Sign in

Aleks

@fuzzyaleks.bsky.social
99 followers 193 following 75 posts

Fuzzy as in logic

PostsRepliesMedia
Aleks @fuzzyaleks.bsky.social · 04/10/2026
Janky prototype but it mostly works.
110
Aleks @fuzzyaleks.bsky.social · 03/10/2026
A while back at AHA i talked about maritime communications. That’s a lot of antennas even on a low tech ship. There’s even a few more on the fore-mast behind me.
000
Aleks @fuzzyaleks.bsky.social · 29/09/2026
Original post: infosec.exchange/@fbz/1173545...
this is the back of one of my new Mandelbrot knit sweaters https://knityak.com/collections/antenna-crown in shades of blue. these ship with the code in Python to generate your specific spot on the Mandelbrot fractal with these same four colors and dithering. these are made with a new on demand manufacturer and are pixel native from my code: one pixel equals one knit stitch.
#math #knit #computationallyfabulous #fractal #mathart #algorithmicart
000
Aleks @fuzzyaleks.bsky.social · 28/09/2026
Bicycles are the dominant species there, watch out! Also, you’ll be too close to some cryptographers, don’t relapse! Cool atmosphere, though ( got up early for this one).
011
Aleks @fuzzyaleks.bsky.social · 26/09/2026
You bet it’s an stm32 clone!
021
Aleks @fuzzyaleks.bsky.social · 22/09/2026
Remember how, about 20 years ago, Intel used to just ship you, for free, all volumes of x86 instruction manual? Like, actual printed books. Why did they do that? Must have cost a small fortune! I still have mine somewhere!
010
Aleks @fuzzyaleks.bsky.social · 21/09/2026
Working on something interesting for Sony E-mount.
000
Reposted by Aleks
Cøry @cory.so · 20/09/2026
Hey Mom, look! I’m on WIRED. :)
012
Aleks @fuzzyaleks.bsky.social · 13/09/2026
Besides vulnerability research, we did some fun networking stuff. Martin was having fun with UPnP and i thought we might expand that to IPv6. We tricked some dual homed devices to reach back to us via IPv6 by talking UPnP to them via IPv4. Should try this again. blog.29b.net/talos_archiv...
000
Aleks @fuzzyaleks.bsky.social · 11/09/2026
December 2019 I started digging into Zoom. And then Zoom became kinda important. Never got to publish most of the work, it was hell of a fun time to have a custom implementation zoom client that would let you send fake/malformed stanzas. blog.29b.net/talos_archiv...
001
Aleks @fuzzyaleks.bsky.social · 10/09/2026
So many vulnerabilities! And almost all were just reported and got patched. But for a few, we did get to have some fun. Nicely exploitable RCEs in Memcached, we made a safe vulnerability test and scanned the whole Internet repeatedly to measure adoption rates: blog.29b.net/talos_archiv...
000
Aleks @fuzzyaleks.bsky.social · 10/09/2026
Original post: mastodon.social/@zenofex/117...
Curiosity got the best of me, so I reverse engineered the latest Plex Media Server security patches and put together PoCs for each patched issue including a few n-day RCEs.

https://github.com/Zenofex/Plex_Vuln_PoCs

Unfortunately, there doesn’t appear to be CVEs assigned to these yet.

