Luckfox Pico 2 Adopts RP2350A Dual-Core MCU, Launches at $3.99
Luckfox has released the Pico 2 Micro Development Board, a compact module designed around Raspberry Pi’s RP2350A microcontroller. It targets embedded development and experimentation with both ARM and RISC-V instruction sets, offering dual-core support in a low-cost form factor. The RP2350A microcontroller from Raspberry Pi features a dual-core, dual-architecture design, offering both ARM Cortex-M33 and […] ⌘ Read more

Part 3: How to Become a Pentester in 2025:Practical Practice: Labs & CTFs ⌘ Read more

A Step-by-Step Plan to Secure Web Backends with XAMPP (Part 1/3)

Image

Installing and Configuring XAMPP

[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/a-step-by-step-plan-to-secure-web-backends-with-xampp-p … ⌘ Read more

Non-DEI Fork of Xorg by Most Active Xorg Developer
The XLibre fork of the ubiquitous open source X11 implementation, Xorg, plans first release with “about 3,000 commits” and no “DEI”. ⌘ Read more

Fvwm3 1.1.3 released, completes transition from autotools to meson
Fvwm3, the venerable, solid, configurable, no-nonsense window manager for X, has been updated: fvwm3 1.1.3 has been released. While the version number indicates that this is a minor release, there’s one reason why 1.1.3 is actually a much bigger deal than the version number suggests: it switches the build system from autotools to meson. Fvwm is very old, and has been using autotools since 1996 (befor … ⌘ Read more

Can’t fool him 3 times 😅 ⌘ Read more

Cracking JWTs: A Bug Bounty Hunting Guide [Part 3] ⌘ Read more

My cat had black eyes on day one: Now she’s coming up to 3 years old and better than ever. ⌘ Read more

Harpoom: of course the Apple Network Server can be hacked into running Doom
Of course you can run Doom on a $10,000+ Apple server running IBM AIX. Of course you can. Well, you can now. Now, let’s go ahead and get the grumbling out of the way. No, the ANS is not running Linux or NetBSD. No, this is not a backport of NCommander’s AIX Doom, because that runs on AIX 4.3. The Apple Network Server could run no version of AIX later than 4.1.5 and there are substan … ⌘ Read more

Tilde Games: Exploiting 8.3 Shortnames on IIS Servers ⌘ Read more

This is my highlight, really, haven’t seen this in action in a loooooooong time:

Image

Image

Image

The Copilot delusion
And the “copilot” branding. A real copilot? That’s a peer. That’s a certified operator who can fly the bird if you pass out from bad taco bell. They train. They practice. They review checklists with you. GitHub Copilot is more like some guy who played Arma 3 for 200 hours and thinks he can land a 747. He read the manual once. In Mandarin. Backwards. And now he’s shouting over your shoulder, “Let me code that bit real quick, I saw it in a Slashdot comment!” At that point, you’re not working … ⌘ Read more

3 days old ⌘ Read more

50% off The Lunduke Journal (including Lifetime Subscriptions) through Saturday!
About 3 weeks back we had a deal where every new subscription to The Lunduke Journal was 50% off. ⌘ Read more

Bootstrapping HTTP/1.1, HTTP/2, and HTTP/3
Comments ⌘ Read more

OpenBao v2.3 now supports Namespaces (HashiCorp Vault fork)
Comments ⌘ Read more

The 3 Ways JavaScript Frameworks Render the DOM
Comments ⌘ Read more

Terasic Atum A3 Nano Integrates Altera Agilex 3 FPGA
Terasic has introduced the Atum A3 Nano on Crowd Supply, offering a compact FPGA development board based on Altera’s Agilex 3 series. It provides a capable platform for embedded applications requiring high-speed logic and moderate compute performance. Measuring just 85 mm by 70 mm, the board features the Agilex 3 A3CZ135BB18AE7S FPGA, delivering 135,110 logic […] ⌘ Read more

After 3 days of consecutive attacks on Ukraine, Russia calls UN meeting over alleged European ‘threats to peace’ ⌘ Read more

3 Months vs. 8 Years ⌘ Read more

Part 3: How to Become a Pentester in 2025: Programming & Scripting Foundations for pentester ⌘ Read more

