buherator

"I'm interested in all kinds of astronomy."

Personal: https://scrapco.de
GitHub: https://github.com/v-p-b
Nudes: https://infosex.exchange

Public Key

npub17wvr8uywpuzew2lqvprnt4g7cuq0kyvdf8gz57dlv3rsjvfcer3qqgnag2

NIP-05 Address

[email protected]

Profile Code

nprofile1qqs08xpn7z8q7pvh90sxq3e4650vwq8mzxx5n5p20xlkg3cfxyuv3csprpmhxue69uhhyetvv9ujumt0d4hhxarj9ecxjmntqyqq8m946x

Publishing to

relay.momostr.pink

Author Public Key

npub17wvr8uywpuzew2lqvprnt4g7cuq0kyvdf8gz57dlv3rsjvfcer3qqgnag2

Show more details

Last Notes

2026-06-10 14:26:35 CEST

- reply

what is the version of your mpengine.dll?

2026-06-10 09:21:07 CEST

- reply

Thanks, that sounds relevant! Do you have a link to an attribution source that I could include?

2026-06-10 08:24:31 CEST

Added some new entries to avpwn, including the CVE-2026-41091 Defender LPE from this Patch Tuesday:
https://github.com/v-p-b/avpwn

2026-06-06 22:25:44 CEST

- reply

to convince life forms to live in a place they don't naturally inhabit with a high chance of getting extinguished later

2026-06-06 16:14:01 CEST

- reply

sounds pretty cruel/inconsiderate to me...

2026-06-04 18:33:48 CEST

I complained about hexeditors recently. Now I found TeeHee, and I think I'll stick with it on all platforms:
https://sr.ht/~aleksi/teehee/

2026-06-04 18:08:38 CEST

- reply

- King Louis XIV. rode out around midday...
- UTC, CET or CEST?!

2026-05-21 15:36:10 CEST

- reply

It helps me dealing with taxes a lot if I imagine myself as the protagonist of a Kafka novel (or any other absurd/surreal work). Maybe it helps with SAP/other horrors too?

2026-05-20 09:42:26 CEST

- reply

did they start supporting normal webauthn without passkeys again??

2026-05-04 18:25:38 CEST

It's 2026 and Windows still can't synchronize time

2026-05-03 08:07:09 CEST

- reply

chaotic alignment was missing so I created a chart
https://media.infosec.place/infosec-place/2e7d0a43e064eb7c593e1586c70d0411989d6082a2dbee8999b1af0908c04cab.jpg

2026-04-22 09:01:43 CEST

- reply

Can you tell us about token costs?

2026-04-20 19:30:35 CEST

Look into yourself and ask:
"Why am I still wearing pants?"

2026-04-16 09:31:34 CEST

- reply

"Is there some way of searching them?" I can only speak of Android: here definitely is a system-level option keep a browsable notification history.

2026-04-12 20:14:59 CEST

- reply

These are the official results, beware that atm processed rate is statistically meaningless (refresh once in a while):
https://vtr.valasztas.hu/ogy2026

2026-04-07 17:07:10 CEST

You know what would make Fedi an attractive place for journalists (and lots of others)?
Working search!

2026-04-07 10:43:16 CEST

https://media.infosec.place/infosec-place/25a035e30d79844dc41beee025fbf0d3963fbba7c68b56a1f7447f9f1a508ba7.jpg

2026-04-06 19:09:30 CEST

- reply

"and if we think them not enlightened enough to exercise their control with a wholesome discretion, the remedy is not to take it from them, but to *inform their discretion by education*.”
Maybe you can point me to the right direction about this: today we see pretty clearly how un/mis/disinformed masses can ruin democracies, yet I see very little push for basing voting rights on education/knowledge. Why is that? (I know the "literacy tests" in the US were badly abused but this doesn't mean that fair systems are impossible)
I don't expect a full explanation, would be happy with some pointers.

2026-03-27 10:04:53 CET

- reply

Gitea/Forgejo has cloud offerings IIRC, they are pretty solid too for regular repo stuff.

