buherator

"I'm interested in all kinds of astronomy."

Personal: https://scrapco.de
GitHub: https://github.com/v-p-b
Nudes: https://infosex.exchange

Public Key

npub17wvr8uywpuzew2lqvprnt4g7cuq0kyvdf8gz57dlv3rsjvfcer3qqgnag2

NIP-05 Address

[email protected]

Profile Code

nprofile1qqs08xpn7z8q7pvh90sxq3e4650vwq8mzxx5n5p20xlkg3cfxyuv3csprpmhxue69uhhyetvv9ujumt0d4hhxarj9ecxjmntqyqq8m946x

Publishing to

relay.momostr.pink

Author Public Key

npub17wvr8uywpuzew2lqvprnt4g7cuq0kyvdf8gz57dlv3rsjvfcer3qqgnag2

Show more details

Last Notes

2026-07-21 10:08:44 UTC

[RSS] TruthSocial are selling their API - want it for free?
https://old.reddit.com/r/ExploitDev/comments/1v20jw0/truthsocial_are_selling_their_api_want_it_for_free/

2026-06-10 19:27:35 UTC

- reply

That's it thx! Based on the Update Guide this should fix the problem independently from the definition updates, so if you can repro on a clean system with this DLL version that's bad.

2026-06-10 12:26:35 UTC

- reply

what is the version of your mpengine.dll?

2026-06-10 07:21:07 UTC

- reply

Thanks, that sounds relevant! Do you have a link to an attribution source that I could include?

2026-06-10 06:24:31 UTC

Added some new entries to avpwn, including the CVE-2026-41091 Defender LPE from this Patch Tuesday:
https://github.com/v-p-b/avpwn

2026-06-06 20:25:44 UTC

- reply

to convince life forms to live in a place they don't naturally inhabit with a high chance of getting extinguished later

2026-06-06 14:14:01 UTC

- reply

sounds pretty cruel/inconsiderate to me...

2026-06-05 06:48:12 UTC

- reply

A universal marker for "no one will talk stupid in the mic" both for party ads and recordings. I think promoters would be quite surprised about the correlations the would occur!

2026-06-04 16:33:48 UTC

I complained about hexeditors recently. Now I found TeeHee, and I think I'll stick with it on all platforms:
https://sr.ht/~aleksi/teehee/

2026-06-04 16:08:38 UTC

- reply

- King Louis XIV. rode out around midday...
- UTC, CET or CEST?!

2026-05-21 13:36:10 UTC

- reply

It helps me dealing with taxes a lot if I imagine myself as the protagonist of a Kafka novel (or any other absurd/surreal work). Maybe it helps with SAP/other horrors too?

2026-05-04 16:25:38 UTC

It's 2026 and Windows still can't synchronize time

2026-05-03 06:07:09 UTC

- reply

chaotic alignment was missing so I created a chart
https://media.infosec.place/infosec-place/2e7d0a43e064eb7c593e1586c70d0411989d6082a2dbee8999b1af0908c04cab.jpg

2026-04-22 07:01:43 UTC

- reply

Can you tell us about token costs?

2026-04-20 17:30:35 UTC

Look into yourself and ask:
"Why am I still wearing pants?"

2026-04-16 07:31:34 UTC

- reply

"Is there some way of searching them?" I can only speak of Android: here definitely is a system-level option keep a browsable notification history.

2026-04-12 18:14:59 UTC

- reply

These are the official results, beware that atm processed rate is statistically meaningless (refresh once in a while):
https://vtr.valasztas.hu/ogy2026

2026-04-12 17:51:08 UTC

- reply

For final, official results, probably yes, but we are not a big country, the fundamental ratio will be visible cleanly soonish.

2026-04-07 15:07:10 UTC

You know what would make Fedi an attractive place for journalists (and lots of others)?
Working search!

2026-04-07 11:28:21 UTC

- reply

I simply use the Debian package (so I guess a lot of users have the same experience), and your explanation clears up why this is happening, thanks!
I guess the solution is to use a FF distribution that doesn't rely on the system updater then.

