Sign in

Aleks

@fuzzyaleks.bsky.social
99 followers 193 following 73 posts

Fuzzy as in logic

PostsRepliesMedia
Aleks @fuzzyaleks.bsky.social · 29/09/2026
Original post: infosec.exchange/@fbz/1173545...
this is the back of one of my new Mandelbrot knit sweaters https://knityak.com/collections/antenna-crown in shades of blue. these ship with the code in Python to generate your specific spot on the Mandelbrot fractal with these same four colors and dithering. these are made with a new on demand manufacturer and are pixel native from my code: one pixel equals one knit stitch.
#math #knit #computationallyfabulous #fractal #mathart #algorithmicart
000
Aleks @fuzzyaleks.bsky.social · 26/09/2026
You bet it’s an stm32 clone!
021
Aleks @fuzzyaleks.bsky.social · 22/09/2026
Remember how, about 20 years ago, Intel used to just ship you, for free, all volumes of x86 instruction manual? Like, actual printed books. Why did they do that? Must have cost a small fortune! I still have mine somewhere!
010
Aleks @fuzzyaleks.bsky.social · 21/09/2026
Working on something interesting for Sony E-mount.
000
Reposted by Aleks
Cøry @cory.so · 20/09/2026
Hey Mom, look! I’m on WIRED. :)
012
Aleks @fuzzyaleks.bsky.social · 13/09/2026
Besides vulnerability research, we did some fun networking stuff. Martin was having fun with UPnP and i thought we might expand that to IPv6. We tricked some dual homed devices to reach back to us via IPv6 by talking UPnP to them via IPv4. Should try this again. blog.29b.net/talos_archiv...
000
Aleks @fuzzyaleks.bsky.social · 11/09/2026
December 2019 I started digging into Zoom. And then Zoom became kinda important. Never got to publish most of the work, it was hell of a fun time to have a custom implementation zoom client that would let you send fake/malformed stanzas. blog.29b.net/talos_archiv...
001
Aleks @fuzzyaleks.bsky.social · 10/09/2026
So many vulnerabilities! And almost all were just reported and got patched. But for a few, we did get to have some fun. Nicely exploitable RCEs in Memcached, we made a safe vulnerability test and scanned the whole Internet repeatedly to measure adoption rates: blog.29b.net/talos_archiv...
000
Aleks @fuzzyaleks.bsky.social · 10/09/2026
Original post: mastodon.social/@zenofex/117...
Curiosity got the best of me, so I reverse engineered the latest Plex Media Server security patches and put together PoCs for each patched issue including a few n-day RCEs.

https://github.com/Zenofex/Plex_Vuln_PoCs

Unfortunately, there doesn’t appear to be CVEs assigned to these yet.

