soggybiscuit.bsky.social
soggybiscuit.bsky.social
@soggybiscuit.bsky.social
Reposted by soggybiscuit.bsky.social
Threat actors are tricking WhatsApp users into linking the attacker's device to their accounts in a new attack technique named GhostPairing

www.gendigital.com/blog/insight...
December 16, 2025 at 4:06 PM
Reposted by soggybiscuit.bsky.social
📢 Announcing hacklore.org 📢

It’s time to retire outdated cyber advice! More than 80 cybersecurity veterans have signed an open letter urging a shift from folklore to guidance that actually helps people avoid the most common attacks. 🔐

Blog: medium.com/@boblord/let...

Site: www.hacklore.org
Stop Hacklore!
hacklore.org
November 24, 2025 at 3:05 PM
Reposted by soggybiscuit.bsky.social
I am probably old fashioned, but running into an open source commandline tool written in C that "requires" meson and ninja to build, in order to accomplish the equivalent of...

$ gcc -o tool main.c -lone -ltwo

...seems like maybe just a bit of overkill to me.

#OldManYellingAtCloud
November 17, 2025 at 10:51 PM
Reposted by soggybiscuit.bsky.social
My favorite security story I've read this year 😂, a story of surprising turns by Alex Smolen: engseclabs.com/blog/raccoon...
Backyard APT: A Raccoon Story
Raccoons are both advanced and persistent threats. After one attacked my chihuahua Jolene, I declared war on my backyard invaders. Through ultrasonic deterrents, motion-activated sprinklers, and wacky...
engseclabs.com
November 11, 2025 at 5:24 PM
Reposted by soggybiscuit.bsky.social
Just got a major auroral substorm alert, if you happen to be somewhere where it’s dark
November 5, 2025 at 10:26 PM
Reposted by soggybiscuit.bsky.social
The Linux kernel has patched a bug in the RDSEED entropy generator that caused AMD Zen5 chips to fail to produce random numbers.

The patch disables RDSEED and forces all AMD Zen5 processors to use RDRAND for generating random numbers.

lore.kernel.org/lkml/2025101...
October 19, 2025 at 2:47 PM
Reposted by soggybiscuit.bsky.social
Today I needed a bit of code, but instead of asking an LLM I tried writing it myself and wow, this could be a new paradigm
October 11, 2025 at 11:42 PM
Reposted by soggybiscuit.bsky.social
One the craziest elements about cybersecurity is you have half the industry sat worrying about cyberwar!1! and going on about quantum and AI, then you have you have the operational reality of what is actually happening on the ground - it bares no resemblance, at all, to what people are focused on.
October 1, 2025 at 3:21 PM
Reposted by soggybiscuit.bsky.social
I'm watching my nanny's dog this weekend. So far Flower has gotten up to some very unsafe things.
August 22, 2025 at 5:58 PM
Reposted by soggybiscuit.bsky.social
Today is the 47th anniversary of this clearly unimprovable photo, from a story so absurd that it shouldn’t be true, but is: the day a team of workers from British Waterways pulled the plug out of the Chesterfield Canal, and all the water emptied out
August 10, 2025 at 10:01 AM
Reposted by soggybiscuit.bsky.social
We are all made of stars, but your RBAC shouldn’t be
July 21, 2025 at 1:28 PM
Reposted by soggybiscuit.bsky.social
For CI reasons (speed), I wrote a FUSE filesystem to act like the $GOMODCACHE directory to make it look like all world's #golang modules are available locally on disk without having to download them.

Then the FS downloads them if/as needed, storing them in git trees/blobs (no commits) for de-dup.
July 15, 2025 at 6:18 PM
Reposted by soggybiscuit.bsky.social
One of my students sent me the latest quantum factorization record, and I have to admit: I’m shook. eprint.iacr.org/2025/1237
Replication of Quantum Factorisation Records with an 8-bit Home Computer, an Abacus, and a Dog
This paper presents implementations that match and, where possible, exceed current quantum factorisation records using a VIC-20 8-bit home computer from 1981, an abacus, and a dog. We hope that this ...
eprint.iacr.org
July 13, 2025 at 2:53 PM
Reposted by soggybiscuit.bsky.social
Reposted by soggybiscuit.bsky.social
London is over
June 30, 2025 at 12:04 PM
Reposted by soggybiscuit.bsky.social
Ironically (and unjustly!) VirusBlokAda is not even credited in the CVE record for CVE-2010-2568

cve.mitre.org/cgi-bin/cven...
CVE - CVE-2010-2568
The mission of the CVE™ Program is to identify, define, and catalog publicly disclosed cybersecurity vulnerabilities.
cve.mitre.org
June 17, 2025 at 2:50 PM
Reposted by soggybiscuit.bsky.social
My pull-ups are getting better
June 13, 2025 at 12:35 PM
Reposted by soggybiscuit.bsky.social
CI/CD shouldn't mean choosing between “works” and “secure.”
Tailscale’s GitHub Action now supports Windows, macOS, & Linux 🧑‍💻✨

tailscale.com/blog/private...
#GitHubActions #DevOps #Tailscale #CI_CD
June 10, 2025 at 5:01 PM
Reposted by soggybiscuit.bsky.social
Some recent experiences programming with agents. crawshaw.io/blog/program...
June 8, 2025 at 6:35 PM
Reposted by soggybiscuit.bsky.social
I am officially one of The Ancients, Keeper of Knowledge of the Before Time
June 4, 2025 at 1:43 AM
Reposted by soggybiscuit.bsky.social
Time for an update! Over the past 9 days, I was driving across the entire US with my housemate and her dog, as the final stage of the move-in process. Next up, I'm planning to revisit Birgenair flight 301—that's the crash caused by wasps—while continuing to translate the Pulkovo 612 report. 1/3
May 28, 2025 at 11:25 PM
Reposted by soggybiscuit.bsky.social
This weekend I realized my daughter needed a particular sand toy for her kinetic sand standing sandbox.

I described it to ChatGPT, o3 thought about it for a minute and gave me the requested OpenSCAD and I hit print.

45 min later we had the part in the sandbox.

"Tea, Earl Grey, hot.", yo.
May 5, 2025 at 4:34 PM