2026-04-07 09:13:52 UTC

- reply

I don't think it will help as I browse in p0rn mode. Also, I tried to look up docs, but support.mozilla.org is down for me... Why isn't there a config switch to disable forced restart[1]? I'm a grown adult, I can decide when I want to restart my browser.
[1] https://www.reddit.com/r/firefox/comments/16ug51m/is_there_any_way_to_stop_firefox_from_forcing_a/

2026-04-07 08:43:16 UTC

https://media.infosec.place/infosec-place/25a035e30d79844dc41beee025fbf0d3963fbba7c68b56a1f7447f9f1a508ba7.jpg

2026-04-06 17:09:30 UTC

- reply

"and if we think them not enlightened enough to exercise their control with a wholesome discretion, the remedy is not to take it from them, but to *inform their discretion by education*.”
Maybe you can point me to the right direction about this: today we see pretty clearly how un/mis/disinformed masses can ruin democracies, yet I see very little push for basing voting rights on education/knowledge. Why is that? (I know the "literacy tests" in the US were badly abused but this doesn't mean that fair systems are impossible)
I don't expect a full explanation, would be happy with some pointers.

2026-03-27 09:04:53 UTC

- reply

Gitea/Forgejo has cloud offerings IIRC, they are pretty solid too for regular repo stuff.

2026-03-25 09:07:37 UTC

- reply

"broken attention span" is a pretty interesting topic:
https://www.youtube.com/watch?v=aDfeOvUZ7Kk&t=240s

2026-03-22 12:46:13 UTC

- reply

"companies spending money with the adtech companies do see returns" - Not necessarily, as measuring conversion rates is not easy. If you see that without G your visits plummet (as measured by G) you go back to G. Recommended:
https://thecorrespondent.com/125/the-non-sense-of-online-advertising-when-the-numbers-dont-add-up
I'm not familiar with news specifically, but I assume they don't partner with advertisers directly, but through an ad network, which is in the end owned by Meta or G, who can ~arbitrarily set their prices/payouts?

2026-03-22 11:15:40 UTC

- reply

Yes, this is what I mean.
You are right that these are extremely powerful tools, still I feel like most customers (by count, not invoices) are just burning their money on adtech, because that's what everybody does, while you don't have to be Nassim Taleb to see that the numbers justifying the spend are rigged.

2026-03-22 10:24:00 UTC

- reply

I still don't get how the market of "telling people about things" can be more profitable than the market for "things" (G and Meta being the largest companies in the world) in the first place.

2026-03-20 16:40:42 UTC

Since I read the JPL coding manual I'm always very considerate before introducing an infinite loop.
Then I usually decide that "it's fine, this is not a spaceship" and forget to implement the exit path.

2026-03-20 16:12:28 UTC

- reply

Pleroma/Akkoma are more lightweight if that helps

2026-03-19 09:33:31 UTC

[RSS] Streamlining Google's OSS VRP: Key Rule Updates
https://bughunters.google.com/blog/ossvrp-rule-updates-2026

2026-03-11 15:57:59 UTC

- reply

Mandatory LLM generated design
https://media.infosec.place/infosec-place/56b2121da9920cf9e612fb173acc053acb1bff51d70fd438d330ee1d653278e9.jpeg

2026-03-11 13:35:52 UTC

Hear me out: The boiling point of ethanol is well within the range of operating temperatures of GPUs, so we could use all those AI datacenters to brew moonshine!

2026-03-09 16:15:06 UTC

It's a bit hard to find in the announcement publications, but this is the technical analysis one of the #Firefox bugs Anthropic's agents found:
https://red.anthropic.com/2026/exploit/
#LLM

2026-03-06 10:30:54 UTC

- reply

"hand out the contents of emails which Proton cannot" - OK let's not dive into if G should have obeyed a subponea... In both cases the accounts came under scrutiny because authorities _already knew_ email contents. Gmail would even have the benefit of not having payment info (also, cheaper).
(Btw. Proton can absolutely leak all your e-mails e.g. from the frontend they serve to you.)
"it's not victim blaming to point out bad OPSEC" - by this logic we shouldn't criticize charlatan doctors, because their patients should know medicine better?

2026-03-06 10:07:34 UTC

- reply

Let's put it this way: the acc owner is in the same situation as if they used Gmail for free (if they were smart authorities would even have a harder time connecting the person to IPs and other metadata). This is speculation, but I'd bet that the relevant comms is already collected from the users or the recipients devices/e-mail accounts too.
So what is exactly the value Proton provided here that the user paid for?