2026-03-25 10:07:37 CET

- reply

"broken attention span" is a pretty interesting topic:
https://www.youtube.com/watch?v=aDfeOvUZ7Kk&t=240s

2026-03-22 13:46:13 CET

- reply

"companies spending money with the adtech companies do see returns" - Not necessarily, as measuring conversion rates is not easy. If you see that without G your visits plummet (as measured by G) you go back to G. Recommended:
https://thecorrespondent.com/125/the-non-sense-of-online-advertising-when-the-numbers-dont-add-up
I'm not familiar with news specifically, but I assume they don't partner with advertisers directly, but through an ad network, which is in the end owned by Meta or G, who can ~arbitrarily set their prices/payouts?

2026-03-22 12:15:40 CET

- reply

Yes, this is what I mean.
You are right that these are extremely powerful tools, still I feel like most customers (by count, not invoices) are just burning their money on adtech, because that's what everybody does, while you don't have to be Nassim Taleb to see that the numbers justifying the spend are rigged.

2026-03-22 11:24:00 CET

- reply

I still don't get how the market of "telling people about things" can be more profitable than the market for "things" (G and Meta being the largest companies in the world) in the first place.

2026-03-20 17:40:42 CET

Since I read the JPL coding manual I'm always very considerate before introducing an infinite loop.
Then I usually decide that "it's fine, this is not a spaceship" and forget to implement the exit path.

2026-03-20 17:12:28 CET

- reply

Pleroma/Akkoma are more lightweight if that helps

2026-03-19 10:33:31 CET

[RSS] Streamlining Google's OSS VRP: Key Rule Updates
https://bughunters.google.com/blog/ossvrp-rule-updates-2026

2026-03-11 16:57:59 CET

- reply

Mandatory LLM generated design
https://media.infosec.place/infosec-place/56b2121da9920cf9e612fb173acc053acb1bff51d70fd438d330ee1d653278e9.jpeg

2026-03-11 14:35:52 CET

Hear me out: The boiling point of ethanol is well within the range of operating temperatures of GPUs, so we could use all those AI datacenters to brew moonshine!

2026-03-06 11:30:54 CET

- reply

"hand out the contents of emails which Proton cannot" - OK let's not dive into if G should have obeyed a subponea... In both cases the accounts came under scrutiny because authorities _already knew_ email contents. Gmail would even have the benefit of not having payment info (also, cheaper).
(Btw. Proton can absolutely leak all your e-mails e.g. from the frontend they serve to you.)
"it's not victim blaming to point out bad OPSEC" - by this logic we shouldn't criticize charlatan doctors, because their patients should know medicine better?

2026-03-06 11:07:34 CET

- reply

Let's put it this way: the acc owner is in the same situation as if they used Gmail for free (if they were smart authorities would even have a harder time connecting the person to IPs and other metadata). This is speculation, but I'd bet that the relevant comms is already collected from the users or the recipients devices/e-mail accounts too.
So what is exactly the value Proton provided here that the user paid for?

2026-03-06 10:49:16 CET

- reply

I disagree. Proton convinced US people that their comms will be safe at a foreign provider (them). Were users naive to believe this? Yes, but this is victim blaming.
I agree that Proton is not the only bad provider in the market. Actually, the whole market exists because all the providers communicate dishonestly.

2026-03-06 10:25:34 CET

- reply

The ToS will obviously point out these caveats so they won't have troubles in court. What matters is the companies communication (marketing, PR aka. "oUr sERvErz aRe In SwiTZeRlAnd") because that is what people actually see and base their decisions on.

2026-03-06 09:40:31 CET

- reply

"subscriber information received from the Swiss Mutual Legal Assistance Treaty Unit" - so the FBI basically asked the Swiss police, that got the data and forwarded it back under the umbrella of a long standing treaty between the countries/authrities. This should not be surprising at all btw, but somehow for many VPN customers it is.

2026-03-05 10:13:58 CET

- reply

Just what I needed, thx!

2026-03-04 16:30:12 CET

Time dilation can be observed in the proximity of large masses and software that is supposed to crash.

2026-03-02 18:11:25 CET

*Screams in 53-bit numbers*

2026-02-26 15:18:45 CET

- reply

I browse in private mode for various reasons (not all security/privacy related) so it doesn't work (as it shouldn't).
Now I would link that thread where there are users with this very same problem but y'know, I just had to restart my browser so I don't have the link anymore :)
Now I get that my setup is still counts as strange but this behavior *guarantees* regular users run away screaming regardless if they can restore or not.

