alkali @alkalinesec.bsky.social · 14/12/2025sat in seat 5G on the flight home and now i might have covid. coincidence?? 020
alkali @alkalinesec.bsky.social · 07/12/2025i think its not really a good representation of what we are looking for but the query for "number of people" yields 12854871 and the query for "number of grandchildren" yields 2191740. 110
alkali @alkalinesec.bsky.social · 07/12/2025watching the most recent great @acollierastro.bsky.social video and wondered what percent of people with wikipedia pages also have at least one parent with a wikipedia page. i figured someone may have already checked this but it seems like no. got 3/10 blue parents when going to random ppl pages 110
alkali @alkalinesec.bsky.social · 04/12/2025'An internal document named “OPSEC”' is a very fun start to a sentence in the intellexa leak article. 010
Reposted by alkaliSamuel Groß @saelo.bsky.social · 03/12/2025We derestricted a number of vulnerabilities found by Big Sleep in JavaScriptCore today: issuetracker.google.com/issues?q=com... All of them were fixed in the iOS 26.1 (and equivalent) update last month. Definitely some cool bugs in there!issuetracker.google.comGoogle Issue Tracker 064
Reposted by alkaliDavid Buchanan @retr0.id · 03/12/2025javascript should support memory-unsafety, just to make things more interesting 1615413
Reposted by alkalitweety fish oh wow like a chimera or something spoooky @sifu.tweety.fish · 18/11/2025cloudflare's on-duty IT staff bangs on the doors which I have padlocked from the inside as I calmly break open lava lamp after lava lamp and drink the contents 172095545
Reposted by alkaliKate Compton @galaxykate.bsky.social · 16/11/2025Doctor says, 'Dont worry, parser design is simple. Great programmer Kate Compton has written the parser you seek’ 252698450
alkali @alkalinesec.bsky.social · 05/11/2025fun little bit of code in CoreFoundation when you attempt to call addObjectsFromSet: with a non-set argument. it warns you 64 times while adding to "checkForAndForgiveClientSin" with the error message also including "Please wait while the system corrects this..." like its gonna take a minute lol 010
Reposted by alkaliSamuel Groß @saelo.bsky.social · 04/11/2025Some more cool JS Engine bugs found by Big Sleep were fixed in yesterday's Apple security updates: support.apple.com/en-us/125632 Technical details will be available soon at issuetracker.google.com/issues?q=com...support.apple.comAbout the security content of iOS 26.1 and iPadOS 26.1 - Apple SupportThis document describes the security content of iOS 26.1 and iPadOS 26.1. 174
alkali @alkalinesec.bsky.social · 04/11/2025petition to change the name "big sleep" to "superhuman hacking machine" so i feel less bad about it finding 1000x more bugs than me 000
alkali @alkalinesec.bsky.social · 04/11/2025support.apple.com/en-us/125632 the name "big sleep" feels a lot more insulting now that its really threatening to take our jobssupport.apple.comAbout the security content of iOS 26.1 and iPadOS 26.1 - Apple SupportThis document describes the security content of iOS 26.1 and iPadOS 26.1. 021
Reposted by alkaliemma zhou @emmz.bsky.social · 25/10/2024does everybody know about my favorite website, the embroidery tips page that forgot to close its <h3> tagsweb.archive.orgEmbroidery Trouble Shooting Page Embroidery Trouble Shooting Answers to all your questions about Embroidery problems 34780563473
Reposted by alkaliHorkos @wylienewmark.bsky.social · 27/10/2025turning a big dial taht says "AI" on it and constantly looking back at the market for approval like a contestant on the price is right. 07811
Reposted by alkaliamos @fasterthanli.me · 23/10/2025tired: traveling for halloween wired: spooky action at a distance 0484