2026-03-06 09:49:16 UTC

- reply

I disagree. Proton convinced US people that their comms will be safe at a foreign provider (them). Were users naive to believe this? Yes, but this is victim blaming.
I agree that Proton is not the only bad provider in the market. Actually, the whole market exists because all the providers communicate dishonestly.

2026-03-06 08:40:31 UTC

- reply

"subscriber information received from the Swiss Mutual Legal Assistance Treaty Unit" - so the FBI basically asked the Swiss police, that got the data and forwarded it back under the umbrella of a long standing treaty between the countries/authrities. This should not be surprising at all btw, but somehow for many VPN customers it is.

2026-03-04 15:30:12 UTC

Time dilation can be observed in the proximity of large masses and software that is supposed to crash.

2026-03-04 09:28:35 UTC

I'm at the stage of debugging where I start to see cosmic meaning in PIDs.
#numerology

2026-03-02 17:11:25 UTC

*Screams in 53-bit numbers*

2026-03-02 14:17:33 UTC

- reply

Maybe you can hack a sensor into @npub1pf3…uep8's SensorWatch for compass? https://www.sensorwatch.net/

2026-02-26 14:18:45 UTC

- reply

I browse in private mode for various reasons (not all security/privacy related) so it doesn't work (as it shouldn't).
Now I would link that thread where there are users with this very same problem but y'know, I just had to restart my browser so I don't have the link anymore :)
Now I get that my setup is still counts as strange but this behavior *guarantees* regular users run away screaming regardless if they can restore or not.

2026-02-26 14:05:11 UTC

You know what, I'm kind of OK with the #Firefox AI opt-whatever solution they have
...compared to the fact that they kill all my sessions by a forced fucking restart when I try to act responsibly and update.
That's fucking outrageous!

2026-02-26 11:13:52 UTC

- reply

Thank you for the additional info! I already opened #1096 and #1097 in frida-gum, hope they will be useful!
Right now I'm trying to fingerprint the runtime based on JS behavior (e.g. `console.log(gc.toString())`) but neither gadget configs nor `frida --runtime` seem to have any effect.
Update: It seems in V8 `gc.toString()` doesn't have newlines

2026-02-25 18:21:51 UTC

Is it possible/reasonable to compile @npub1ne9…0uhz with V8 in 2026? (I just reported a couple of QuickJS bugs that are blockers for me)
If so, are there any documentation available about the build process or is that knowledge lost to bitrot?
#Frida #ReverseEngineering

2026-02-23 09:36:37 UTC

- reply

Reminds me of us nerds installing Linux then spending weeks tweaking our WMs, shells and editor configs...

2026-02-18 08:24:18 UTC

- reply

Thanks, that makes sense, but I can't touch Session as it comes from a dependency. There is definitely a lifetime issue here too (esp. because the actual tree of objects goes ~5 levels deep).
I think the root of my Q is if there is a way to create a "will" for Rust functions/scopes that would say "after my death my caller will inherit all that I own (so please don't free shit up)"?

2026-02-18 08:04:58 UTC

- reply

From a different branch of this convo:
"Imagine that initialization is more complex and I want to provide a library that hides that complexity, exposing something like setup_widget() and deinit_all()."
https://infosec.place/notice/B3RIRrdtPQog3eUc2y

2026-02-18 07:38:48 UTC

Today in This Should Be Easy But in #Rust It Apparently Isn't: how do I encapsulate the widget initialization (without triggering E0515) in this example, so it becomes reusable?
https://play.rust-lang.org/?version=stable&mode=debug&edition=2024&gist=f31dd1ecf5530b11e301bb19af85b0fa

2026-02-09 16:39:23 UTC

git ass

2026-02-07 13:39:12 UTC

- reply

Thanks for the explanation, truly appreciated!
I guess you can't do much about it now, but IMO French could've been excellent for finding a unique name (not necessarily with your weirdest spelling, but people learned to spell "kubernetes" too).
We agree that the homepage link is actively misleading, but it should be easy to remove (not a mandatory field) or replace e.g. with the link to the documentation.
@[email protected] @npub1dxu…zf3q @npub16y8…6lsk

2026-02-07 10:45:55 UTC

It's great to see #EU open tech initiatives popping up, but somehow it feels like we are just **terrible** at making ourselves visible, esp. compared to US.
Like how is anyone supposed find this (otherwise great) project - named "docs" - using a search engine?
https://github.com/suitenumerique/docs/
Even assuming I find this project, how do I search for anything related to it (e.g. install guide)?
Why is the homepage in French by default, without a clearly visible language switcher (also looking at you, @npub12k0…e2sz )?