AAEON Expands UP Line with Twin Lake SBCs Based on Intel Core 3
AAEON has introduced two new additions to its UP developer board series: the UP Squared TWL and UP Squared Pro TWL. Built on the Intel Core 3 processor platform, previously known as Twin Lake, these boards target energy-efficient industrial and edge applications with a focus on cost-effective performance. Both models support a choice of Intel […] ⌘ Read more

10biForthOS: a full 8086 OS in 46 bytes
An incredibly primitive operating system, with just two instructions: compile (1) and execute (0). It is heavily inspired by Frank Sergeant 3-Instruction Forth and is a strip down exercise following up SectorForth, SectorLisp, SectorC (the C compiler used here) and milliForth. Here is the full OS code in 46 bytes of 8086 assembly opcodes. ↫ 10biForthOS sourcehut page Yes, the entire operating system easily fits right here, inside an OSNews quote block: … ⌘ Read more

@quark@ferengi.one Ah, I see. Hm, only problem is, IE 3 doesn’t seem to support this yet. 😅 Nah, I don’t think I’ll go down that road – seems like a slippery slope. 🤣

My website is compatible with many old browsers, but Internet Explorer 3, uhm, not so much.

https://movq.de/v/d038528c00/s.png

**One Endpoint to Rule Them All: How I Chained 3 Bugs into Full Account Takeover **

Image

Hey there!😁

[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/one-endpoint-to-rule-them-all-h … ⌘ Read more

Maybe you’ll enjoy this as well:

I still have one of my first modems, a Creatix LC 144 VF:

I think this was the modem that I used when I first connected to the internet, but I’m not sure.

I plugged it in again and it still works:

The firmware appears to be from 1994, which sounds about right. I don’t think we had internet access before that. We certainly did use local mailboxes, though. (Or BBS’s, as you might call them.)

I now want to actually use that modem again. For the moment, I can only use a phone to dial into it, I lack a second modem to actually establish a connection. Here’s a video:

Not spectacular, but the modem does answer after me entering ATA.

I bought another cheap old modem on eBay and am now waiting for it to arrive. Once it’s here, I want to simulate an actual dial-up session, hopefully from OS/2 or Windows 3.x.

One of the nicest things about Go is the language itself, comparing Go to other popular languages in terms of the complexity to learn to be proficient in:

• Go: 25 keywords (Stack Overflow); CSP-style concurrency (goroutines & channels)
  
• Python 2: 30 keywords (TutorialsPoint); GIL-bound threads & multiprocessing (Wikipedia)
  
• Python 3: 35 keywords (Initial Commit); GIL-bound threads, asyncio & multiprocessing (Wikipedia, DEV Community)
  
• Java: 50 keywords (Stack Overflow); threads + java.util.concurrent (Wikipedia)
  
• C++: 82 keywords (Stack Overflow); std::thread, atomics & futures (en.cppreference.com)
  
• JavaScript: 38 keywords (Stack Overflow); single-threaded event loop & async/await, Web Workers (Wikipedia)
  
• Ruby: 42 keywords (Stack Overflow); GIL-bound threads (MRI), fibers & processes (Wikipedia)
  

Async from scratch 3: Pinned against the wall
Comments ⌘ Read more

3 Years of Extremely Remote Work
Comments ⌘ Read more

Radxa ROCK 4D with RK3576 SoC, PCIe Gen2 x1, Gigabit Ethernet, and PoE Support
Radxa has introduced a single-board computer with a form factor similar to the Raspberry Pi 3, powered by the octa-core Rockchip RK3576 system-on-chip. Key features of the new ROCK 4D include PCIe Gen2 expansion, Gigabit Ethernet with PoE support, and broad I/O compatibility. The board is built around the Rockchip RK3576 SoC, which integrates four […] ⌘ Read more

KrebsOnSecurity Hit With Near-Record 6.3 Tbps DDoS – Krebs on Security
Comments ⌘ Read more

Veo 3 and Imagen 4, and a new tool for filmmaking called Flow
Article URL: https://blog.google/technology/ai/generative-media-models-io-2025/

Comments URL: https://news.ycombinator.com/item?id=44044043

Points: 503

# Comments: 298 ⌘ Read more

Part 3:2 — Electron-Based App Security Testing Fundamentals — Case Study of Extract & Analyze .asar ⌘ Read more

Part 3:1 — Electron-Based App Security Testing Fundamentals - Extract & Analyze .asar ⌘ Read more