Enjoy!
000
Aleks @fuzzyaleks.bsky.social · 10/09/2026
At some point i wrote this PDF JavaScript fuzzer that did pretty well. Kept finding bugs for a few years with minimal maintenance. Had a stable equilibrium. Just enough fuzzing nodes that i could keep up with triaging new vulns as a side project. Version of it is still going, i believe.
000
Aleks @fuzzyaleks.bsky.social · 10/09/2026
A point of pride of the vulnerability research team were our advisories containing detailed root cause analysis. I’m sure it enriched LLMs training dataset of nothing else: blog.29b.net/talos_archiv...
100
Aleks @fuzzyaleks.bsky.social · 10/09/2026
I’ve made a somewhat complete archive of my publications while at @talosintelligence.com . With web archive links and copies where appropriate so it survives CMS changes. blog.29b.net/talos_archiv...
100
Reposted by Aleks
Dean Pierce @deanpierce.net · 07/09/2026
Yay I did a thing. occupy-x.com will redirect any requests to one of the known functional nitter instances currently online. Edit the URL to add "occupy-" in front and you should be good to go.
occupy-x.com
occupy-x: Read X through Nitter
One link. A rotating list of public Nitter instances. Open X profiles and posts through Nitter, with your path preserved.
161
Aleks @fuzzyaleks.bsky.social · 05/09/2026
It lacks BLE support out of the box, required for provisioning, but there's a simple workaround: join a temporary network, then pair with Apple Home. Deployment details here: github.com/ea/cgs2_decl...
github.com
cgs2_decloud/DEPLOY.md at main · ea/cgs2_decloud
A guide to untether an air quality monitor from it's cloud - ea/cgs2_decloud
000
Aleks @fuzzyaleks.bsky.social · 05/09/2026
Previously, I got root on this device. Currently, I added Matter support to it making it instantly available in Apple Home, Google Home, Home Assistant, or any other Matter hub: blog.29b.net/dispatches/c...
blog.29b.net
QingPing CGS2 - Now with Matter support
100
Aleks @fuzzyaleks.bsky.social · 31/08/2026
That moment of panic when you temporarily lose muscle memory for a password that you otherwise know by heart and don’t have in password manager… ugh.
000
Aleks @fuzzyaleks.bsky.social · 16/08/2026
Who’s gonna do a Hunter S Thompson style reportage about AI buildout like @nealstephenson.bsky.social did about undersea cables 30 years ago in “Mother Earth Mother Board” www.wired.com/1996/12/ffgl...
000
Aleks @fuzzyaleks.bsky.social · 07/08/2026
There’s this very bizarre form of Yugo-nostalgia going on right now in Portland. A weird mini-festival of Yugo films. I’m really puzzled, but why not?
000
Aleks @fuzzyaleks.bsky.social · 01/08/2026
Original post: infosec.exchange/@nasko/11701...
The way we are handling the vulnpocalypse in Chromium is described in https://blog.google/security/chrome-stronger-with-every-update/. It has been an eye opening journey with no clear end in sight.
000
Aleks @fuzzyaleks.bsky.social · 23/07/2026
I’m doing a small talk at #teardown2026 this saturday about some past projects of mine www.crowdsupply.com/teardown/por...
020
Aleks @fuzzyaleks.bsky.social · 14/07/2026
Picked up the cookbook (Dishoom) shortly before starting the novel (Midnight Children) without realizing Mumbai is central to both. House smells amazing. I used to pair music to books but from now on I’m always pairing my cooking.
010
Reposted by Aleks
walking mirage @wolf.observer · 19/06/2026
to get ahold of one, you have to order a light with 660nm photo red emitters from intl-outdoor.com, then email hank with your order number and tell him you want 720nm far red instead. mine's a D4V2 because it was cheap but any that have the 660nm option should work.
81186
Aleks @fuzzyaleks.bsky.social · 09/01/2026
The hell is GhidraLite? Somebody is having fun , wonder what it serves you if you visit from a different OS. Bad google.
010
Reposted by Aleks
Aleks @fuzzyaleks.bsky.social · 22/12/2025
Did anyone get you this air quality monitor as a gift? I wanted to have it log the data, but didn’t quite trust it with internet access. I dug around a bit, got a root shell and untethered it. Read the writeup: blog.29b.net/dispatches/cgs2_decloud
021
Aleks @fuzzyaleks.bsky.social · 01/01/2026
You get a lot of those happy new year email that you ignore , but this one from WHOI is just amazing www.whoi.edu/campaign/why-the-ocean
000
Aleks @fuzzyaleks.bsky.social · 22/12/2025
Did anyone get you this air quality monitor as a gift? I wanted to have it log the data, but didn’t quite trust it with internet access. I dug around a bit, got a root shell and untethered it. Read the writeup: blog.29b.net/dispatches/cgs2_decloud
021
Aleks @fuzzyaleks.bsky.social · 24/11/2025
Attended a darkroom workshop recently. Analog photoshop. Slightly different technique each time to get the desired effect.
