Beyond the Shell: Advanced Enumeration and Privilege Escalation for OSCP (Part 3)

Image

Part 3 reveals the high-value Windows PrivEsc methods that defeat rabbit holes. Master file transfer, service … ⌘ Read more

Demystifying Scala 3 Types By Bill Venners
Comments ⌘ Read more

3rd Beta of iOS 26.1, macOS Tahoe 26.1, iPadOS 26.1 Available for Testing
Beta testing for iOS 26.1, iPadOS 26.1, and macOS Tahoe 26.1 is accelerating pace, with the third beta release now being available for those participating in the beta testing programs for Apple system software. Beta 3 comes just a week after beta 2, and Apple usually goes through several beta versions before issuing a final … [Read More](https://osxdaily.com/2025/10/13/3rd-beta-of-ios-26-1 … ⌘ Read more

Thoughts on Remix 3
Comments ⌘ Read more

Git Developers Talk About Potentially Releasing Git 3.0 By The End Of Next Year
Comments ⌘ Read more

Sustainable practices could cut food-related emissions in half
Food systems make up roughly 30% of total greenhouse gas emissions globally. But transforming them could cut these emissions by more than half, according to a report released Oct. 3 from a commission of global experts from more than 35 countries across six continents. ⌘ Read more

Ukrainian forces liberate Mali Shcherbaky and advance 3.5 km on Zaporizhzhia front ⌘ Read more

ksmbd - Exploiting CVE-2025-37947
Comments ⌘ Read more

DebDroid - Debian on Android (v1.1)
Hello guys! I’m happy to share DebDroid, a free and open-source project that aims to bring a real Debian environment to Android devices. It is not Termux-based, nor a simple proot-based wrapper, but a real, near-native chroot environment running on top of the Android kernel.

The project is built around a heavily modified version of the Kali Nethunter’s script I’ve developed 3 years ago. This new version (DebDroid) brings greatly improved security, isolation and additional compatibility patch … ⌘ Read more

@alexonit@twtxt.alessandrocutolo.it Hell yeah, that looks great! :-) What a pity you’re not having any photos, though. I love that you went to a craftsmanship school and learned some amazing skills. The older I get, the more I admire all sorts of crafts. That’s also why I started building physical stuff myself in my spare time.

This sketch is well done, so you countersunk the holes to make room for the heads. Makes absolutely sense. Mille grazie! <3

Bun 1.3
Comments ⌘ Read more

Network Storage and Scaling Characteristics of a Distributed Filesystem
Comments ⌘ Read more

UN says has enough stocks to feed entire Gaza for 3 months ⌘ Read more

Power restored to 270,000 consumers in Kyiv; outage schedules changed in 3 cities ⌘ Read more

DL40N Fanless 1.3L Mini PC with Intel Twin Lake Processors
The DL40N is a fanless 1.3-liter mini PC powered by Intel Twin Lake processors and up to 16GB DDR5 memory. It supports triple 4K display output, dual 2.5G Ethernet, and multiple USB and COM ports for reliable 24/7 operation in applications such as factory automation, digital signage, kiosks, and more. Built on Intel’s Twin Lake […] ⌘ Read more

Memory access is O(N^[1/3])
Comments ⌘ Read more

Python 3.14 Is Here. How Fast Is It?
Comments ⌘ Read more

Python 3.14.0 is now available
Comments ⌘ Read more

@prologic@twtxt.net Oh, I will certainly check this out! Thanks for the tip, mate! <3

Python Insider: Python 3.14.0 (final) is here
Comments ⌘ Read more

Python 3.14.0 (final) is here
This is the stable release of Python 3.14.0
Python 3.14.0, the newest major release of the Python programming language is here!

Comments ⌘ Read more

Powered by Docker: How Open Source Genius Cut Entropy Debt with Docker MCP Toolkit and Claude Desktop
This is part of the Powered by Docker series, where we feature use cases and success stories from Docker partners and practitioners. This story was contributed by Ryan Wanner. Ryan has more than fifteen years of experience as an entrepreneur and 3 years in AI space developing software and is the founder of Open Source… ⌘ Read more

Announcing ORAS v1.3.0: Elevating artifact and registry management workflows
The ORAS community is thrilled to announce the release of ORAS CLI v1.3.0, a version packed with stability improvements and pioneering capabilities. In addition to strengthening existing functionality, this release introduces three major new features designed… ⌘ Read more

Meetable Release Notes - October 2025
I just released some updates for Meetable, my open source event listing website. ⌘ Read more

Terasic Announces Starter Kit Featuring RISC-V Nios V Processor and Software Bundle
Terasic has introduced the Atum Nios V Starter Kit, a feature-rich evaluation platform designed to accelerate development with Altera’s Nios V processor. The kit is aimed at embedded engineers, system developers, and educators looking for a practical way to explore RISC-V–based designs on the Agilex 3 FPGA platform. According to Terasic’s announcement, the kit is […] ⌘ Read more

