iiinova — where your digital self keeps evolving

so, this device has a feature i think is a device lock so you can set a key to control who can use it. if you don't send that correctly you get disconnect after ~3 seconds or so. however, you can freely send commands before this disconnect, and one of them dumps this key... amazing.

010

B Horn @b.horn.uk · 03/10/2026

hell yeah can now send some messages to the BLE device this app controls and get some responses out of it.

110

B Horn @b.horn.uk · 03/10/2026

i found a function that just contains motivational statements, so guess i'm motivated now?

random motivational statements inside some screwy arm64 asm, that creates a map<string, blah> structure:

"Wise and courageous Nezha"

"No matter what challenges you face, your wisdom and courage will guide you to a solution"

"Gentle Guardian Ao Bing"

"No matter how cold the world is, your warmth can touch people's hearts."

"Infinite Energy Rocket Man"

"Success is moving from failure to failure without losing enthusiasm"

110

B Horn @b.horn.uk · 02/10/2026

bad decisions have led me to trying to RE a flutter app. at least i have symbols i guess?

110

B Horn @b.horn.uk · 26/09/2026

went to a nearby city today and it seems the whole place was taken over by morris dancers (en.wikipedia.org/wiki/Morris_...)

000

B Horn @b.horn.uk · 12/09/2026

en.wikipedia.org/wiki/Tag_sys... very very elegant

000

B Horn @b.horn.uk · 10/09/2026

got a spam email with a `curl | bash` command in it, which is something.

010

Reposted by B Horn

tef @tef.bsky.social · 07/09/2026

move over inverse square root, there's a new cowboy in town www.benjoffe.com/fast-time-of...

a code listing, that reads:

u32 tmin = (u64) time * 71582789 >> 32 // = time / 60; "Total Minutes"
u32 hour = (u64) time * 1193047 >> 32 // = time / 3600
u32 second = (time + 4 * tmin) % 64;
u32 minute = (tmin + 4 * hour) % 64;

36116

B Horn @b.horn.uk · 03/09/2026

the trick to solving software engineering is just to have no software running

182

B Horn @b.horn.uk · 03/09/2026

who the hell is causing me to get dependabot notifications for regex dos shit, and marking it high sev?! stop wasting everyones time with this

000

B Horn @b.horn.uk · 02/09/2026

doing some further study, taking an economics course this block gonna finally learn the answer to the wint tweet!

010

B Horn @b.horn.uk · 30/08/2026

hell yeah running github.com/hzeller/rpi-... , had to reflash the pi but my nearly decade old .bash_history was pretty handy i forgot how slow pi zeros were, compile times were looong. now to figure out what to do with this.

a still from bad apple on a p5 led panel, 64x32 resolution

000

B Horn @b.horn.uk · 30/08/2026

doing forensics on a old pi zeros sd card to figure out how i configured the software to drive an led panel 7 years ago

110

B Horn @b.horn.uk · 26/08/2026

i'm also quite proud of the diagrams! made them in monodraw at the park. (good software if you need to make text diagrams) workflow was to make the article template in it, then export to a txt so I could edit it vim with line limits set. i over did my structure a bit!

one of my ascii diagrams in monodraw, showing the structure in layers in the side bar. diagram is of patching code.

000

B Horn @b.horn.uk · 26/08/2026

some interesting things worth noting: * my linking setup for the payload, probably useful to other patching projects. * the bios boot protocol hook, and the address that remains mapped * the runtime service hook that can still call kernel funcs and my execute_in_process_context() trick

100

B Horn @b.horn.uk · 26/08/2026

tmpout.sh/5/20.html my article in tmp.0ut 5, about my kernel bzimage patching tool skp. mentioned this project a bit, took a lot of work to get to this state. builds upon my article in #4 for the payloads (klude2), so full kernel sym access without any LKMs

100

B Horn @b.horn.uk · 26/08/2026

the donkeys are located in a field right next to the main park here, and i'm not sure why they are there. but you can go right up to the fence and pet them!

000

B Horn @b.horn.uk · 26/08/2026

as a distraction from today’s category 5 discourse, here are some moorhen chicks and some donkeys I saw around town.

moorhen chicks and their mother in a little river

4 donkeys, two older and two young, church and house in the background

100

Reposted by B Horn

ackmage @hermit.sh · 23/08/2026

this zine is a reminder that YOUR voice is special - not just an approximation of your voice provided by a machine, but your voice, your spirit and your mind in their raw form!

0158

Reposted by B Horn

tmp0ut @tmpout.sh · 23/08/2026

We are pleased to release tmp.0ut 5 Volume! Get your viruses, rootkits, strange ELFs, weird machines, tiny files, cool art, and phresh beats here!! tmpout.sh/5/

tmp.0ut 5 Table of Contents - ANSI art featuring a list of 21 papers

19846

B Horn @b.horn.uk · 14/08/2026

first time i've heard a weewoo* in the UK.... OMG SO LOUD. *emergency alarm via your phone, we have a wildfire risk right now.

