Into a long read? This is a very interesting thesis, and one to keep in mind. Cash is king and the balance sheets will speak truth sooner or later ;-)
https://www.groundbrkr.com/p/the-teaser-period-why-the-ai-boom
Remote
fG!
@osxreverser@mastodon.social
mastodon 4.8.0-nightly.2026-10-06I like to bend binary code to my will.
0 Followers
0 Following
31 Posts
Joined April 03, 2017
Blog:
The screensharingd bug that was killed on latest updates, is a pre-auth, contrary to what the company that disclosed it to Apple is writing. This is an amazing bug that allows to pwn any unpatched Mac that has Screen Sharing enabled. If you have it enabled go patch now. If you have old versions for which a 5T company doesn't bother to release patches, good luck!
Releasing a PoC that just allows to download any file from vulnerable machine.
https://reverse.put.as/2026/07/29/its-a-pre-auth-stupid/
Oh yeah...
4.0G Apr 27 03:01 ./Application Support/Google/Chrome/OptGuideOnDeviceModel/2025.8.8.1141/weights.bin
These mfs are all going crazy with AI shit...
https://www.thatprivacyguy.com/blog/chrome-silent-nano-install/
An interesting paper: Frontier Models’ Vulnerability Patches are Often
F.L.A.W.E.D.
https://1password.com/files/resources/frontier-models-vulnerability-patches-flawed.pdf
This is a fantastic blogpost and one to keep in bookmarks to check again in a year or two to see if it was right or not!
https://leehanchung.github.io/blogs/2026/04/05/the-ai-great-leap-forward/
Finding bugs is the easy part, that's why everyone is using that for all the hype and PR noise these days. No doubt AI brings scale, but the bugs have always been there, it's just that most people aren't looking and understanding the code out there.
Writing correct, secure, bug-free code, is the real hard problem, that's why they are all very silent about it.
It's just easier to kick the can forward and make noise than solve the fundamental problems.
LOL... the delusion running high...
"Son said he estimates that almost $5 trillion in investments will be needed annually and globally to expand data centers, increase production of computer chips and provide energy systems and other infrastructure for AI."
Those weeks when you are into a creative zen mode and you do stuff you don't even remember how the hell you got it done ahahhahahaha 🙂
Let's see if I can understand the mess I did 7 years ago. Time flies, damn!
"The relentless pace of infosec drama also makes our punditry remarkably shallow. You’re not doing deep dives; you’re offering TikTok-level hot takes on the headline of the day. You’re right half the time, wrong the other half, and you’re usually rewarded simply for saying things that are provocative, with no one holding you accountable if you miss the mark."
https://lcamtuf.substack.com/p/why-i-refrain-from-infosec-punditry
Now that's some nice malware!
https://www.gendigital.com/blog/insights/research/chasing-an-angry-spark
Stop buying stuff and these fuckers will rollback (although it's still 3 bucks more expensive than before LOL)
"Microsoft cuts Xbox subscription prices, bucking industry trends"
Mythos hype was just a sales pitch to the USG ;-)
"Trump administration, Anthropic may be close to deal on Pentagon standoff"
Tim Crook is GTFOing! Finally some good news! #goawayclowns
Meanwhile in the real world...
https://www.ncsc.gov.uk/news/apt28-exploit-routers-to-enable-dns-hijacking-operations
Tired of winning so he's being nice to them LOL
"(Bloomberg) -- President Donald Trump announced he was extending a ceasefire with Iran indefinitely a day before it was set to expire, even as plans for a fresh round of talks between the two countries fell apart."
The great AI stupidification is amusing. All the bitching about Opus 4.7 being bad, the token price switching, companies and people losing access. You outsource your core knowledge and assets and expect to keep control? LOL
Such a fun & beautiful logic bug HAHAHAHHAHA Great find 🙂
Don't you love when you go to bed thinking you just had a great idea, and on the next day you find out a notes file in one of the text editor tabs with the same idea you wrote months ago? :PPPPPP
I wonder if the workshop "kids" know wtf is a SPARC CPU 🙂
Sounds like the perfect target to make a point! 😈
Hate PGP! With so much money in this industry how the hell can't we have a nice signing/authentication solution that easily works on all platforms from day 0 and is hardware based only (Yubikey etc)????????
Then we wonder why all the pwnage going on. But yeah, the AI 0days are the doomsday... Fuck this :P
Gets funnier when Apple is happy to put other apps before the legit app you search for if you pay them enough. App store is a fucking bullshit designed to suck 30% out of everyone LOLOLOLOL
There we go on the booking.com hack. It was guesty that was pwned
"internal projects, 4 million sent/received mails with attachments, userbase, Airbnb and booking.com data stolen from guesty"
Braided cables are very nice until you find dry cat vomit all over them LOL
LOL, bunch of fucking clowns @ Clownpertino circus LOL
"Speaking about app vetting more generally, Apple told us it has a zero-tolerance approach to fraudulent and malicious activity on the App Store"
Replying to
@magnetic_tape @mailtape I'm in love with latest Evaporator from Nathan. That Slow Yamaha is a synth masterpiece.
Modern reverse engineering is like 80% fixing old tools and creating new tools, 20% really reverse engineering the target 😢 😢 😢 😢 😢 😢 😢 😢 😢 😢 😢 😢 😢 😢 😢 😢 😢 😢 😢 😢 😢 😢 😢 😢 😢
Replying to
@filippo@abyssdomain.expert Very nice the progress of your idea! Congrats! It makes sense companies are willing to pay for this type of service, they just don't know how to do it and you hit a nice niche 🙂
This is a fun short book, reality and fiction increasingly mixed.
Replying to
@Sobex@social.sciences.re Yeap, it requires Screen Sharing enabled (aka port 5900 open in default configuration). I think it goes quite far back, I think at least High Sierra is vulnerable, can't remember if I tested it.