Reposted by alkaliваят @denbib.bsky.social · 10/10/2025Apple is planning a special initiative featuring iPhone 17 with Memory Integrity Enforcement. To rapidly make this defense available to those targeted by mercenary spyware, the company will provide a thousand iPhone 17 devices to civil society organizations. security.apple.com/blog/apple-s...security.apple.comA major evolution of Apple Security Bounty, with the industry's top awards for the most advanced research - Apple Security ResearchToday we’re announcing the next major chapter for Apple Security Bounty, featuring the industry’s highest rewards — up to $2 million and a maximum payout in excess of $5 million — expanded research ca... 01411
alkali @alkalinesec.bsky.social · 10/10/2025(guy designing c++): alright how do we make it as hard as possible to find the actual value of a variable 120
Reposted by alkaliJason Koebler @jasonkoebler.bsky.social · 07/10/2025NEW: In May, a Texas police department said they used the powerful Flock surveillance network against a woman who had an abortion "for her safety" Newly obtained court records show it was a 'death investigation,' and they considered charging her with a crime www.404media.co/police-said-...404media.coPolice Said They Surveilled Woman Who Had an Abortion for Her 'Safety.' Court Records Show They Considered Charging Her With a CrimeCourt records show that the narrative Flock and a Texas Sheriff's Office has told the public isn't the whole story, and that police were conducting a 'death investigation' into the abortion. 301345732
alkali @alkalinesec.bsky.social · 07/10/2025its pretty cool how we are warping our economy so that it will either develop AGI or completely implode. (actually a part of me does unfortunately really think this is cool) 110
Reposted by alkaliNatalie @nataliethenerd.com · 02/10/2025blog.nataliethenerd.com/i-turned-the...blog.nataliethenerd.comNatalie the Nerd's blogSharing my thoughts and current projects. 517558
Reposted by alkaliMolly White @molly.wiki · 01/10/2025slightly ominous mailer from the Red Cross 17369351226
Reposted by alkaliradareorg @radareorg.bsky.social · 28/09/2025Happy radare2 6.0.4 release day infosec.exchange/@radareorg/1... 033
alkali @alkalinesec.bsky.social · 28/09/2025reading more about the Team Atlanta AIxCC solution i do still wonder if eliminating the LLM components in favor of normal ML classification (or just "dumb" hardcoded logic) could achieve results that are nearly as good and orders of magnitude more efficient team-atlanta.github.io/blog/post-ml...team-atlanta.github.ioFrom Harness to Vulnerability: AI Agents for Code Comprehension and Bug DiscoveryWe are Team Atlanta, the first-place winner of DARPA AIxCC. 120
alkali @alkalinesec.bsky.social · 28/09/2025i was thinking earlier today about how i never reflexively check janky looking sites for injection vulns anymore. so i tested the next site where i got the vibe. immediate sqli 000
Reposted by alkaliKen Shirriff @righto.com · 24/09/2025The iPhone 17 is powered by Apple's A19 SoC (System on a Chip). Chipwise took a die photo of the chip, but it's a bit drab. I spiced it up by applying the over-saturated color gradient that Apple used for die photos of the M1 chip :-) Link to the original die photo: chipwise.tech/our-portfoli... 6735
alkali @alkalinesec.bsky.social · 25/09/2025someone needs to make flare-on but not windows shit (i know that this is "literally every other ctfs rev chals") 000
alkali @alkalinesec.bsky.social · 25/09/2025the grapheneOS hardened allocator is pretty scary www.synacktiv.com/en/publicati... has there ever been a recorded ITW 0c exploit on a grapheneOS device?synacktiv.comExploring GrapheneOS secure allocator: Hardened MallocExploring GrapheneOS secure allocator: Hardened Malloc 112
Reposted by alkali404 Media @404media.co · 22/09/2025NEW: 404 Media is suing ICE. We have filed a lawsuit demanding the agency release its $2 million contract with Paragon, a company that makes powerful spyware to break into phones and read messages from encrypted chat apps www.404media.co/were-suing-i...404media.coWe’re Suing ICE for Its $2 Million Spyware Contract404 Media has filed a lawsuit against ICE for access to its contract with Paragon, a company that sells powerful spyware for breaking into phones and accessing encrypted messaging apps. 181770558
