Graham Sutherland🎃 / Polynomial.pdf.exe

no, you see, Elsevier can't afford security because they have to spend the hundreds of millions they get paid by academic institutions and authors on *checks notes* running a website that hosts PDFs https://cyberplace.social/@GossiTheDog/117313751385768529

ADHD is like C. you allocate everything in stacks or heaps, memory pointer lifetimes are poorly controlled, and you've got dangling references all over the place.

when unsafe languages cause security debt, you're paying the use-after-fee

full of knowledge regulation

people talk about the "yes" / "ask again later" pattern as if it's a new thing, but

ordered something off eBay and didn't notice the seller name until just now. this is why you run your business name by local 13 year olds before committing to it.

TL;DR if you wanna tempest some signal off a board but it's too low frequency to radiate, simply inject your own upconversion carrier by pointing an antenna at the victim device, and the modulated result radiates.

@nemokamui@infosec.exchange @still@infosec.exchange @cR0w@infosec.exchange it can extract resources and sections from PE files (exe, dll, sys, etc.) too

@nicolas17@social.treehouse.systems @androcat@toot.cat @markmetz@sfba.social the language part isn't a factor. the idea is usually to use a VLM, or at least the part that turns an image (or video) into a sequence of tokens, then train a classifier model on that token sequence. it's a genuinely workable design in theory, but the externalities of gaining training data, giving it to the orgs with sufficient equipment and capital to build the model, them having sufficiently trustworthy stewardship of the project, etc. make it a non-starter.

falsehoods programmers believe about falsehoods programmers believe

I actually quite like this one. usually I just look at these like "ah yes, good, physics is continuing to physics" because EM side channels are literally inevitable and nobody bothers to implement them in practice because it's so much engineering effort for so little chance of working outside of a lab, and that attacker effort yields more consistent results if directed towards other mechanisms. this is still just physics continuing to physics, but it's a genuinely new technique in this space.

hackaday article don't be about a slop project or doing free advertising for ai bros challenge 2026 [IMPOSSIBLE]

most RF side channel papers are just like "we found another thing that radiates, and a way to extract information from it!" but this is more fundamental and broadly applicable. it probably still won't see any use in practice but it's a neat trick.

we need to bring back the "such x. many y. wow" doge meme now that the cryptocoin idiots who coopted it have stopped being at all relevant

TSP gets to play with some wild gear. this one has a starting list price of £239k for the 8ch model, listed as "8-25GHz bandwidth", so presumably that's the low end of the price bracket. yikes. https://www.youtube.com/watch?v=HV140Y8VU1s

YOOOOOOOOOOO Dimension remixed Darude - Sandstorm https://youtu.be/NTbVjr_aAwg

@jpm@aus.social reminds me of that joke: "every org has dev, test, UAT, staging, and prod environments. the important question is whether those are different environments."

JLC doing HDI globally is awesome news, hyped to get my wallet destroyed on exciting boards 🙃

imagine if we all woke up one day to find out that this universe is the UAT environment

holy shit, two hour Marco Reps video including a tour of the LHC! https://youtu.be/Yibef6nLCv8

I just realised that "Output from this tool does not necessarily represent the views of my employer" is a real disclaimer that people could put on things now.

no drag name will ever beat Patty O'Furniture though

and I'll be head to toe in calc.exe fabric

@attie@hachyderm.io that's a lot of LEDs/mm!

it's definitely GaN either way - it explicitly says so in the product marketing in pretty much every case - but idk what the topology is.

@0xabad1dea@infosec.exchange it is regional, not global, but they finish imaging a region and then release at the end. the size of the region can be anything from a city to a country, but with NL I'd expect at least something on the "state"-equivalent size.

I'm expecting the Channel 4 ADHD "documentary" to be a complete and total insult to everyone with ADHD, given how they've billed it. disingenuous people without ADHD talking about us authoritatively, ignoring our experiences, giving "equal time" to reactionaries, attempting to stir up controversy for ad revenue. the way to combat this cynical bullshit is to just talk about our experiences twice as much. talk over these loudmouth fucks and give people a direct view of reality.

@azonenberg@ioc.exchange never thought of high refresh / VRR as a thing I'd want on a scope, but now you mention it...

@janamarie@mystical.garden @jpm@aus.social I saw it's ±12V, how much current can it handle?

@jpm@aus.social @janamarie@mystical.garden it was! this saves me a job

doing a quick round of metazooa practice again, and it's a goddamn fish, and my brain started singing GADUS TAXONOMIC HURDLES GADUS TAXONOMIC HURDLES to the tune of the TMNT theme

@0xabad1dea@infosec.exchange they're done in generational batches, so it might be a while.

@apzpins@some.apz.fi oof. had that happen in Norway, also with KLM actually, but that time it wasn't really their fault - the first leg of the flight was delayed and bags didn't make the transfer in Schiphol (I barely made it myself). they did at least pay a taxi driver to send my bag 2 hours north of Oslo, which must've cost them as much as I paid for my flight.

@scarlet@chaos.social gotta go with "for everything else, there's scarlet" as a pickup line

clock and PLL torture

@scarlet@chaos.social this was probably the best set I've ever seen in my life https://www.youtube.com/watch?v=AZ7MN4WpZRI

if you search for the Reddit app on the Google play store (and, presumably, if their advertiser profile assumes you're a dude), about 60% of the sponsored suggestion apps underneath are AI girlfriend apps

@scarlet@chaos.social I've had Pola & Bryson - Want It on a loop for most of the day lol, I'm obsessed with this tune

"This language is not designed for working with strings. If you are using strings for any purpose other than debugging or logging, you should reconsider." 🫪

my wife bought a halloween tree (like an xmas tree if it was goth and had no leaves) and not only was it not mains powered as described but the three 1.5V AA batteries were put in series with a resistor that was dropping 1.6V and getting so hot that touching it was painful. what a wasteful and dogshit design. I have now made it USB powered with a little 3.3V PoL switching regulator and a 500mΩ series resistor instead.

like... is it an initial isolated AC-DC to an adjustable intermediate voltage and then separate DC-DCs for the outputs, with the intermediate voltage being selected for the optimal efficiency depending on the output voltages and loads? or a fixed first stage? or is it just completely separate isolated GaN AC-DC stages?

@fractalolivia@infosec.exchange call me when that actually makes a difference to the general state of C projects lol

@da_667@infosec.exchange same armor pen as FMJ, no?

it's probably a good thing that I didn't become a data entry clerk because it's the sort of task that hits my hyperfocus really hard and I would've spent my life doing nothing else

@ajn142@infosec.exchange possibly tagged twice for an add-on card.

@da_667@infosec.exchange yeah, it's decent. the main thing that keeps me off it for defence is the damage stray rounds cause to the base. but that's hardly a concern on a sniper rifle. for full auto in particular it can kick ass, because missed shots can still turn into explosive damage if they land near to the target.