2026-02-26 15:05:11 CET

You know what, I'm kind of OK with the #Firefox AI opt-whatever solution they have
...compared to the fact that they kill all my sessions by a forced fucking restart when I try to act responsibly and update.
That's fucking outrageous!

2026-02-26 12:13:52 CET

- reply

Thank you for the additional info! I already opened #1096 and #1097 in frida-gum, hope they will be useful!
Right now I'm trying to fingerprint the runtime based on JS behavior (e.g. `console.log(gc.toString())`) but neither gadget configs nor `frida --runtime` seem to have any effect.
Update: It seems in V8 `gc.toString()` doesn't have newlines

2026-02-25 19:21:51 CET

Is it possible/reasonable to compile @npub1ne9…0uhz with V8 in 2026? (I just reported a couple of QuickJS bugs that are blockers for me)
If so, are there any documentation available about the build process or is that knowledge lost to bitrot?
#Frida #ReverseEngineering

2026-02-23 10:36:37 CET

- reply

Reminds me of us nerds installing Linux then spending weeks tweaking our WMs, shells and editor configs...

2026-02-18 09:24:18 CET

- reply

Thanks, that makes sense, but I can't touch Session as it comes from a dependency. There is definitely a lifetime issue here too (esp. because the actual tree of objects goes ~5 levels deep).
I think the root of my Q is if there is a way to create a "will" for Rust functions/scopes that would say "after my death my caller will inherit all that I own (so please don't free shit up)"?

2026-02-18 09:04:58 CET

- reply

From a different branch of this convo:
"Imagine that initialization is more complex and I want to provide a library that hides that complexity, exposing something like setup_widget() and deinit_all()."
https://infosec.place/notice/B3RIRrdtPQog3eUc2y

2026-02-18 08:38:48 CET

Today in This Should Be Easy But in #Rust It Apparently Isn't: how do I encapsulate the widget initialization (without triggering E0515) in this example, so it becomes reusable?
https://play.rust-lang.org/?version=stable&mode=debug&edition=2024&gist=f31dd1ecf5530b11e301bb19af85b0fa

2026-02-17 09:05:47 CET

What stage of #enshittification is it when Amazon adds a "Download Problems" option to it's Refund menu instead of fixing their system so people can download their digital purchases?
(Would it be ironic if I supported Anna's Archive with Amazon gift cards after I downloaded the books from there?)

2026-02-09 17:39:23 CET

git ass

2026-02-07 14:39:12 CET

- reply

Thanks for the explanation, truly appreciated!
I guess you can't do much about it now, but IMO French could've been excellent for finding a unique name (not necessarily with your weirdest spelling, but people learned to spell "kubernetes" too).
We agree that the homepage link is actively misleading, but it should be easy to remove (not a mandatory field) or replace e.g. with the link to the documentation.
@[email protected] @npub1dxu…zf3q @npub16y8…6lsk

2026-02-07 11:45:55 CET

It's great to see #EU open tech initiatives popping up, but somehow it feels like we are just **terrible** at making ourselves visible, esp. compared to US.
Like how is anyone supposed find this (otherwise great) project - named "docs" - using a search engine?
https://github.com/suitenumerique/docs/
Even assuming I find this project, how do I search for anything related to it (e.g. install guide)?
Why is the homepage in French by default, without a clearly visible language switcher (also looking at you, @npub12k0…e2sz )?

2026-02-03 09:47:33 CET

After all these years I still rely on brute-force when it comes to copy-pasting on #Linux:
- Which paste should I use for vim's * and + buffers?
- Which clipboard is used by Java GUI's?
- Did JavaScript manage to put text on the clipboard this time? Which one?
- etc.
How do fellow #X11 users keep track of your clipboards?

2026-01-28 17:15:04 CET

- reply

Participating in P2O as a vendor is a thing to be respected in the first place. They also wrote a blog about their efforts, but the link is broken - you can probably get it from an archive:
https://blog.synology.com/the-efforts-synology-made-in-pursuit-of-data-security
This is a more technical analysis from the attackers view:
https://drive.google.com/file/d/1MYCNVKkNETkqS-cLJsqHE43Sfm4LZbCO/view?pli=1
In short: they took significant steps forward during the past years, they probably ignored active network attacks (on LANs this may make sense, for Internet comms not so much).

