I helped run public tabletop RPG communities at breweries for several years, and we would actually use this. The top asset to be protected was always everyone having a great time (and the threats were sometimes unbelievable, lol).

it seems a lot friendlier this year, perhaps people got it out of their system

Major respect for the Chrome CA program. I wish every security professional could internalize this one paragraph and apply it to the systems they're responsible for. bugzilla.mozilla.org/show_bu…

DOOM is finally fast on the Nix Badge with some patches to pixman and wlroots.

Turning the CODA980 H.264 codec into a GPU for the #nixbadge which otherwise does not have a GPU As far as I know, H.264 codecs have not been exploited for 3D rendering before... let's change that

I have seen at least one php2shell PoC that funkyenv breaks so far. Need a bigger info leak, y'all! :)

github.com/NixVegas/funkyenv Can filnix be taught to use mold? Here's how you shuffle function layouts too, to make your binaries more unique to your deployment

That demo video was pretty great, too. Exactly how a proof of concept should be, impactful and somewhat entertaining 👌

When your root CA company's name becomes a command line option in mitmproxy. github.com/mitmproxy/mitmpro…

Randomize your binaries' function layout with #nix, in case you want to make it harder for blind ASLR bypasses to work. Tested with WordPress and openssh, Firefox is building now github.com/NixVegas/funkyenv

PHPocalypse Now

let me ask my robot real quick

Yeah, probably.

Bad even for that account's usual, wow

I wish there were more computing communities where people could find their tribe, but in all the positive senses of that phrase and none of the negative. Needing a threat model when interacting with others destroys people's ability to comfortably connect with each other

Yes, this is more accurate. The brigading of open source projects from the frontpage was also quite an issue, though I've certainly seen hints of the more awful stuff from that list.

-----BEGIN EC PRIVATE KEY-----

I'll have new OS images on our hydra pretty shortly, there's a new squashfs build that can install on the eMMC and turns on all the hardware

lobste.rs/top/20y -- some interesting priorities over there. Deactivated ages ago, there was a lot of really ugly argument, incivility, and people being mean spirited