@lyse@lyse.isobeef.org that’s alright haha! i don’t expect anyone to listen/watch in full or with full attention bc it’s so long lmao

the thing with PHP for me is that i… feel like it hits a kind of simplicity that i can understand? it’s so plain but can be very powerful. i quite like that. as much as i can learn something infinitely more powerful, PHP hits a comfortable thing where i can handle things like backend sqlite DBs AND how a page is rendered, without requiring a complex frontend with its own quirks (like ruby on rails, which as much as i know and love it, can be heavy).

but i totally get you! PHP security is very scary. i’m always worried that i’m messing something up. it’s why the PHP application i’m working on i have dockerized by default for a small but extra layer of protection

i’ll try to not get discouraged tysm for your advice

Demystifying Ruby (2/3): Objects, Objects everywhere
Comments ⌘ Read more

What were the MS-DOS programs that the moricons.dll icons were intended for?
Last time, we looked at the legacy icons in progman.exe. But what about moricons.dll? Here’s a table of the icons that were present in the original Windows 3.1 moricons.dll file (in file order) and the programs that Windows used the icons for. As with the icons in progman.exe, these icons are mapped from executables according to the information in the APPS.INF file. ↫ Raymond Chen … ⌘ Read more

HMPL v3.0: Small template language for displaying UI from server to client
Comments ⌘ Read more

Buying a TV these days, means trying to avoid endless enshitification:
-Spyware and adware
-Shitty AI upscaling/ frame interpolation
-HW that breaks after 2 - 3 years
-One off OS, dead on arrival
-Android OS, that starts lagging after the third update
-8 buttons worth of ads, on your remote

You probably have to make some kind of a compromise. I thought that was buying from some other brand like Hyundai, but that one also felt into some of those categories and just broke, after less than 3 years of use. At this point I’ll probably go back to LG and hope their HW is still reliable and the rest manageable… It has AI bullshit and knowing LG, probably some spyware you have to try your best to get rid of, can buy a remote with “only” 2 ads on it, some web-based OS shared between all their TVs, that usually gets 4 - 5 years worth of updates and works decently enough afterwards.

At this point, I’ll probably settle for anything that doesn’t literally fall apart, not even 3 years in, like the Hyundai did.

How a Simple Logic Flaw Led to a $3,250 Bounty

Image

Claiming Unclaimed Restaurants on Zomato via OTP Manipulation

[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/how-a-simple-logic-flaw-led-to-a-3-250-bounty-476d747bf57a?source=rss—-7b722 … ⌘ Read more

Xiaomi joins Google Pixel in making its own smartphone chip
Following rumors, Xiaomi today announced that it will launch its very own chip for smartphones later this month. The “XRING 01” is a chip that the company has apparently been working on for over 10 years now. Details about the chip are scarce so far, but GizmoChina points to recent leaks that suggest the chip is built on a 4nm process through TSMC. The chip supposedly has a 1+3+4 layout and should lag just a bit … ⌘ Read more

Demystifying Ruby (1/3): It’s all about threads
Comments ⌘ Read more

@kingdomcome@yarn.girlonthemoon.xyz AHHHH TYSM IRENE <3

Introducing k0rdent v0.3.0: Smarter observability, smoother operations
In my previous blog I wrote a detailed version describing how k0rdent eases platform engineering at scale. For those of you who are unaware, k0rdent is a Kubernetes-native distributed container management environment (DCME) designed to help… ⌘ Read more

@bender@twtxt.net 5, 4, 3, 2, 1 🤣

Avian Physics 0.3
Comments ⌘ Read more

IBM DEI Lawsuit Gets Jury Trial Date
There are 3 lawsuits against IBM & Red Hat related to discriminatory hiring & firing by the Big Tech giant. ⌘ Read more

A brief history of the numeric keypad
The title is a lie. This isn’t brief at all. Picture the keypad of a telephone and calculator side by side. Can you see the subtle difference between the two without resorting to your smartphone? Don’t worry if you can’t recall the design. Most of us are so used to accepting the common interfaces that we tend to overlook the calculator’s inverted key sequence. A calculator has the 7–8–9 buttons at the top whereas a phone uses the 1–2–3 format. Subtle, but … ⌘ Read more

wish i could join in on the domain age discussion but i registered my first domains last year