Enjoy!
000
Aleks @fuzzyaleks.bsky.social · 10/09/2026
I’ve made a somewhat complete archive of my publications while at @talosintelligence.com . With web archive links and copies where appropriate so it survives CMS changes. blog.29b.net/talos_archiv...
100
Reposted by Aleks
Dean Pierce @deanpierce.net · 07/09/2026
Yay I did a thing. occupy-x.com will redirect any requests to one of the known functional nitter instances currently online. Edit the URL to add "occupy-" in front and you should be good to go.
occupy-x.com
occupy-x: Read X through Nitter
One link. A rotating list of public Nitter instances. Open X profiles and posts through Nitter, with your path preserved.
161
Aleks @fuzzyaleks.bsky.social · 05/09/2026
Previously, I got root on this device. Currently, I added Matter support to it making it instantly available in Apple Home, Google Home, Home Assistant, or any other Matter hub: blog.29b.net/dispatches/c...
blog.29b.net
QingPing CGS2 - Now with Matter support
100
Aleks @fuzzyaleks.bsky.social · 31/08/2026
That moment of panic when you temporarily lose muscle memory for a password that you otherwise know by heart and don’t have in password manager… ugh.
000
Aleks @fuzzyaleks.bsky.social · 16/08/2026
Who’s gonna do a Hunter S Thompson style reportage about AI buildout like @nealstephenson.bsky.social did about undersea cables 30 years ago in “Mother Earth Mother Board” www.wired.com/1996/12/ffgl...
000
Aleks @fuzzyaleks.bsky.social · 07/08/2026
There’s this very bizarre form of Yugo-nostalgia going on right now in Portland. A weird mini-festival of Yugo films. I’m really puzzled, but why not?
000
Aleks @fuzzyaleks.bsky.social · 01/08/2026
Original post: infosec.exchange/@nasko/11701...
The way we are handling the vulnpocalypse in Chromium is described in https://blog.google/security/chrome-stronger-with-every-update/. It has been an eye opening journey with no clear end in sight.
000
Aleks @fuzzyaleks.bsky.social · 23/07/2026
I’m doing a small talk at #teardown2026 this saturday about some past projects of mine www.crowdsupply.com/teardown/por...
020
Aleks @fuzzyaleks.bsky.social · 14/07/2026
Picked up the cookbook (Dishoom) shortly before starting the novel (Midnight Children) without realizing Mumbai is central to both. House smells amazing. I used to pair music to books but from now on I’m always pairing my cooking.
010
Reposted by Aleks
walking mirage @wolf.observer · 19/06/2026
to get ahold of one, you have to order a light with 660nm photo red emitters from intl-outdoor.com, then email hank with your order number and tell him you want 720nm far red instead. mine's a D4V2 because it was cheap but any that have the 660nm option should work.
81186
Aleks @fuzzyaleks.bsky.social · 09/01/2026
The hell is GhidraLite? Somebody is having fun , wonder what it serves you if you visit from a different OS. Bad google.
010
Reposted by Aleks
Aleks @fuzzyaleks.bsky.social · 22/12/2025
Did anyone get you this air quality monitor as a gift? I wanted to have it log the data, but didn’t quite trust it with internet access. I dug around a bit, got a root shell and untethered it. Read the writeup: blog.29b.net/dispatches/cgs2_decloud
021
Aleks @fuzzyaleks.bsky.social · 01/01/2026
You get a lot of those happy new year email that you ignore , but this one from WHOI is just amazing www.whoi.edu/campaign/why-the-ocean
000
Aleks @fuzzyaleks.bsky.social · 22/12/2025
Did anyone get you this air quality monitor as a gift? I wanted to have it log the data, but didn’t quite trust it with internet access. I dug around a bit, got a root shell and untethered it. Read the writeup: blog.29b.net/dispatches/cgs2_decloud
021
Aleks @fuzzyaleks.bsky.social · 24/11/2025
Attended a darkroom workshop recently. Analog photoshop. Slightly different technique each time to get the desired effect.
020
Aleks @fuzzyaleks.bsky.social · 12/11/2025
Designed slim filters for Fuji GF670 that you can leave on the camera when folded. blog.29b.net/dispatches/gf670_filte…
100
Aleks @fuzzyaleks.bsky.social · 29/09/2025
Sigh, a domain hosting a small website for the last 20 years expired. I've forgotten about it for so long that it actually brought up some fun memories. Cheers to all the folks around it, wherever you are!
000
Aleks @fuzzyaleks.bsky.social · 12/08/2025
Attending USENIX Security for the first timehow do academic conferences work? In Seattle till Sunday.
000
Reposted by Aleks
Marcus @marcusjmerritt.com · 14/07/2025
A Borges story about a guy who gets AI to summarize all the world’s information for him, and then summarize the summary, until the AI has the whole world summarized into a single word. He sits alone at his desk, staring at the word, repeating it endlessly, certain he is experiencing everything
14471041961
Reposted by Aleks
Cisco Talos Intelligence Group @talosintelligence.com · 26/06/2025
Join us for a deep dive into how Cisco Talos uncovered two critical vulnerabilities in the AsIO3.sys driver powering ASUS Armory Crate: blog.talosintelligence.com/decrement-by...
033
Reposted by Aleks
Sy Brand @tartanllama.xyz · 10/06/2025