2026-02-03 08:47:33 UTC

After all these years I still rely on brute-force when it comes to copy-pasting on #Linux:
- Which paste should I use for vim's * and + buffers?
- Which clipboard is used by Java GUI's?
- Did JavaScript manage to put text on the clipboard this time? Which one?
- etc.
How do fellow #X11 users keep track of your clipboards?

2026-01-28 16:15:04 UTC

- reply

Participating in P2O as a vendor is a thing to be respected in the first place. They also wrote a blog about their efforts, but the link is broken - you can probably get it from an archive:
https://blog.synology.com/the-efforts-synology-made-in-pursuit-of-data-security
This is a more technical analysis from the attackers view:
https://drive.google.com/file/d/1MYCNVKkNETkqS-cLJsqHE43Sfm4LZbCO/view?pli=1
In short: they took significant steps forward during the past years, they probably ignored active network attacks (on LANs this may make sense, for Internet comms not so much).

2026-01-28 13:28:16 UTC

[RSS] When NAS Vendors Forget How TLS Works
https://www.interruptlabs.co.uk/articles/when-nas-vendors-forget-how-tls-works
#QNAP #Synology #Pwn2Own #NoCVE

2026-01-24 23:08:23 UTC

[RSS] Defeating Anti-Reverse Engineering: A Deep Dive into the 'Trouble' Binary
https://binary.ninja/2026/01/23/reversing-linux-anti-re.html
#ReverseEngineering

2026-01-24 19:53:37 UTC

Raiden Warned About AI Censorship
https://www.youtube.com/watch?v=-gGLvg0n-uY
This is creepy af (2023!)

2026-01-22 20:22:21 UTC

[LWN] Responses to gpg.fail
https://lwn.net/SubscriberLink/1054220/c6f98b90a009fca2/

2026-01-19 16:34:51 UTC

- reply

even in that case a) I don't like to write a _slightly_ different tool for a similar task (here comes maintenance) b) the fixed cost of vibe-coding (which is very easy to under-estimate) can easily exceed the cost of finding/learning 1 tool that can replace N.
But sure, I also do ad-hoc tools like this, and I actually think your observation is correct, it's just the tendency that is very slippery.

2026-01-19 16:26:43 UTC

- reply

Problem is those vibe-coded tools will rarely get enough testing and maintenance to become really useful so we'll end up crafting (subpar) hammers for each nail, esp. because crafting hammers in this case feels pretty rewarding, see: https://svnscha.de/posts/the-passenger-seat-developer/

2026-01-19 15:10:20 UTC

- reply

ICYMI: https://github.com/silentsignal/burp-piper

2026-01-19 11:47:34 UTC

- reply

I would probably cry because of the unnecessary complexity containers introduce for this use-case.

2026-01-16 18:44:42 UTC

[RSS] wtf is NS_ERROR_INVALID_CONTENT_ENCODING? investigating shared dictionaries and ChatGPT breakage in Firefox
https://joshua.hu/chatgpt-fail-loading-firefox

2026-01-16 17:30:57 UTC

- reply

Could you please ELI5 for me what a "permacomputing collective" is? This brewing metaphor is cool but a bit too abstract for me to imagine what is happening in such a group.

2026-01-16 08:01:19 UTC

I just got the weirdest e-mail:
It's a lab result for someone else. It has a PDF attachment, but I can see noting malicious in it. The sender domain exists and does lab stuff. I looked up the person in the document and he seems to exist.
I'd say this must be a typo, but my e-mail address has only the first character (and probably the domain) matching with the persons name. I highly doubt his internet handle is a short keyboard distance from my Hungarian handle.
I have two theories:
a. This is a highly sophisticated scam (but I don't see the scam part yet)
b. Copilot hallucinated my e-mail address (which is actually pretty easy to scrape from the web)

2026-01-15 09:40:53 UTC

- reply

does MS Teams count?