Making yogurt with ants revives a creative fermentation process
Researchers recreated a nearly forgotten yogurt recipe that once was common across the Balkans and Turkey—using ants. Reporting in iScience on October 3, the team shows that bacteria, acids, and enzymes in ants can kickstart the fermentation process that turns milk into yogurt. The work highlights how traditional practices can inspire new approaches to food science and even add creativity to the dinner table. ⌘ Read more

Fine-Tuning Local Models with Docker Offload and Unsloth
I’ve been experimenting with local models for a while now, and the progress in making them accessible has been exciting. Initial experiences are often fantastic, many models, like Gemma 3 270M, are lightweight enough to run on common hardware. This potential for broad deployment is a major draw. However, as I’ve tried to build meaningful,… ⌘ Read more

** Video games goods **
Here are 3 mostly unedited paragraphs from a blog post that fizzled out and I decided not to finish…but then I posted it on mastodon and it seemed to resonate with folks, so, here it is as an RSS exclusive plus some other thoughts, too!

I have a weird relationship with video games. I love video games, but I hardly ever really play them. As a kid I wasn’t allowed to play them at home, and didn’t have much facility to play them. I’d get sneaky bits of game time with my cousin in the back of the car o … ⌘ Read more

Why was Windows 3.0’s WinHelp called an online help system when it ran offline?
Some time ago, I described Windows 3.0’s WinHelp as “a program for browsing online help files.” But Windows 3.0 predated the Internet, and these help files were available even if the computer was not connected to any other network. How can it be “online”? ↫ Raymond Chen at The Old New Thing I doubt this will be a conceptual problem for many people reading OSNews, but I can de … ⌘ Read more

@prologic@twtxt.net I checked a while a ago and there were, like, 3-5 collisions or something like that. Not that many. 🤷 I have to specifically look for them – I don’t notice it in normal operation.

@zvava@twtxt.net Hahaha, I love it! This illustrates the contradiction very well.

@prologic@twtxt.net I know we won’t ever convince each other of the other’s favorite addressing scheme. :-D But I wanna address (haha) your concerns:

1. I don’t see any difference between the two schemes regarding link rot and migration. If the URL changes, both approaches are equally terrible as the feed URL is part of the hashed value and reference of some sort in the location-based scheme. It doesn’t matter.

2. The same is true for duplication and forks. Even today, the “cannonical URL” has to be chosen to build the hash. That’s exactly the same with location-based addressing. Why would a mirror only duplicate stuff with location- but not content-based addressing? I really fail to see that. Also, who is using mirrors or relays anyway? I don’t know of any such software to be honest.

3. If there is a spam feed, I just unfollow it. Done. Not a concern for me at all. Not the slightest bit. And the byte verification is THE source of all broken threads when the conversation start is edited. Yes, this can be viewed as a feature, but how many times was it actually a feature and not more behaving as an anti-feature in terms of user experience?

4. I don’t get your argument. If the feed in question is offline, one can simply look in local caches and see if there is a message at that particular time, just like looking up a hash. Where’s the difference? Except that the lookup key is longer or compound or whatever depending on the cache format.

5. Even a new hashing algorithm requires work on clients etc. It’s not that you get some backwards-compatibility for free. It just cannot be backwards-compatible in my opinion, no matter which approach we take. That’s why I believe some magic time for the switch causes the least amount of trouble. You leave the old world untouched and working.

If these are general concerns, I’m completely with you. But I don’t think that they only apply to location-based addressing. That’s how I interpreted your message. I could be wrong. Happy to read your explanations. :-)

I have a feeling that learning to play electric double bass through an amplifier was a big mistake.

At the core, this is an acoustic instrument. If you play it through an amp, you will instinctively only do the bare minimum to get some sound going, because the amp does the heavy lifting. But it’s just not right.

This is a very physical instrument. It needs a lot of force and strength – in comparison, an electric bass guitar is almost flimsy and delicate. I need to “feel” what’s going on and that’s just not the case when using headphones.

I feel like I wasted ~3 years. 🫤 But maybe it’ll get better from now on …

Erlang Solutions: ElixirConf US 2025: Highlights from My First ElixirConf
Joining conferences is one of the best perks of working as a Developer at Erlang Solutions. Despite having attended multiple Code BEAM conferences in Europe, ElixirConf US 2025 was my first. The conference had 3 tracks, filled with talks from 45+ speakers and 400+ attendees, both in-person and virtual.

ElixirConf is one of the great occasions to connect with other Elixir ent … ⌘ Read more

@lyse@lyse.isobeef.org yeah i made it to the front bc i got there early!!! i was so happy :‘) the rooftop was such a vibe too

rilo kiley are the best <3

@movq@www.uninformativ.de Oh no, I completely missed it, didn’t think of it anymore! :-(

Thank you for the great photos! <3

i playing with custom iptv channels. ersatztv my beloved

Why do I care about this?