2026-01-28 14:28:16 CET

[RSS] When NAS Vendors Forget How TLS Works
https://www.interruptlabs.co.uk/articles/when-nas-vendors-forget-how-tls-works
#QNAP #Synology #Pwn2Own #NoCVE

2026-01-25 00:08:23 CET

[RSS] Defeating Anti-Reverse Engineering: A Deep Dive into the 'Trouble' Binary
https://binary.ninja/2026/01/23/reversing-linux-anti-re.html
#ReverseEngineering

2026-01-24 20:53:37 CET

Raiden Warned About AI Censorship
https://www.youtube.com/watch?v=-gGLvg0n-uY
This is creepy af (2023!)

2026-01-22 22:01:55 CET

- reply

I've been hunting for unencrypted services (among other things) on LANs for 15+ years and Telnet is still there. Yet the only real-world incident involving network interception I can recall post-2010 is "SSL added and removed here" of Snowden fame (happy to hear about more!), while auth bypasses/RCEs are common culprits in breaches.
Telnet has an awful smell for sure, but when you sit on a smelly network, it's reasonable to ask: "would attackers actually exploit this?" A bypass like this changes the answer.

2026-01-22 21:22:21 CET

[LWN] Responses to gpg.fail
https://lwn.net/SubscriberLink/1054220/c6f98b90a009fca2/

2026-01-19 17:34:51 CET

- reply

even in that case a) I don't like to write a _slightly_ different tool for a similar task (here comes maintenance) b) the fixed cost of vibe-coding (which is very easy to under-estimate) can easily exceed the cost of finding/learning 1 tool that can replace N.
But sure, I also do ad-hoc tools like this, and I actually think your observation is correct, it's just the tendency that is very slippery.

2026-01-19 17:26:43 CET

- reply

Problem is those vibe-coded tools will rarely get enough testing and maintenance to become really useful so we'll end up crafting (subpar) hammers for each nail, esp. because crafting hammers in this case feels pretty rewarding, see: https://svnscha.de/posts/the-passenger-seat-developer/

2026-01-19 12:47:34 CET

- reply

I would probably cry because of the unnecessary complexity containers introduce for this use-case.

2026-01-16 19:44:42 CET

[RSS] wtf is NS_ERROR_INVALID_CONTENT_ENCODING? investigating shared dictionaries and ChatGPT breakage in Firefox
https://joshua.hu/chatgpt-fail-loading-firefox

2026-01-16 18:30:57 CET

- reply

Could you please ELI5 for me what a "permacomputing collective" is? This brewing metaphor is cool but a bit too abstract for me to imagine what is happening in such a group.

2026-01-16 09:01:19 CET

I just got the weirdest e-mail:
It's a lab result for someone else. It has a PDF attachment, but I can see noting malicious in it. The sender domain exists and does lab stuff. I looked up the person in the document and he seems to exist.
I'd say this must be a typo, but my e-mail address has only the first character (and probably the domain) matching with the persons name. I highly doubt his internet handle is a short keyboard distance from my Hungarian handle.
I have two theories:
a. This is a highly sophisticated scam (but I don't see the scam part yet)
b. Copilot hallucinated my e-mail address (which is actually pretty easy to scrape from the web)

2026-01-15 10:40:53 CET

- reply

does MS Teams count?

2026-01-13 15:25:30 CET

[RSS] Symless: an IDA assistant for structure reconstruction
https://blog.thalium.re/posts/symless-an-ida-assistant-for-structure-reconstruction/

2026-01-12 12:47:17 CET

- reply

There are no originals, only the data from the service with some random compression. What do I compare hashes to?

2026-01-12 12:32:57 CET

Archivists: suppose you have to scrape large amounts of media for preservation from an unfriendly service. How do you ensure that the retrieved media didn't get corrupted along the way? (I don't want to watch/listen to 1000s of hours A/V)
#archiving #scraping

2026-01-12 11:33:11 CET

- reply

We (Hungary) don't anticipate EUR anytime soon, prices still climbed to 400% since 2015.

2026-01-07 12:53:47 CET

Any recommendations for exploit dev focused #CTF with an archive of challenges?
I'm looking for samples and interested in code comprehension, less interested in obfuscation/VMs.

