My greatest professional accomplishment of the year: I got my exec & manager teammates saying "point positive," a term from whitewater rafting and kayaking.

Meaning: when facing hazards, point people toward where to go/what to do, rather than drawing attention to everything to avoid.

One lesson that the #DarkSword exploit chain teaches us: Any API used to allowlist things will be abused to allow bad things.

The iOS RTLD provides functionality for PAC-enforced pointer signing. This is needed to allowlist executable symbols in a dyld object.

The Cross-DSO CFI work in #HardenedBSD does something similar for the exact same reason. I'm hoping to revisit this to determine a new path forward.

(Source analysis: https://github.com/AntonioCiolino/DarkSword-Analysis)

1/x

“While it might be tempting and accessible to many, fast fashion is harmful to consumers, workers, and the environment. Its devastating impact transcends geographical and social boundaries. Affecting people’s health and environment for the sake of more profit.”

#fastfashion

https://act.gp/3Q4C1ST

Meta Platforms: Lobbying, Dark Money, and the App Store Accountability Act

An open-source intelligence investigation into how Meta Platforms built a multi-channel influence operation to pass age verification laws that shift regulatory burden from social media platforms onto Apple and Google's app stores.

https://tboteproject.com

https://github.com/upper-up/meta-lobbying-and-other-findings

#FediPact #meta #threads #AgeVerification

@rmondello Every time a site requests a passkey, but 1Password takes time to offer it because it’s still locked, Safari intercepts the request, offering a passkey it does not have, even though passkeys are disabled in Safari.

After I dismiss it, 1Password is blocked and I have to refresh the page.

Some top notch programming you have here. No wonder a lot of people hate passkeys.

This is Mycena rosoflava. A species of agaric mushroom in the family Mycenaceae. It is a wood-inhabiting mushroom native to New Zealand.

It is also quite beautiful in my opinion, which is the real reason why I'm posting it ...

📷 Photographed by Aucklander Jay Lichter at Hunua Falls in May 2024