2026-01-13 14:25:30 UTC

[RSS] Symless: an IDA assistant for structure reconstruction
https://blog.thalium.re/posts/symless-an-ida-assistant-for-structure-reconstruction/

2026-01-12 11:47:17 UTC

- reply

There are no originals, only the data from the service with some random compression. What do I compare hashes to?

2026-01-12 11:32:57 UTC

Archivists: suppose you have to scrape large amounts of media for preservation from an unfriendly service. How do you ensure that the retrieved media didn't get corrupted along the way? (I don't want to watch/listen to 1000s of hours A/V)
#archiving #scraping

2026-01-12 10:33:11 UTC

- reply

We (Hungary) don't anticipate EUR anytime soon, prices still climbed to 400% since 2015.

2026-01-05 17:31:02 UTC

- reply

My recommendation: https://this-museum-is-not-obsolete.com/
Not a typical a museum, more like a playground for geeks :)

2026-01-02 13:14:27 UTC

- reply

So you'd source a print head from scrap and use HP's cartridges for ink?

2026-01-02 12:46:51 UTC

- reply

I go to print shops because I refuse to maintain any commercially available printer, so literally anything that works would be step-up for me.

2026-01-02 10:27:43 UTC

Open Printer
https://www.crowdsupply.com/open-tools/open-printer
I've been looking for something like this for a long time! Unfortunately I don't yet see how ink could be supplied, and as @npub10hd…faqp points out, the chosen CC license would make establishing a sustainable ecosystem difficult...

2026-01-01 16:52:29 UTC

- reply

Thanks for the great talk, definitely the most thought provoking one for me from this CCC! Have to watch it like 3 more times to get all the details though 😅

2026-01-01 12:21:55 UTC

- reply

I'm bringing this up exactly because when CVSS will be assigned it will either show 0.0 or some really weird non-sense. The former would be likely a better, but still misleading scenario,. My bet is on MITRE publishing some non-sense though.

2026-01-01 12:15:42 UTC

- reply

Not saying it's not a vulnerability but I think you won't be able to score this with CVSS that would make CVE registration weird.

2025-12-31 14:29:49 UTC

- reply

One of my secondary desktop runs NixOS and it's perfectly usable as long as you are willing to spend some extra time to look up docs when you introduce some more serious change (e.g. new HW). "I need to just get something done real quick" is exactly the way junk gets piled up, but IME NixOS educates you to either use a temporary install or setup things in containers/VMs that will probably pay off in the long run (I also have a VM host, so this may be easier to do for me).

2025-12-27 08:01:24 UTC

- reply

But I had a chance to choose the appropriate interface instead of blindly trying things in an environment you can't properly debug...

2025-12-26 19:47:05 UTC

- reply

Thanks for the responses, but my diagnosis was wrong - although I still don't quite get it: it turns out that the object I'm writing out (json.dump) contains a list that gets extended by the script (this sort of explains why I'm writing out more and more data), BUT the list is part of an object that I reinstantiate on every run, which should empty the list (I call super() with an empty list). Problem is the (super)class is generated code and I suspect the list is not in fact an object member but a static class variable that may cause this??

2025-12-26 19:25:26 UTC

OK so either I have a fundamental misunderstanding of how #Python I/O works, or this is a bug:
I have a `with open(..., "w") as foo:` block in my script. If I execute it twice (now from #IDA, and I experienced the same with #Ghidra) the contents are _appended_ instead of truncating the output first!
WT actual F?!