1. The load will become a problem at some point.
   
2. These crawlers and the current “AI” in general are breaking the rules. I am supposed to be paying for every little thing, I get sued for “piracy”. But apparently, these rules only apply to me. If I had more money, I could break them. Fuck that.
   
3. I simply don’t want it. Period.

This probably means that I can no longer host my own website. I don’t want to deploy something like Anubis, because that ruins the whole thing: I want it to be accessible from ancient browsers, like OS/2 or Windows 3.11.

I’ll keep an eye on it for a while. Maybe try to block some IPs.

Sooner or later, I’ll take the website down and shift everything to Gopher.

This is soooo bloody cool, @movq@www.uninformativ.de! https://www.uninformativ.de/blog/postings/2025-08-30/0/POSTING-en.html

Erlang Solutions: MongooseIM 6.4: Simplified and Unified
MongooseIM is a scalable and efficient instant messaging server. With the latest release 6.4.0, it has become more powerful yet easier to use and maintain. Thanks to the internal unification of listeners and connection handling, the configuration is easier and more intuitive, while numerous new options are supported.

New features include support for TLS 1.3 with optional channel binding for improved security, single round-trip authent … ⌘ Read more

After around 3 years, I managed to make my “smallest recognizable canine”, even smaller. So here’s the all new, smallest recognizable canine 2.0:

@movq@www.uninformativ.de Hell yeah, this is cool, thank you! <3

You can explicitly use colors in manpages. I saw this in the apt manpage of Ubuntu recently, which, for some reason, uses blue text in one place:

https://movq.de/v/de5ab72016/s.png

Makes little sense to me. I’m glad that most manpages don’t do this. I wouldn’t want unicorn vomit all over the place.

Using colors can be done using the low level commands \m and \M:

.TH foo_program 3
\m[blue]I'm blue\m[], da ba dee.
\m[red]\M[yellow]I'm red on yellow.\m[]\M[]
This is quite horrible.

https://movq.de/v/394282ec75/s.png

@kiwu@twtxt.net awww you got this kiwu <3

Twtxt as a network is so neat. Sucks it isn’t more widely adopted ): I feel like it’d be way easier to host than say, mastodon or GTS. & would require WAYYYY less resources. Not a diss on GTS, I love GTS , just saying because it’s text files, I assume the minimum amount of ram needed to host any of the twtxt server software is very low.

I could be super wrong though lol. Idk shit about anything ^^”

@prologic@twtxt.net i am trying!!! i have a lil template to encourage me and everything <3

37C3 and New Year’s Eve 2023
Another one from the vaults. The 37C3 conference took place in
December, 2023. This report was mostly written in January, 2024.
Mostly finished it at night in my cottage between 28 and 29th
December, then edited and added some stuff in July, 2025. So… Only
1.5 years late?

It was a little ironic, and a little sad, that I was finishing the
37C3 report during 38C3. I didn’t manage to get any tickets for me and
#3 for 38C3 and had to make do with watching the stream.

The links to the talks go to [C … ⌘ Read more

@lyse@lyse.isobeef.org “Advanced”, well, probably more “mature”. There aren’t a ton of crazy features and that icon thing is the largest code addition in the last 10 years. %)

Speaking of OS/2 … I just realized that Windows 3.x didn’t have icons, either. If I’m not mistaken, this only got added in Windows 95. In other words, OS/2 had this feature before Windows did, because at least OS/2 2.1 from 1993 had icons. Who would have thunk.

(Now I kind of want to know which system really introduced this feature.)

@lyse@lyse.isobeef.org Oh, huh, maybe it was just my GNOME 2 themes back then that didn’t show the icon. 🤔

I like the looks of your window manager. That’s using Wayland, right?

Oh, no. It’s still X11. All my recent Wayland comments resulted from me trying to switch, but I think it’s still too early. Being unable to use QEMU (because it can’t capture the mouse pointer) is a pretty big blocker for me. This is completely broken, it just happens to be unnoticeable with modern guest OSes, so it’s probably not a priority for devs.

(Not to mention that I would have to fork and substantially extend dwl in order to “replicate” my X11 WM. And then, after having done that, I’d have to follow upstream Wayland development, for which I don’t have the resources. Things would need to slow down before I can do that.)

all that wasted space of the windows not making use of the full screen!!!1

Heh. I’ve been using tiling WMs for ~15 years now, so it’s actually kind of refreshing to see something different for a change. 😅

Probably close to the older Windowses.

That particular theme is a ripoff of OS/2 Warp 3: https://movq.de/v/6c2a948882/s.png 😅

We ran some similar brownish color scheme (don’t recall its name) on Win95 or Win98

Oh god. Yeah, I wasn’t a fan of those, either. 🥴