2026-01-05 18:31:02 CET

- reply

My recommendation: https://this-museum-is-not-obsolete.com/
Not a typical a museum, more like a playground for geeks :)

2026-01-05 15:25:49 CET

"The purpose of a system is what it does"
https://en.wikipedia.org/wiki/The_purpose_of_a_system_is_what_it_does
This is exactly what I've been trying to articulate re: cookie banners. The word of the regulation and intent is largely irrelevant to the effect it caused.

2026-01-02 14:14:27 CET

- reply

So you'd source a print head from scrap and use HP's cartridges for ink?

2026-01-02 13:46:51 CET

- reply

I go to print shops because I refuse to maintain any commercially available printer, so literally anything that works would be step-up for me.

2026-01-02 11:27:43 CET

Open Printer
https://www.crowdsupply.com/open-tools/open-printer
I've been looking for something like this for a long time! Unfortunately I don't yet see how ink could be supplied, and as @npub10hd…faqp points out, the chosen CC license would make establishing a sustainable ecosystem difficult...

2026-01-01 17:52:29 CET

- reply

Thanks for the great talk, definitely the most thought provoking one for me from this CCC! Have to watch it like 3 more times to get all the details though 😅

2026-01-01 13:21:55 CET

- reply

I'm bringing this up exactly because when CVSS will be assigned it will either show 0.0 or some really weird non-sense. The former would be likely a better, but still misleading scenario,. My bet is on MITRE publishing some non-sense though.

2026-01-01 13:15:42 CET

- reply

Not saying it's not a vulnerability but I think you won't be able to score this with CVSS that would make CVE registration weird.

2025-12-31 15:29:49 CET

- reply

One of my secondary desktop runs NixOS and it's perfectly usable as long as you are willing to spend some extra time to look up docs when you introduce some more serious change (e.g. new HW). "I need to just get something done real quick" is exactly the way junk gets piled up, but IME NixOS educates you to either use a temporary install or setup things in containers/VMs that will probably pay off in the long run (I also have a VM host, so this may be easier to do for me).

2025-12-27 09:01:24 CET

- reply

But I had a chance to choose the appropriate interface instead of blindly trying things in an environment you can't properly debug...

2025-12-26 20:47:05 CET

- reply

Thanks for the responses, but my diagnosis was wrong - although I still don't quite get it: it turns out that the object I'm writing out (json.dump) contains a list that gets extended by the script (this sort of explains why I'm writing out more and more data), BUT the list is part of an object that I reinstantiate on every run, which should empty the list (I call super() with an empty list). Problem is the (super)class is generated code and I suspect the list is not in fact an object member but a static class variable that may cause this??

2025-12-26 20:25:26 CET

OK so either I have a fundamental misunderstanding of how #Python I/O works, or this is a bug:
I have a `with open(..., "w") as foo:` block in my script. If I execute it twice (now from #IDA, and I experienced the same with #Ghidra) the contents are _appended_ instead of truncating the output first!
WT actual F?!

2025-12-26 18:39:14 CET

All I want for Xmas is sane documentation <3
https://media.infosec.place/infosec-place/c1123feec013df61ddcf55706bb1d122c99f11b469cc530d4fff2cee48afb4d4.png

2025-12-22 16:55:17 CET

- reply

This one by @npub1zhy…cve0 may cover the details, although the CVE is not mentioned: https://blog.quarkslab.com/k7-antivirus-named-pipe-abuse-registry-manipulation-and-privilege-escalation.html

2025-12-22 09:14:47 CET

[RSS] When OAuth Becomes a Weapon: Lessons from CVE-2025-6514
https://amlalabs.com/blog/oauth-cve-2025-6514/

2025-12-16 17:44:05 CET

It's 2025, and I have to prompt an LLM no less than 5 times to figure out how to add a new keyboard layout to Windows Server 2025, becase 1) the UI turned absolutely shit 2) the built-in search is optimized for ads instead of discovering functionality.
Also, Disk Management is gone, and you get no meaningful results for "disk" in the Start Menu. But when you *right click* the Start icon it's there. Why would it be so hard to make this discoverable by search (or leaving a shortcut with the original name)??

2025-12-15 16:06:20 CET

- reply

Why not Ghidriff/BinDiff/Diaphora?

