks to Ilya Leoshkevich (@iii-i) for the initial implementation (#3). Improvements: Produce lighter ...

github.com

1

Marco Bonelli @mebeim.bsky.social · Oct 2

Commits:
- 6.15 open_tree_attr: git.kernel.org/pub/scm/linu...
- 6.15 RIP x86 32-bit BIGSMP (+NUMA): git.kernel.org/pub/scm/linu...
- 6.16 RIP uselib: git.kernel.org/pub/scm/linu...
- 6.17 file_{set,get}attr: git.kernel.org/pub/scm/linu...

Marco Bonelli @mebeim.bsky.social · Oct 2

Back from the dead with some Linux syscall news:

6.15: +open_tree_attr (all archs),
6.15: RIP NUMA and related syscalls on x86 32-bit CPUs (BIGSMP dropped)
6.16: RIP uselib (well, about time)
6.17: +file_{get,set}attr (all archs)

+54 tables live at syscalls.mebeim.net 📡🐧

1 1

Marco Bonelli @mebeim.bsky.social · Oct 2

Turns out implementing a 50% subscription price hike is a very nice way to test the load on your servers! Seems like Microsoft's Xbox infra was not up to the test 💀

Marco Bonelli @mebeim.bsky.social · Sep 28

After 8 years with 100Mbps I saw they were pulling fiber cables in my neighborhood, called my ISP and they said I can upgrade to 2.5Gbps for free paying 5€ less per month than what I am paying now. LMAO.

1

Marco Bonelli @mebeim.bsky.social · Sep 27

Oh so now we just entered that weird phase where apps start gradually updating their icons to the new style and make everything look weird

1

Marco Bonelli @mebeim.bsky.social · Sep 26

Noticed this too. They are as big as my thumb on a 27in display, WTF. I feel like one random piece of UI gets bigger every day on YT.

2

Marco Bonelli @mebeim.bsky.social · Sep 22

program.why2025.org/why2025/talk...
github.com/ThijsRay/l1t...

Spectre in the real world: Leaking your private data from the cloud with CPU vulnerabilities WHY2025

Transient execution CPU vulnerabilities, like Spectre, have been making headlines since 2018. However, their most common critique is that these types of vulnerabilities are not really practical. Even ...

program.why2025.org

Marco Bonelli @mebeim.bsky.social · Sep 22

Can we go back to pen and paper already lore.kernel.org/kvm/20250804...

1

Marco Bonelli @mebeim.bsky.social · Sep 21

GG WP to all the teams who played ctrl-space.gg quals. Hope you enjoyed the challs! See (some of) you in ESTEC soon. 🚩🛰️

Final scoreboard for ctrl-space.gg competition showing top 20 teams along with details of solved challenges.

1

Marco Bonelli @mebeim.bsky.social · Sep 20

Somebody come pwn my pypy challenge with a single bit flip come on! scoreboard.ctrl-space.gg/challenges#c...

1 1

Marco Bonelli @mebeim.bsky.social · Sep 12

The Apple Intelligence ads were fucking hilarious, and I mean that in a bad way

1

Marco Bonelli @mebeim.bsky.social · Sep 12

Ok Apple: while my phone is locked I can block control center, block camera access, hide widgets, hide notification content... but somehow I can still swipe away and discard any notification? Make it make sense come on 😭

Marco Bonelli @mebeim.bsky.social · Sep 11

I don't think the website does a very good job at showing how bad current overall situation is, so here's a pie chart to make it clear. The fact that this is so close is alarming. If all vote, and 54/73 of the "Undecided" MEPs as per fightchatcontrol.eu vote in support, the regulation will pass.

1

Reposted by Marco Bonelli

Stefano Zanero @raistolo.bsky.social · Sep 10

If you are a scientist please consider signing our letter. If you are a concerned citizen (you should be!) you can find here a number of ways to make your voice heard: fightchatcontrol.eu

Fight Chat Control - Protect Digital Privacy in the EU

Learn about the EU Chat Control proposal and contact your representatives to protect digital privacy and encryption.

fightchatcontrol.eu

15 20

Marco Bonelli @mebeim.bsky.social · Sep 7

"In XChat, once a user clicks on “Set up now,” X prompts them to create a four-digit PIN, which will be used to encrypt the user’s private key. This key is then stored on X’s servers."

Oh for fuck's sake…

Lorenzo Franceschi-Bicchierai @lorenzofb.bsky.social · Sep 5

NEW: X has started rolling out it's end-to-end encrypted chat for all users.

I was invited to start using it yesterday, so I asked a couple of experts if users should trust it. The answer: no, nobody should trust it at this point.

There are several reasons why, which they explained to me here.

X is now offering me end-to-end encrypted chat. You probably shouldn't trust it yet. | TechCrunch

X's new encrypted messaging feature, XChat, has some red flags.

techcrunch.com

2