flanvel retweeted
If any elected leader opposes data centers or the reindustrialization of America, just say you support them in Chinese. Make every reply below their posts in Chinese.
They will eventually go insane.
The second blog post is about an RCE on a hosting provider that allowed us (@sshell_, @xEHLE_) to steal the WARDOGS server binary, where we could grant unlimited XP and money to any player: samcurry.net/wardogs
Newsom just commuted the sentence of the man who locked this boy up in a cage, made him eat cat shit and shot him with BBs for fun only to watch him die.
A developer built a free Linux driver for USB display adapters and got a legal notice instead.
Mike Lothian was building Vino, a free Linux driver for DisplayLink hardware, using Rust and some AI assistance.
Then Synaptics, the company behind DisplayLink, sent him a cease-and-desist notice alleging patent infringement.
Lothian challenged the claims and shared the legal letters publicly. He’s a hobbyist developer without a lawyer.
The project’s GitHub repository is now no longer publicly available.
Full story: phoronix.com/news/Synaptics-…
flanvel retweeted
As someone who works professionally in AI, let me just say a few things:
1) I, much moreso than most everyone else, am hyperaware of just how dangerous these models can be. In fact, I'm giving a presentation on exactly that to a federal entity in a few weeks.
2) I have a 40+ year career in cybersecurity, doing such since long before there was such a term. Hell, I was doing it before firewalls existed.
3) As much as I loathe and despise the frontier model companies (so much so, my family has several pending individual -- not class-action -- lawsuits against a few of them), I recognize this as an international arms race. As such, "punishing" tech firms, particularly AI firms, is so shortsighted as to be suicidal.
I can tell you with certitude that human defenders absolutely cannot keep pace with this new era of AI-assisted, or full AI exploitation of assets.
If we pause AI development in this country, it's a crapshoot which will destroy this country first, a hostile foreign power, or the foreigners who're busy destroying this country from within.
ABSOLUTE BLOODBATH IN THE MARKET.
Over $2 trillion has been wiped out from US stocks in just 50 minutes after the open.
This is the fastest wipeouts in US stock market history.
The S&P 500 is down 2.7% and has now erased all of its gains since the midterm results.
Most of the selling is in tech stocks:
• Nvidia: -7%, -$300 billion
• Tesla: -9%, -$140 billion
• AMD: -12.5%, -$100 billion
• Micron: -10%, -$95 billion
• Broadcom: -5.5%, -$90 billion
Health care, consumer staples and energy stocks are up today.
Did Democrats just kill the AI trade?
flanvel retweeted
After 25 years, the original Xbox's last hidden ROM has finally been dumped: the CPU's microcode!
This has been a goal of mine for over 6 years, and I've worked on it off and on ever since.
Over the last couple of weeks, while building inventory and shipping orders, I've also been running hardware tests 24/7. This poor Xbox has rebooted over 50,000 times in those two weeks alone.
And it finally paid off.
The dump covers the entire 4,096-line microcode address space. The ROM itself occupies 3,200 of those lines, roughly 12 KB of microcode.
I can't overstate how huge this feels. After all these years, I finally have it.
A full write-up is coming next year!
flanvel retweeted
The bug is like a joke.
On Alpine Linux, type 257 to 1024 characters of anything and you get root. 💀
‼️ BREAKING: OpenSSH has rushed out a fix for a critical flaw that lets attackers log into some Linux servers without the right password.
The team learned of the bug a day earlier. OpenSSH's Damien Miller says long embargoes now mostly help attackers, because AI agents rediscover bugs, sometimes within hours.
It hits Linux systems on the musl C library with PAM off, such as Alpine Linux. Miller told admins to disable password logins or SSH itself "IMMEDIATELY".
Version 10.6p2 works around it. Systems on glibc or PAM are not affected, and Miller says the root cause sits outside OpenSSH.
flanvel retweeted
someone that is at the Whitehouse between 5pm and midnight has some compromised devices.
Or at least some that are providing residential proxy access to botnets.
flanvel retweeted
🚨 BREAKING: 911 call released from the Bend dad who ran into Silver Rail Elementary and killed the teen gunman.
Dispatcher: "Don't do anything."
Him: "This is my daughter's school!"
flanvel retweeted
Started putting some of the markdown files that were the basis that guided most of the agents while hacking MacOS on github. more will come as im able to clean up some of the files to remove some nuanced things.. but heres the repo:
github.com/dawgyg/AppleResea…
flanvel retweeted
Because:
1. Society has the attention span of a golden retriever, and the news wants to make ad revenue.
2. Reporting on "People are super mad about Flock" is a lot easier and lower risk than reporting on a story about a cop misusing the cameras and sexually abusing a child.
flanvel retweeted
"Variety Jones" has been added to the OpSec Failures page.
Direct file: darkwebinformer.com/opsec-fa…
flanvel retweeted
Steal My Bitcoin Operator Writeup!
pavursec.com/blog/stealmybit…
📜 From RCE to camera credentials in Axis Camera Station
ricardojoserf.github.io/axis…
During a penetration test, I exploited CVE-2025-30023 (insecure deserialization) chained with CVE-2025-30026 (authentication bypass) to get SYSTEM-level RCE on two Windows machines running Axis Camera Station on a factory. After that, I discovered CVE-2026-63286, a weak credential encryption scheme, which allowed me to decrypt all the camera credentials stored in the application’s database and connect to the cameras.
Full attack chain summary:
• Identify Axis Camera Station on port 55752 during the network scan.
• Exploit CVE-2025-30026 + CVE-2025-30023 to get unauthenticated RCE as SYSTEM on both Windows servers, getting access to the factory network.
• Copy the .FDB database files.
• Exploit CVE-2026-63286 to decrypt all stored credentials.
• Connect to the factory cameras using the decrypted credentials.
Unauth RCE on Axis Camera Station (ACS)
github.com/ricardojoserf/axi…
Offline decryptor for AXIS Camera Station (ACS) credentials
github.com/ricardojoserf/CVE…
flanvel retweeted
We discovered a critical vulnerability that allows remote attackers to bypass firewall restrictions and establish bidirectional communication. Codename: BunkerBuster💥
eeabb157b3a3f251b52656c1a445564c8f7a4cb2340f0d41de76d2cbc542cde6
flanvel retweeted
RETRO GAMING FANS: THIS IS A MASSIVE COLLECTION OF GAME ARTWORK! 🎮
Libretro has a free online archive packed with artwork for thousands of retro games.
What you'll find:
Game box covers
Screenshots and gameplay thumbnails
Title screens
Game marquees
Complete artwork collections for multiple platforms
Perfect for customizing RetroArch, building game libraries, or making your retro gaming setup look cleaner.







































