dragosr

Mr. Scruffles goes to CanSecWest...

Anyone worried about, or scared of "machine speed" attacks probably hasn't spent any time babysitting an LLM vulnerability discovery and/or verification pipeline. ;-P

Washington journalism is in a moment of generational change. We're rising to meet it. Welcome to The Washington Sun. washingtonsun.com

WireGuard powers world’s fastest VPN services. Technology behind Tailscale now goes where UDP can't: WireguardTCP delivers familiar configuration, kernel-native performance, NAT traversal, seamless roaming, with improved throughput, latency, and CPU load improvements over UDP. wireguardtcp.net

I’ve been working on a hobby project to crack classical ciphers. The guts of it is to see whether frontier LLMs, given the right tools, can do a good job cracking a broad range of historical ciphers. github.com/matthewdgree...

Impressive energy storage developments in the Middle East - Saudi Arabia is building a 12 GWH battery park too, in addition to the 11.3 GWH Abu Dhabi Project below. The Abu Dhabi Project takes power from a 5 GW solar plant ( 1GW is about what a nuclear power plant produces. So they got 11.3 hrs)

Flock CEO: "Unfortunately, there’s terrorist organizations like DeFlock whose primary motivation is chaos. They’re closer to Antifa than they are anything else." #privacy #JoinAntifa https://deflock.org/

WTF, what's happened to Popehat? This isn't cool at all. @kenwhite.bsky.social

The global nightmare continues.

Don't see these that often, malicious server, no auth, no interaction, RCE in ssh. CVE-2026-55200 — libssh2 pre-auth heap OOB write pre-auth so network attacks can deliver the packet even when client pins host keys github.com/bikini/explo... www.linkedin.com/posts/dragos...

github.com/rebane2001/x...

This kind of hurt my eyes and my brain, and reinforced my opinion that FreeBSD is a softer target amongst OS platforms. It is pretty funny though, and definitely gets some style points for a vulnerability disclosure. bumsrake.de

<obiwan> It's over, petrofuel industry.... Solar has the high ground. </obiwan>

The Anthropic Fable-5 safety classifiers seem to be written by the OpenAI marketing department. Pretty much anything I talk to LLMs about gets downgraded. Nerfed into useless. Worst model release ever?

The Globe reports that online harms legislation is coming this week that includes a “temporary” social media for kids under 16. My post on why this effectively establishes mandated ID for all Canadians to use social media and AI and it won’t be temporary. www.michaelgeist.ca/2026/06/you-...

When you leave all the mitigations on, crank up the inference settings to maximum, and run the exploit benchmark to see how close the PoCs can get.

The thought processes of AI native kids: 9-year old gets a DOCX file from school laptop, wants to read it, doesn't have M365. His first impulse is to use GPT to write a python script to convert it to TXT so he can use VSCode, instead of asking for Word. When AI is the path of least resistance.

Faced with growing criticism of Bill C-22, CSIS, RCMP, and Public Safety this week tried to make the case for lawful access. My post on why they instead revealed a bill with dangerously disproportionate overreach with real risks of tracking all Canadians. www.michaelgeist.ca/2026/05/the-...

I don't think the authors of this bill have really thought of the implications of not having Signal in Canada. Contact your MP today, before they neuter Canadian technology, and cripple our security.

Sneaking a giant screen into the flagshagger march is one of the funniest things @ledbydonkeys.org have ever done. "STAY HYDRATED" 😂🤣😂

Grid-scale batteries are going in an absolutely wild pace. Every whingey objection to renewables you've ever heard is basically solved by batteries. This is happening whether any of the hopeless dipshits running the US want it or not.

Raelize had LLMs reproduce older ESP32 Secure Boot V1 bypass via voltage glitching in a few days. AI wrote the tooling and built a live dashboard mid-campaign. 20k shots, 12.2% bypass rate. Workflow compression is the story. ESP32 v3 mitigates this. raelize.com/blog/ai-fi-g...

"Dirty Frag" clickbait update: ESP (CVE-2026-43284) patched in mainline + stable (7.0.5, 6.18.28, 6.12.87, 6.6.138, 6.1.171). RxRPC (CVE-2026-43500) still unpatched upstream. AWS adds ipcomp4/ipcomp6 to the blacklist alongside esp4/esp6/rxrpc. AlmaLinux shipped both. Ubuntu/Debian mitigation only.

My retort for anyone who insists LLMs are just "spicy autocorrect" and can't reason: Sure, and you're just spicy electrochemistry. If it walks like reasoning, and proves theorems like reasoning, maybe we need to stop calling it a duck shaped Markov chain.

Copy Fail (CVE-2026-31431): the modprobe.d + rmmod recipe everyone is sharing does nothing on RHEL/Alma/Rocky/Oracle. They ship algif_aead built in. On Debian/Ubuntu it auto-loads when anything binds AF_ALG — no default protection. PoC fails on Busybox/Alpine but still vulnerable. Details below.

Vercel popped via Context.ai: Context employee caught Lumma Stealer from Roblox cheat scripts, OAuth token pivoted in. Audit their GitHub App: - /settings/installations -> Configure -> Suspend or Uninstall - /settings/applications -> revoke OAuth Write on code, PRs, workflows. Risky, overbroad.

Interesting critical analysis of IPv8 draft... shitwolfymakes.substack.com/p/we-need-to...

LLM-found vulnerabilities don't need panic, they need faster patching. Equip your developers with AI tools for code comprehension, triage, and testing. Defenders have full source access — LLMs amplify that advantage. The bottleneck isn't technology, it's adoption. secwest.net/ai-triage

I watched LLMs write full exploit chains years ago. The amazement fades once you hit context limits and have to steer the model through every hard corner. The industry is full of people who just got here and are still in the amazement phase. That's the gap worth watching.

Anthropic accidentally leaked Claude Code's source code. Researcher Chaofan Shou found a .map file in the npm package linking to the full, unobfuscated TypeScript files in an R2 bucket. The internet is now rapidly downloading and analyzing the logic behind the CLI tool. github.com/nirholas/cla...

MDSec shows how to patch Dell UEFI firmware offline to disable pre-boot DMA protection while the BIOS UI still shows it enabled. TPM PCRs don't catch the NVRAM change, so BitLocker boots fine. Patch survives official BIOS updates. Then PCILeech gets you SYSTEM. Measured boot gap worth studying.