Reposted by alkaliashn @ashn-dot-dev.bsky.social · 26/08/2025Found a video from a couple of years ago when I wrote a brainfuck implementation in Fastly VCL. Each tick of the interpreter was executed by making a GET request to the VCL service with the entire interpreter state encoded in the URL. Anyway, here is "hello world" in 1771 GET requests. 2155
alkali @alkalinesec.bsky.social · 19/09/2025this list of people on the wikipedia page for "If Anyone Builds it, Everyone Dies" is absolutely sending me 000
alkali @alkalinesec.bsky.social · 17/09/2025there is approximately no chance that this is a real effect, and if it is there is a 0% chance it is intentional. LLMs don't understand vulns enough to make subtle mistakes, so any intentional sabotage would be way more obvious than whatever "somewhat more apt to result in low-quality code" means. 010
Reposted by alkaliAlex Wild @alexwild.bsky.social · 15/09/2025I am just going to keep posting that the TX governor recently pardoned a political murderer. The dude texted "I'm going to shoot protestors", then went and shot a Black Lives Matter protester. He was convicted in a jury trial. Hard to find a more blatant example of celebrating political violence.texastribune.orgGov. Greg Abbott pardons Daniel Perry, veteran who killed police brutality protester in 2020A Travis County jury sentenced Perry to 25 years in prison last year, prompting Abbott to ask the state parole board to review his case. 9981753970
Reposted by alkaliAndrey Konovalov @andreyknvl.bsky.social · 11/09/2025Wrote a trigger for CVE-2025-38494/5 (an integer underflow in the HID subsystem) that leaks 64 KB of OOB memory over USB. Still works on Pixels and Ubuntus (but the bug is fixed in stable kernels). github.com/xairy/kernel... 1204
Reposted by alkalijiska @naehrdine.bsky.social · 10/09/2025Want to learn reverse engineering? There'll be a free, women*-only BlackHoodie workshop from October 6th to 9th in Paris! Topics: • Linux memory forensics 🕵️♀️ (by Sonia) • Web app and mobile app pentesting 🕸️📱 (by Paula) • iOS reversing 🍎 (by me) 12415
alkali @alkalinesec.bsky.social · 05/09/2025the dumbest companies are breaking the internet. my mother-in-law lives near Stroudsburg PA and is being cut off from streaming services because the geo-ip company suddenly decided that "STH" now meant "Stockholm"... its almost like the hints geo-ip uses weren't meant to actually be relied on 200
alkali @alkalinesec.bsky.social · 02/09/2025man i can't wait to finish Serious Hacking Project so i can switch to working on Silly Hacking Project for a little 000
Reposted by alkaliSwiftOnSecurity @swiftonsecurity.com · 01/09/2025Normie cyber people it brings me no pleasure to announce the aerospace cyber people absolutely cooked us 20684137
Reposted by alkaliMarie @marie.chaos.social.ap.brid.gy · 30/08/2025I got #NixOS to work on my Wii-U!! 2317686
![Screenshot of the Pokémon anime showing butterfree and ash with text saying [squeaking noises] to signify what butterfree sounds like](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:nlz6s2rcv4rixjux6avn6ezz/bafkreiefgemxi2x6beokntxrwqkk7fwbyb35r6g4wjjngxvnnetrxnairy)
![Screenshot of the console output of the command fastfetch. The NixOS logo is displayed as an ascii art on the left.
Text on the right:
marie@wiiu
OS: NixOS 25.11 (Xantusia) ppc
Host: nintendo,wup-101
Kernel: Linux 6.6.80-wiiu
Uptime: 3 mins
Packages: 211 (nix-system)
Shell: bash 5.3.3
Terminal: /dev/pts/0
CPU: Espresso @ 1.24 GHz
GPU: Nintendo latte-gpu7 [Integrated]
Memory: 127.48 MiB / 1.98 GiB (6%)
Swap: Disabled
Disk (/): 3.71 GiB / 49.54 GiB (7%) - ext4
Local IP (enu1c2): 192.168.1.62/24
Locale: en_US.UTF-8](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:xtcqp6swimpwntulpmnid2wb/bafkreiartfmpkstzrveohoe5o4qnamjvskhmjruyslezqvmonqwck56hk4)