2025-12-14 11:44:23 CET

LEGO turned down the Turing Machine model idea :(
https://beta.ideas.lego.com/product-ideas/10a3239f-4562-4d23-ba8e-f4fc94eef5c7

2025-12-09 17:21:20 CET

- reply

Wow that was quick, glad I could help!
I've been doing infosec for ~20 years but I only realized recently we communicate wrong after some relatives fell for QR-based scams and had to walk them through what happened.
I agree that determining risk is incredibly hard in this case and TBH I think "don't trust QRs" may be more effective than trying to teach everyone URLs, DNS and PKI...

2025-12-09 13:37:50 CET

- reply

Great initiative, saved and shared!
One suggestion re: "QR codes are simply a way to open a URL" -> users have no clue what URLs are or how to interpret them. Even if you assume they can parse out the true domain (major if!), they don't know which domains are trustworthy. On top of this mobile browsers make it esp. hard to inspect URLs. We need to come up with better advice for site verification!

2025-12-08 19:52:24 CET

- reply

"The benefit of having an actual memory space for special function registers is they can be seen, named, references created to them, data types applied at the location, as well as default values supplied for a given binary sample. We plan to do the same for other processors such as the PowerPC."
I hope this is the reason why my PPC-AS pull request is open for more than a year now :)

2025-12-08 19:46:40 CET

That was quick: #Ghidra 12.0 is out! Here's what's new:
https://github.com/NationalSecurityAgency/ghidra/blob/Ghidra_12.0_build/Ghidra/Configurations/Public_Release/src/global/docs/WhatsNew.md

2025-11-23 19:31:42 CET

"Last week the @FFmpeg account began taunting security researchers. Foolish thing to do, as it ignores the asymmetry of their attack surface vs ours.
So as an exercise I found a stack-based buffer overflow on software that he wrote." - @npub15gk…3jd8
https://threadreaderapp.com/thread/1991974275532636263.html
Normally I'm all for these stunts, but this one...
https://media.infosec.place/infosec-place/e5748c5db998dc1e8d5a3627322fe1d132bab9e73a8d767595f57eecc602db34.gif

2025-11-21 19:25:54 CET

Please help making #TreeSitter Playground better by doing this little experiment:
https://tree-sitter.github.io/tree-sitter/7-playground.html
Write some JS, like `var x=1;`. Enable Query and provide the `(identifier) @foo` pattern in the new Query textbox.
Do you see the code highlighted? (if not, turn on Accessibility, a'la GH issue #1714)

2025-11-21 14:18:19 CET

That's how I like my #Friday's: I came back from lunch and my code started working!
Time to push to prod...

2025-11-19 13:33:01 CET

TIL cURL only supports the lowercase http_proxy environment variable:
https://curl.se/mail/archive-2001-12/0034.html

2025-11-18 15:56:11 CET

- reply

I accidentally made this gif this morning before shit went down
https://media.infosec.place/infosec-place/2728fbc08aa0cffbb9c4b8f4b81590e24da139c17cd45c031a3e02e6127b96a2.gif

2025-11-18 14:06:59 CET

- reply

lol, some chaos engineering right there!

2025-11-18 13:29:48 CET

Cloudflare down is another teachable moment to think about your eggs and your baskets.

2025-11-16 19:09:00 CET

TIL Minecraft requires a freaking MS account. I thought it wasn't that bad so we proceeded to create one, but it turns out that if you want to create a child account (based on birth date, to avoid adult ads and shit) you as an adult *also* need a MS account that would be of course immediately connected to your childs account which I assume to be a gold mine for advertisers.
Seriously, fuck #AdTech!
(I also wonder if this is legal in the EU?)

2025-11-15 15:55:40 CET

- reply

Honest question: how is the NDA compatible with SaaS models?

2025-11-15 13:25:31 CET

Dear designers: scrollbars are useful and exist for a reason. Don't hide them, please.

2025-11-13 17:02:39 CET

- reply

OK, it seems I found it (although not very useful, acceptable value formats are not documented for example), at the end of the article about...publishing. Because somehow in the CLI's world there is just *no way* I won't update my code to GitHub :P
https://docs.github.com/en/code-security/codeql-cli/using-the-advanced-functionality-of-the-codeql-cli/publishing-and-using-codeql-packs#about-qlpackyml-files
@npub1p3v…r8jg