020
Aleks @fuzzyaleks.bsky.social · 20/11/2025
Have you seen the sizes of their cars? A tiny duck isn’t going to impress anybody!
100
Aleks @fuzzyaleks.bsky.social · 12/11/2025
It’s a somewhat rare medium format film camera that is compact but a bit clunky to use due to its folding design. One of the side effects is that it is difficult to use regular filters so I made slim ones that snap in.
000
Aleks @fuzzyaleks.bsky.social · 12/11/2025
Designed slim filters for Fuji GF670 that you can leave on the camera when folded. blog.29b.net/dispatches/gf670_filte…
100
Aleks @fuzzyaleks.bsky.social · 25/10/2025
Must have a lot of hard drives/SSDs too!
110
Aleks @fuzzyaleks.bsky.social · 29/09/2025
Sigh, a domain hosting a small website for the last 20 years expired. I've forgotten about it for so long that it actually brought up some fun memories. Cheers to all the folks around it, wherever you are!
000
Aleks @fuzzyaleks.bsky.social · 12/08/2025
Attending USENIX Security for the first timehow do academic conferences work? In Seattle till Sunday.
000
Aleks @fuzzyaleks.bsky.social · 15/07/2025
Wong Kar-wai’s movies always keep me completely enthralled while watching them and then afterwards i can never remember the plot for some reason. I’m just soaking up the atmosphere. But this one stuck, plot and atmosphere.
010
Reposted by Aleks
Marcus @marcusjmerritt.com · 14/07/2025
A Borges story about a guy who gets AI to summarize all the world’s information for him, and then summarize the summary, until the AI has the whole world summarized into a single word. He sits alone at his desk, staring at the word, repeating it endlessly, certain he is experiencing everything
14471011961
Reposted by Aleks
Cisco Talos Intelligence Group @talosintelligence.com · 26/06/2025
Join us for a deep dive into how Cisco Talos uncovered two critical vulnerabilities in the AsIO3.sys driver powering ASUS Armory Crate: blog.talosintelligence.com/decrement-by...
033
Reposted by Aleks
Sy Brand @tartanllama.xyz · 10/06/2025
Building a Debugger is now officially released! It guides you through building a whole native x64 debugger from scratch, dispelling all the magic and teaching you a ton about operating systems as it goes. Even if you don't care about building a debugger, you can read it to your cat.
The book Building a Debugger, featuring a robot designing a complex debugging machine on a drafting boardThe book placed in front of a tortie cat
2437678
Reposted by Aleks
Romain Thomas (@rh0main) @rh0main.bsky.social · 27/05/2025
[Blog Post] New high-level API in LIEF that allows the creation of DWARF files. Additionally, I present two plugins designed to export program information from Ghidra and BinaryNinja into a DWARF file. lief.re/blog/2025-05... (Bonus: DWARF file detailing my reverse engineering work on DroidGuard)
lief.re
DWARF as a Shared Reverse Engineering Format
This blog post introduces a new API in LIEF to create DWARF files
12215
Aleks @fuzzyaleks.bsky.social · 24/05/2025
Sebastião Salgado died, most amazing photographer among other things. Go find and watch “Salt of the Earth” youtu.be/aQ-My45meeo?si=hRPjKaG0zmN…
010
Reposted by Aleks
Clémentine Maurice @bloody-tangerine.bsky.social · 14/05/2025
Haven't seen this on Bluesky yet: S&P 2027 will take place in Montreal, Canada!
22817
Aleks @fuzzyaleks.bsky.social · 07/05/2025
Collaborative reverse engineering is hard not because the tools aren’t right, but because it’s difficult for you to transfer knowledge and insights gained while reverse engineering. Structs and function names are important but connecting the dots is crucial. How do you do this effectively?
000
Aleks @fuzzyaleks.bsky.social · 20/04/2025
Did you know that you can get archived audio lectures from Internet Archive as podcasts in whatever podcatcher you use? Like archive.org/details/the-real-world-…
010
Aleks @fuzzyaleks.bsky.social · 28/03/2025
Utterly disappointing, not at all what i expected by the title! Doesn’t even acknowledge prior works of Discordians! It’s all about SRE and making complex chaotic systems more resilient to failure. With a bunch of first-hand experience from big corps who have their shit together!
010
Aleks @fuzzyaleks.bsky.social · 28/02/2025
Star Of India!
010
Aleks @fuzzyaleks.bsky.social · 26/02/2025
Digital vs film X-ray . Film offers higher resolution and better dynamic range with the same settings, but slightly longer exposure time (and more tedious image acquisition). Comes in handy when it comes to tiny electronics. Images of an Abbott Lingo continuous glucose monitor.
021
Aleks @fuzzyaleks.bsky.social · 24/02/2025
Not funny in the least , smh
000
Aleks @fuzzyaleks.bsky.social · 20/02/2025
Main question when that happens is how big is your scrollback buffer.
010