Building a Debugger is now officially released! It guides you through building a whole native x64 debugger from scratch, dispelling all the magic and teaching you a ton about operating systems as it goes. Even if you don't care about building a debugger, you can read it to your cat.
The book Building a Debugger, featuring a robot designing a complex debugging machine on a drafting boardThe book placed in front of a tortie cat
2437678
Reposted by Aleks
Romain Thomas (@rh0main) @rh0main.bsky.social · 27/05/2025
[Blog Post] New high-level API in LIEF that allows the creation of DWARF files. Additionally, I present two plugins designed to export program information from Ghidra and BinaryNinja into a DWARF file. lief.re/blog/2025-05... (Bonus: DWARF file detailing my reverse engineering work on DroidGuard)
lief.re
DWARF as a Shared Reverse Engineering Format
This blog post introduces a new API in LIEF to create DWARF files
12215
Aleks @fuzzyaleks.bsky.social · 24/05/2025
Sebastião Salgado died, most amazing photographer among other things. Go find and watch “Salt of the Earth” youtu.be/aQ-My45meeo?si=hRPjKaG0zmN…
010
Reposted by Aleks
Clémentine Maurice @bloody-tangerine.bsky.social · 14/05/2025
Haven't seen this on Bluesky yet: S&P 2027 will take place in Montreal, Canada!
22817
Aleks @fuzzyaleks.bsky.social · 07/05/2025
Collaborative reverse engineering is hard not because the tools aren’t right, but because it’s difficult for you to transfer knowledge and insights gained while reverse engineering. Structs and function names are important but connecting the dots is crucial. How do you do this effectively?
000
Aleks @fuzzyaleks.bsky.social · 20/04/2025
Did you know that you can get archived audio lectures from Internet Archive as podcasts in whatever podcatcher you use? Like archive.org/details/the-real-world-…
010
Aleks @fuzzyaleks.bsky.social · 28/03/2025
Utterly disappointing, not at all what i expected by the title! Doesn’t even acknowledge prior works of Discordians! It’s all about SRE and making complex chaotic systems more resilient to failure. With a bunch of first-hand experience from big corps who have their shit together!
010
Aleks @fuzzyaleks.bsky.social · 26/02/2025
Digital vs film X-ray . Film offers higher resolution and better dynamic range with the same settings, but slightly longer exposure time (and more tedious image acquisition). Comes in handy when it comes to tiny electronics. Images of an Abbott Lingo continuous glucose monitor.
021
Aleks @fuzzyaleks.bsky.social · 24/02/2025
Not funny in the least , smh
000
Reposted by Aleks
Quarkslab @quarkslab.bsky.social · 14/02/2025
Unrestrict the restricted mode for USB on iPhone. A first analysis @citizenlab.ca #CVE-2025-24200 👉 blog.quarkslab.com/first-analys...
Lock screen with handwritten notation suggesting to use CVE-2025-24200 to go further
0166
Reposted by Aleks
Carausius @carausius286.bsky.social · 12/02/2025
Crazy day at work and I don’t care that I’ve posted this before; I need cheering up. So here’s a mosaic of a rabbit driving a chariot pulled by ducks. Good day to you all.
112033
Aleks @fuzzyaleks.bsky.social · 11/02/2025
Almost forgot about this. Found a funny bug in CUPS ecosystem, but we wanted to cut developers some slack after all the drama a couple of months ago blog.talosintelligence.com/small-pr…
blog.talosintelligence.com
Small praise for modern compilers - A case of Ubuntu printing vulnerability that wasn’t
During an earlier investigation of the macOS printing subsystem, IPP-USB protocol caught our attention. We decided to take a look at how other operating systems handle the same functionality.
010
Aleks @fuzzyaleks.bsky.social · 25/01/2025
I’m RE early boot code of this device. It has a factory testing/debug mode triggered by holding a button combo while powering it on. I see the code, but don’t have an exact memory map to find the correct button sequence! And there's 12 buttons, too much for brute force...
an image of decompiled C code from a device firmware
010
Aleks @fuzzyaleks.bsky.social · 16/01/2025
youtu.be/A1gxy11d0N0?si=dBt4hjrX5hC… my favorite weather man
010
Aleks @fuzzyaleks.bsky.social · 01/01/2025
Finished Watt’s “Echopraxia” and watched Herzog’s “Theater Of Thought “ in the same day and have a hard time distinguishing which theme about consciousness was covered in which. Recommend both.
010
Aleks @fuzzyaleks.bsky.social · 27/12/2024
I’m a bit of a tall ship nerd and got to see this extraordinary one in Hamburg. Peking is a 4 masted barque. The last of the flying P-liners, immortalized in Irving Johnson’s famed “Around the Cape Horn” film (linked). “The main course sail weights 3 tones when dry. “ youtu.be/gYgl6a-XJ8U?...
000
Aleks @fuzzyaleks.bsky.social · 26/12/2024
Cowboy hat unusual for Hamburg? Clearly you haven’t seen Dennis Hopper in Wim Wenders’ “The American Friend”. Say hi if you see me at #38C3 !
030
Aleks @fuzzyaleks.bsky.social · 24/12/2024
@buherator.bsky.social
110
Aleks @fuzzyaleks.bsky.social · 22/12/2024
Looks like German Port museum is closed these days, but does nobody know if you can at least see Peking from somewhat upclose ? www.shmh.de/ausstellunge...
shmh.de
PEKING – SHMH
000
Aleks @fuzzyaleks.bsky.social · 20/12/2024
Slides are up objectivebythesea.org/v7/talks/OBT...
objectivebythesea.org
001