4 Followers
59 Following
79 Posts
interested in windows and browser exploitation

RE: https://mastodon.social/@sarahjamielewis/116161459299855467

Something I want to make clear:

The "age verification" bit of the CA/CO laws are not the bit I care about i.e. a law that requires an operating systems to implement some kind of parental control feature is...whatever.

The bits I care about are the obligations on developers to call APIs and then that invocation being taken as evidence of knowledge.

Specifically, I think a -legal- requirement to:

- make any kind of call is an attack on speech
- know a users age (bracket) is a privacy violation

Comparing xnu-12377.61.12...xnu-12377.81.4 路 apple-oss-distributions/xnu

Contribute to apple-oss-distributions/xnu development by creating an account on GitHub.

GitHub
Another gem, here is all you ever wanted to know about Itanium C++ ABI exception handling and how its implemented in Linux C++ binaries https://maskray.me/blog/2020-12-12-c++-exception-handling-abi

Interesting, Microsoft completely remove any remaining trace of LegacyMil* interfaces in DWM in 26h1.

https://github.com/ALTaleX531/OpenGlass/issues/260

The legacy MIL API first introduced in Longhorn allowed developers to write custom brushes (plane fills) and other bitmaps to the compositor directly... You can find out all about it in the patent... RIP

https://patents.google.com/patent/US7511718B2/en

It sounds obvious with hindsight but my art improved so much once I started actually looking at things in the same way that I would decompose a system in which I was trying to find security holes.

You cannot capture the essence of something without knowing it.

The cathartic effect of reverse engineering without a business objective should have its own therapy book.

A small rant:

The State of Art in Red Team is whatever you want to believe

https://x-c3ll.github.io/posts/Rant-Red-Team/

The State of Art in Red Team is whatever you want to believe

a rant about Red Teaming.

Doomsday Vault
BUG-BOUNTY.md: we stop the bug-bounty end of Jan 2026 by bagder 路 Pull Request #20312 路 curl/curl

Remove mentions of the bounty and hackerone. There will be more mentions, blog posts, timings etc in the coming weeks.

GitHub

If you need to get your mood down a few notches, there are some new slop entries to torment yourself with here:

https://gist.github.com/bagder/07f7581f6e3d78ef37dfbfc81fd1d1cd

AI slop security reports submitted to curl

AI slop security reports submitted to curl. GitHub Gist: instantly share code, notes, and snippets.

Gist