Pinned Tweet
The setup behind the CVE-2024-3094 supply-chain attack is fascinating. I originally wanted to finish and share a tool to audit other OSS projects for anomalous contributor behavior, but I feel what I found trying to MVP it is way more interesting. 🧵 1/25 gist.github.com/rubyroobs/77…
ALT diff of running strings on an existing test fixture in the xz project and the one containing the injected code added by the attacker
did you know the government of Hong Kong has a free e-card service on their website?
gov.hk/en/apps/ecardhk.htm
EES implementation is such an actual joke, I had to queue to “pre-register” despite doing it last time, but am now in a queue with ppl who were told to skip the machine… I guess they just turn it off when the queue gets too big? Everyone seems they’ll miss their connections too.
excited to be going to defcon for the first time in 10 years (?!) - infosec friends pls msg me if you're going and would like to meet up!
just found out the "SK" in SK Telecom doesn't stand for South Korea and I feel like the reality I knew is being shattered in front of my eyes
noksapyeong station is incredibly minecraft creative mode coded, and no, i will not elaborate any further on this
the best/worst part of openbsd is you’ll be like “ehh? why is there no proper way to get the current executable path???” and then you find an mailing list reply from 10yr~ ago that makes you realize actually they have a p good reason for not having one marc.info/?l=openbsd-misc&m=…
(this is a detailed explanation with more relevant context from another core dev github.com/ziglang/zig/issue…)