2025-12-26 17:39:14 UTC

All I want for Xmas is sane documentation <3
https://media.infosec.place/infosec-place/c1123feec013df61ddcf55706bb1d122c99f11b469cc530d4fff2cee48afb4d4.png

2025-12-22 15:55:17 UTC

- reply

This one by @npub1zhy…cve0 may cover the details, although the CVE is not mentioned: https://blog.quarkslab.com/k7-antivirus-named-pipe-abuse-registry-manipulation-and-privilege-escalation.html

2025-12-22 08:14:47 UTC

[RSS] When OAuth Becomes a Weapon: Lessons from CVE-2025-6514
https://amlalabs.com/blog/oauth-cve-2025-6514/

2025-12-16 16:44:05 UTC

It's 2025, and I have to prompt an LLM no less than 5 times to figure out how to add a new keyboard layout to Windows Server 2025, becase 1) the UI turned absolutely shit 2) the built-in search is optimized for ads instead of discovering functionality.
Also, Disk Management is gone, and you get no meaningful results for "disk" in the Start Menu. But when you *right click* the Start icon it's there. Why would it be so hard to make this discoverable by search (or leaving a shortcut with the original name)??

2025-12-15 15:24:00 UTC

- reply

Not really grasping the situation but Pigaios by @npub1z5a…8gud may also be interesting?
https://github.com/joxeankoret/pigaios

2025-12-11 08:36:57 UTC

- reply

styropyro? :)

2025-12-09 16:21:20 UTC

- reply

Wow that was quick, glad I could help!
I've been doing infosec for ~20 years but I only realized recently we communicate wrong after some relatives fell for QR-based scams and had to walk them through what happened.
I agree that determining risk is incredibly hard in this case and TBH I think "don't trust QRs" may be more effective than trying to teach everyone URLs, DNS and PKI...

2025-12-09 12:37:50 UTC

- reply

Great initiative, saved and shared!
One suggestion re: "QR codes are simply a way to open a URL" -> users have no clue what URLs are or how to interpret them. Even if you assume they can parse out the true domain (major if!), they don't know which domains are trustworthy. On top of this mobile browsers make it esp. hard to inspect URLs. We need to come up with better advice for site verification!

2025-12-08 18:52:24 UTC

- reply

"The benefit of having an actual memory space for special function registers is they can be seen, named, references created to them, data types applied at the location, as well as default values supplied for a given binary sample. We plan to do the same for other processors such as the PowerPC."
I hope this is the reason why my PPC-AS pull request is open for more than a year now :)

2025-12-08 18:46:40 UTC

That was quick: #Ghidra 12.0 is out! Here's what's new:
https://github.com/NationalSecurityAgency/ghidra/blob/Ghidra_12.0_build/Ghidra/Configurations/Public_Release/src/global/docs/WhatsNew.md

2025-11-23 18:31:42 UTC

"Last week the @FFmpeg account began taunting security researchers. Foolish thing to do, as it ignores the asymmetry of their attack surface vs ours.
So as an exercise I found a stack-based buffer overflow on software that he wrote." - @npub15gk…3jd8
https://threadreaderapp.com/thread/1991974275532636263.html
Normally I'm all for these stunts, but this one...
https://media.infosec.place/infosec-place/e5748c5db998dc1e8d5a3627322fe1d132bab9e73a8d767595f57eecc602db34.gif

2025-11-21 18:25:54 UTC

Please help making #TreeSitter Playground better by doing this little experiment:
https://tree-sitter.github.io/tree-sitter/7-playground.html
Write some JS, like `var x=1;`. Enable Query and provide the `(identifier) @foo` pattern in the new Query textbox.
Do you see the code highlighted? (if not, turn on Accessibility, a'la GH issue #1714)

2025-11-21 13:18:19 UTC

That's how I like my #Friday's: I came back from lunch and my code started working!
Time to push to prod...

2025-11-20 15:49:47 UTC

- reply

nice attack surface, upvoted! :)

2025-11-19 12:33:01 UTC

TIL cURL only supports the lowercase http_proxy environment variable:
https://curl.se/mail/archive-2001-12/0034.html

2025-11-18 13:06:59 UTC

- reply

lol, some chaos engineering right there!

2025-11-18 12:29:48 UTC

Cloudflare down is another teachable moment to think about your eggs and your baskets.

2025-11-16 18:09:00 UTC

TIL Minecraft requires a freaking MS account. I thought it wasn't that bad so we proceeded to create one, but it turns out that if you want to create a child account (based on birth date, to avoid adult ads and shit) you as an adult *also* need a MS account that would be of course immediately connected to your childs account which I assume to be a gold mine for advertisers.
Seriously, fuck #AdTech!
(I also wonder if this is legal in the EU?)