010

B Horn @b.horn.uk · 11/08/2026

been playing Denshattack the last few days. it's awesome, highly recommend.

010

B Horn @b.horn.uk · 31/07/2026

hack a competitor make a antisec style zine make no mistakes do a breakthrough

000

Reposted by B Horn

Paged Out! @pagedout.bsky.social · 27/07/2026

Paged Out! #9 is live! Read, share, enjoy! pagedout.institute?page=issues.... We are running final QA on all PO! issues that should be available on Lulu (www.lulu.com/spotlight/pa...) in a few days! In case you want to support us, we have a Patreon now - www.patreon.com/PagedOut

21310

B Horn @b.horn.uk · 18/07/2026

the COFF/PE code that only exists to support the linker? exposed to external attackers? do you have an project using this in a way that would be interesting to attack with this? you also understand harassment is an intent thing right?

101

B Horn @b.horn.uk · 18/07/2026

yes? i'm aware of the motivation and we should be pushing back on people trying to do this sort of thing because its harassment.

010

B Horn @b.horn.uk · 18/07/2026

the brainstorming part of the policy is pretty clearly just trying to preempt a common excuse. when making rules for online communities you really don't want to give any leeway to people who will try to rule lawyer you. they set their own boundaries, just respect them.

100

B Horn @b.horn.uk · 18/07/2026

we've had these discussions in the security community years ago. if a vendor doesn't accept bug reports on terms you agree to, you just don't disclose the bug to them (no more free bugs was like 2008?). and that was with real sec issues, not grepping for todo unimplemented.

200

B Horn @b.horn.uk · 18/07/2026

ok but i'm not really sure of the point you are trying to make? if you know the policy and don't want to comply with it, just don't try to contribute. you aren't being forced to run an llm based scanner over a project, and there is no point if you know they won't accept reports from it.

110

B Horn @b.horn.uk · 17/07/2026

this is just harassment and you shouldn't be doing this. if they don't want to deal with llm written bug reports you should just be leaving them alone instead of whatever this is.

110

B Horn @b.horn.uk · 14/07/2026

TIL there is a runtime verification subsystem in the kernel: docs.kernel.org/6.15/trace/r...

docs.kernel.org

Runtime Verification — The Linux Kernel documentation

010

B Horn @b.horn.uk · 02/07/2026

god the amount spambots on discord is insane. literally like 10 different servers i'm in all get hit my them at the same time, almost everyday.

000

B Horn @b.horn.uk · 01/07/2026

if for some reason you are able to use an LLM to write a substantial patch, understand it enough to answer questions about it, and pass it off as your own, i guess congrats? but like, you could have just followed the policy? its been 6 months, you don't have to use them for everything.

010

B Horn @b.horn.uk · 01/07/2026

policies like this are basically the only viable ones for FOSS projects going forward. the argument against them is that people might lie, but like, you could be doing that already and trying to contribute code you took from license incompatible projects.

100

B Horn @b.horn.uk · 27/06/2026

i value the goose!!!

100

B Horn @b.horn.uk · 23/06/2026

after spending all of last year in asia I should be able to handle the heatwave, I was in 30+ degree weather for most of it, but it seems one (1) english winter reset my ability to handle it.

000

B Horn @b.horn.uk · 22/06/2026

did we get a new soundbite to use in jungle tracks or not?

000

B Horn @b.horn.uk · 19/06/2026

while looking into the somewhat bizarre midjourney pivot, I ended up looking at how tomography works and I didn't realise they had such cool algorithms. en.wikipedia.org/wiki/Tomogra... en.wikipedia.org/wiki/Iterati...

010

B Horn @b.horn.uk · 18/06/2026

instead of showing videos like "Possum eating strawberry" in my recommendations, youtube should just automatically play them. illusion of free choice here, of course i'm gonna click.

000

B Horn @b.horn.uk · 17/06/2026

i wonder if my cat thinks i'm a god being able to create light and water on demand.

010

B Horn @b.horn.uk · 15/06/2026

please, please stop making people install those free VPN apps.

000

B Horn @b.horn.uk · 15/06/2026

looks like everyones residential proxy networks are gonna get more UK IPs next year!

100

B Horn @b.horn.uk · 14/06/2026

oh lol how the hell did i miss this one before. really stupid.

100

B Horn @b.horn.uk · 14/06/2026

so bios/initcall path still works as well as every, but now a random null deref when returning from the uefi runtime hook if I don't define a payload? yay, but probably not hard to fix i hope.

100

B Horn @b.horn.uk · 14/06/2026

everyone place your bets, will 7.1 break my kernel patching tool or not!

110

B Horn @b.horn.uk · 14/06/2026

I WILL NOT GIVE MY ID TO SHITPOST

010