Elektrine lite

← Feed

Zachary Cutlip

zcutlip@hachyderm.io

<p>he/him, feminist</p><p>offensive security researcher specializing in apple things</p><p>reverse engineering, binary formats, debuggers, &amp; hex editors are my jam</p><p>creator of pyonepassword, a <a href="https://hachyderm.io/tags/python" class="mention hashtag" rel="tag">#<span>python</span></a> library for interacting with 1Password: <a href="https://github.com/zcutlip/pyonepassword" target="_blank" rel="nofollow noopener" translate="no"><span class="invisible">https://</span><span class="ellipsis">github.com/zcutlip/pyonepasswo</span><span class="invisible">rd</span></a></p><p>creator of the <a href="https://hachyderm.io/tags/StarWars" class="mention hashtag" rel="tag">#<span>StarWars</span></a> planets bot, <span class="h-card" translate="no"><a href="https://holonet.imperialba.s

Posts

  • Post #4388968

    The #Apple Platform Security Guide was updated yesterday (2026-08-03). Mostly a bunch of editing (oddly, changing &quot;must&quot; to &quot;needs to&quot; everywhere). But there are four new sections: ⁃ Terminal and script protections ⁃ Search on iCloud[.]com security ⁃ SharePlay security ⁃ Nearby sharing security The terminal and script protections is especially interesting: ⁃ Terminal paste protection ⁃ Pasteboard command blocking ⁃ Applescript scanning(!) Here&#39;s a diff: https://codebe...

  • Post #4056583

    When I was in security engineering at Apple (2014-2018), the idea of a “wipe device” panic button or tripwire (there were lots of variations on the theme) came up from time to time. Every time, we would soberly consider it and discuss it. Every time where we came down was: this is a good idea on paper, but having a “fuck the police” feature on your phone is an extremely white privileged concept. It is WAY WORSE for far more people than it is good for. For a great many people, if they hand LE a...

  • Post #3757446

    My most exciting use cases and successes involving generative AI are exactly this. They aren’t about “generating text.” They involve gaining insights I *never* would have had otherwise.

  • Post #3757445

    Rewatching She Hulk with my wife. This is such a cute show. Really a shame it got cancelled.

  • Post #3757444

    I was curious if OpenOffice was even still a thing. Turns out…sort of but not really? There&amp;#39;s a homebrew cask for it that&amp;#39;s deprecated. It doesn&amp;#39;t pass gatekeeper (probably not notarized, maybe not even signed, not sure). Also there&amp;#39;s only an Intel build so it requires Rosetta 2, 6 years after the release of Apple Silicon I&amp;#39;ve long felt that the Apache Foundation is the internet&amp;#39;s dumpster for open source software no one wants to maintain.

  • Post #3757443

    RE: https://infosec.exchange/@adamshostack/116892468602075537 C+C will always be the music factory. Fight me

  • Post #3757442

    Everyone on the 14th floor knows what floor they’re really on. No one is fooled.

  • Post #3757441

    Neoclouds like #CoreWeave are like the rug that the (US-specific[1]) AI industry, such as Nvidia, Microsoft, Meta, etc. are sweeping massive debt and risk under. The circular financing is literally keeping that debt and risk off the hyperscalers’ books. It’s like money laundering, except it’s…debt/risk laundering? Idk When this economic Jenga tower collapses, CoreWeave will be at the epicenter [1] China is pursuing a totally different strategy and this is completely underreported in the US....

  • Post #2846379

    RE: https://flipboard.social/@newsguyusa/116603987281751751 As deeply unpopular as Trump is, that he can unseat someone as popular as Massie in the primaries is a sign of how fucked up our primary/general election process is. Total wackos pick the party candidates in the primaries, and normies who don’t eat and breathe party politics get stuck with those choices in the general election.

  • Post #2846377

    RE: https://infosec.exchange/@mahaloz/116608017040137728 cc @cxiao

  • Post #2846376

    RE: https://infosec.exchange/@ryanc/116628098851548138 Spread this far and wide. But let’s spread farther^1 and wider that a better way of disabling the Google crap is to use @kagihq. Not only does the AI stay away from your search unless you ask for it, you also get better search than you’ve had in years, if ever. We’re talking Google circa ‘05-‘15 good. Spread the news! ^1 I thought and read (and searched with Kagi) about farther vs further and have decided it’s b.s. that we have these two...

