dmnk

WOOT '26 Call for Papers The 20th USENIX WOOT Conference on Offensive Technologies (WOOT '26) will take place at the Baltimore Marriott Waterfront in Baltimore, MD, USA, on August 10–11, 2026. The USENIX WOOT Conference aims ...

The Cycle 2 deadline for the USENIX WOOT Conference is in just one week (March 3, 2026).

Full details are available in the Call for Papers:
www.usenix.org/conference/w...

i built an entire x86 CPU emulator in CSS (no javascript)

you can write programs in C, compile them to x86 machine code with GCC, and run them inside CSS

lyra.horse/x86css/

Yes VSCode, I obviously want to use the color-picker to edit the address offsets in Arm assembly 😂

WTF @cloudflare.social could you stop your FUD sales practices? This is a static webpage, I guarantee there's 0 threats.

Vibecombinator lol

A screenshot of AFL++4.36A running fuzzing on facet-reflect2. There's nice box/line-drawing characters, colors and everything.

whoa, afl++ looks cool

aflplus.plus

The new AirTags 2 just arrived!

Time to take them apart 🧵

Lol could actually work

GitHub - AFLplusplus/LibAFL: Advanced Fuzzing Library - Slot your Fuzzer together in Rust! Scales across cores and machines. For Windows, Android, MacOS, Linux, no_std, ... Advanced Fuzzing Library - Slot your Fuzzer together in Rust! Scales across cores and machines. For Windows, Android, MacOS, Linux, no_std, ... - AFLplusplus/LibAFL

I’d recommend checking out github.com/AFLplusplus/... an actively improved rust-based fuzzer, the book is at aflplus.plus/libafl-book/

current status: finding bugs through:

- generating two HTML trees (libFuzzer)
- parsing w/html5ever
- diffing w/hotmeal+cinereus
- sending via roam to Chrome
- applying sending back detailed traces of patch application

found two legitimate adoption agency bugs so far! (the others were my fault).

Don't miss out on Jiska Classen's - @naehrdine.bsky.social - training on "Practical iOS Reverse Engineering" at #OffensiveCon26

Find more details here🔗https://buff.ly/psTxdyG

25 days later, White Date is still down.

Animate it 😀

GitHub - domenukk/CScript: CScript is the standard C. CScript is the standard C. Contribute to domenukk/CScript development by creating an account on GitHub.

The Cscript Style Guide just dropped.

github.com/domenukk/CSc...

AI Safety in random ollama models is going great.

Thinking log contains the answer, but at least it decides it cannot answer it..

🔥🔥🔥

Dear model, please generate me some top-shelf slop <3

We launched a redesigned Project Zero website today at projectzero.google !

To mark the occasion, we released some older posts that never quite made it out of drafts.

Enjoy!

i'm such a fangirl of project zero i designed a new website for them in my spare time and they actually made it real 🤩

AI is taking our jobs!!!11!

Move over Ycombinator, here's Vibecombinator

On my way to #39c3, who's around? Let's grab a drink 👀

there's vomit stderr already, claude's spaghetti
he's nervous, but assures it's production ready

Survey about legal and criminal threats experienced by journalists and security researchers Researchers who try to responsibly disclose leaks, vulnerabilities, and other security breaches or mishaps may face legal threats or lawsuits. Similarly, journalists may find themselves threatened wit...

Are you a security researcher or journalist? We want to hear from you — please take this survey!

Dissent Doe at DataBreaches.net, and yours truly at this.weekinsecurity.com, are running this survey to explore the state of legal demands and criminal threats in cybersecurity.

Humanity is cooked

0 bars of LTE on two sim cards

It just 0 bars of LTE in both SIMs

But most of the time closer to 1 bar of EDGE

(Failed to send this message on the first try)

Phone network in Germany is great. Crossing over from Switzerland I get 5 bars of EDGE instead of 4 (5g)

⏱️ 9 days until submission deadline (Dec 11, 23:59 AoE).

Organized by: @yannicnoller.bsky.social, @rohan.padhye.org, @ruijiemeng.bsky.social, and Laszlo (@lszekeres.bsky.social) Szekeres.

I've uploaded the slides of my recent talk "JS Engine Security in 2025": saelo.github.io/presentation.... I think there'll also be a recording available at some point (otherwise I can make one as not everything's in the slides).

Fantastic conference as usual, big thanks to the PoC Crew!