  • Post #2846375

    RE: https://chaos.social/@Natanox/116630882386828954 lol I had a 3dfx card before nvidia ever *made* a gpu. I believe Voodoo cards were the first 3D graphics accelerators as we think of them today, at least for PCs[1]. I seem to recall that *maybe* nvidia coined the term GPU? I know they weren’t called that at the start. [1] #SiliconGraphics was doing fancy stuff way before PCs of course

  • Post #2846374

    Getting people to try new things is incredibly hard, even when the old thing sucks and they hate it. No one I’ve managed to convince to *try* @kagihq has switched back after trying it out. Not one person. That’s insane. The hard part is getting people to try it even once, EVEN AFTER THEY’VE SAID THEY HATE GOOGLE. Like…so many people I know *hate* what it has become, but they’d rather keep using Google than try out something new *one week*. ¯\_(ツ)_/¯

  • Post #2846373

    I had a chat with the Kagi assistant about “further” vs “farther” and I’ve decided the English language is bullshit https://kagi.com/assistant/e598b7ed-5cab-49f2-a6a0-28a77f6bd6b2

  • Post #2846372

    Evidently you can now do searches on Kagi.com without being logged in. Has this always been true? I thought in the past you still had to create an account so they could limit the number of free searches. Presumably this is still restricted via cookies and possibly other checks.

  • Post #977002

    This was probably my favorite episode of #TheDaily I’ve listened to in a while. So human https://overcast.fm/+ABLPtshQ1YQ

  • Post #977001

    It’s a rare evening in #Oakland we can sit outside in whatever we’re wearing. Even on the really uncommon warm day

  • Post #977000

    Be sure to check out @kagihq in a desktop browser today. I miss this kind of silliness

  • Post #976999

    RE: https://hachyderm.io/@zcutlip/116329886881635126 This takes me back the the era of Really Good April 1 Internet Gags™ like the OMG Ponies! Slashdot https://kagi.com/images?q=omg+ponies+slashdot&amp;amp;r=us&amp;amp;sh=SyBjxOeklT57t_WPUh-iDQ

  • Post #976998

    A word from Editor Moonshark about Artemis II - Ars Technica https://arstechnica.com/staff/2026/04/a-word-from-editor-moonshark-about-artemis-ii/

  • Post #976997

    RE: https://chaos.social/@icing/116345255280705894 Going back to the LKML post from earlier this week, for many projects, these tools are surfacing bugs much faster than human contributors can create bugs; so this should taper off for those projects But also, you can count on token price rising substantially at some point as these companies try to become profitable. So at that point, I’d also expect a taper in bug reports

  • Post #976996

    RE: https://mastodon.social/@babadookspinoza/116347907069027578 There are replicas of this hanging in the halls in the buildings on many NSA campuses

  • Post #976995

    Our friends shared #Passover with us. It was really special for them to share something so meaningful.

  • Post #976994

    RE: https://flipboard.social/@newsguyusa/116352735430273128 More than half of Americans voted for this man to be our president

  • Post #976993

    A couple of #OpenCode things to share...first is `opencode-docs`, that I adapted from the excellent `claude-code-docs`. It gives you a `/docs` command that makes OpenCode documentation available right in the opencode user interface https://codeberg.org/zcutlip/opencode-docs

  • Post #976992

    The other #OpenCode thing is I had the coding assistant do a comparative analysis between their #privacy policy and that of #OpenRouter, both of which I use quite a lot. I asked: For each one, summarize things that are better than expected, more worrisome than expected, and then give me a side-by-comparison of each. They each have interesting privacy angles, with zero data retention options. They also represent a really cool way to try out a rotating set of open-weights models. And they have t...

  • Post #976991

    RE: https://hachyderm.io/@inthehands/116354584533790070 “We are the ones we’ve been waiting for.”

  • Post #798437

    Our accountant asks clients to name all supporting tax documents according to their preferred naming convention. I&amp;#39;m happy to do that, but it _is_ a bit tedious So naturally, I used generative AI to convert their Word document to a Markdown-formatted specification, then vibe-coded a tool to do the renaming. Here it is on #codeberg https://codeberg.org/zcutlip/tax-doc-renamer #Python

  • Post #798436

    Speaking of things related to #Git and PDFs, TIL pre-commit has a virtual &amp;quot;fail&amp;quot; language, you can use to block certain file patterns from being committed. .gitignore is important for this, but could accidentally get changed. This is a useful extra check to make sure you don&amp;#39;t add something sensitive to version control https://pre-commit.com/#fail

  • Post #798435

    I&amp;#39;d been wanting to kick the tires on #Codeberg for a while, and I wanted to post the source code for my @StarWarsPlanets bot, so that seemed like a good first project to publish there. I&amp;#39;ve spent a couple of months getting the source cleaned up and presentable. May I present to you... the Star Wars Planets Mastodon bot \o/ https://codeberg.org/zcutlip/sw-planets-mastodon #StarWars #StarWarsPlanets