@dascandy@infosec.exchange

Peter Bindels @dascandy@infosec.exchange · Jul 28, 2026

Replying to @uecker@mastodon.social

@uecker@mastodon.social Good luck. Let us know how you get past the startup screen and how you install anything.

0

1

0

Peter Bindels @dascandy@infosec.exchange · Jul 25, 2026

Replying to @ChrisMayLA6@mastodon.me.uk

@ChrisMayLA6@mastodon.me.uk small flat might only be half a million...

1

0

Peter Bindels @dascandy@infosec.exchange · Jul 25, 2026

Replying to @ChrisMayLA6@mastodon.me.uk

@ChrisMayLA6@mastodon.me.uk No idea where that NL data is from but iirc it is between 10 and 13 - ie, two people with modal salary cannot afford a house.

0

1

0

Peter Bindels @dascandy@infosec.exchange · Jul 20, 2026

Replying to @vitaut@mastodon.social

@vitaut@mastodon.social most of my small libs are marked as mostly Cmake

2

1

0

Peter Bindels @dascandy@infosec.exchange · Jul 20, 2026

Replying to @bert_hubert@eupolicy.social

@bert_hubert@eupolicy.social Can't wait for the Taliban to take down some .com's too.

0

Peter Bindels @dascandy@infosec.exchange · Jul 19, 2026

Replying to @bascule@mas.to

@bascule@mas.to Ah, the declaration wrt the ICC was just a hidden announcement of plans to commit war crimes.

0

Peter Bindels @dascandy@infosec.exchange · Jul 18, 2026

Replying to @PeterSommerlad@mastodon.social

@PeterSommerlad@mastodon.social Did you talk to Phil Nash yet? He was looking into it a few months ago.

0

1

0

Peter Bindels @dascandy@infosec.exchange · Jul 18, 2026

Replying to @whitequark@social.treehouse.systems

@whitequark@social.treehouse.systems why can we not write that as 2e-16f ? IE, 2^-16 ?

0

Peter Bindels @dascandy@infosec.exchange · Jul 18, 2026

I must not AI. AI is the mind-killer. AI is the little-death that brings total obliteration. I will face my AI. I will permit it to pass over me and through me. And when it has gone past, I will turn the inner eye to see its path. Where the AI has gone there will be nothing. Only I will remain.

4

0

5

0

Peter Bindels @dascandy@infosec.exchange · Jul 16, 2026

Replying to @leeloo@c.im

@leeloo@c.im @0xabad1dea@infosec.exchange 🖐 + zwj + 😐, now go ask your font designer why they don't support it.

0

Peter Bindels @dascandy@infosec.exchange · Jul 15, 2026

Replying to @mhoye@cosocial.ca

@mhoye@cosocial.ca I'm remembering Doh from Arkanoid?

0

Peter Bindels @dascandy@infosec.exchange · Jul 09, 2026

Replying to @whitequark@social.treehouse.systems

@whitequark@social.treehouse.systems fair point

1

0

Peter Bindels @dascandy@infosec.exchange · Jul 09, 2026

Replying to @whitequark@social.treehouse.systems

@whitequark@social.treehouse.systems But why?

0

3

0

Peter Bindels @dascandy@infosec.exchange · Jul 07, 2026

Replying to @tante@tldr.nettime.org

@tante@tldr.nettime.org somebody buy slophub.com and redirect it to github

0

1

0

Peter Bindels @dascandy@infosec.exchange · Jul 04, 2026

Replying to @filmroellchen@fedi.cuties.zip

re: balkonkraftwerkposting Hover or focus to reveal Sensitive

@filmroellchen@fedi.cuties.zip 0.5 - that's literally required knowledge for math in my kids' class.

0

Peter Bindels @dascandy@infosec.exchange · Jun 30, 2026

Replying to @redbullracing@sportsbots.xyz

@redbullracing@sportsbots.xyz Can we uninstall Oracle and get back to winning?

0

Peter Bindels @dascandy@infosec.exchange · Jun 07, 2026

Replying to @Gina@fosstodon.org

@Gina@fosstodon.org @wiert@mastodon.social There was no captcha shown at any time whatsoever, just a message "recaptcha failed". I did inform them they lost a customer.

5

0

1

0

Peter Bindels @dascandy@infosec.exchange · Jun 07, 2026

Replying to @Gina@fosstodon.org

@Gina@fosstodon.org @wiert@mastodon.social I have had two stores fail on invisible recaptcha already. Right now they lose some customers, but soon I will lose all ability to buy anything or having to get a new Google tether. Seems relevant.

6

5

1

0

Peter Bindels @dascandy@infosec.exchange · May 07, 2026

Boosted by

AssertionError("Joe Groff") @joe@f.duriansoftware.com

Replying to @joe@f.duriansoftware.com

@joe@f.duriansoftware.com programming language where std::move(x) means it can be moved from (but isn't already), and std::move(begin, end, out) means something is actively being moved

5

1

2

0

Peter Bindels @dascandy@infosec.exchange · May 05, 2026

Replying to @jeffowski@mastodon.world

@jeffowski Can you make a comparable infographic of area needed versus amount of food?

1

0

Peter Bindels @dascandy@infosec.exchange · May 05, 2026

Replying to @jpmens@mastodon.social

@jpmens is there still a RSA cert in the default cert store with e=3 ?

0

Peter Bindels @dascandy@infosec.exchange · May 04, 2026

Replying to @rollbear@fosstodon.org

@rollbear@fosstodon.org @glloyd@fosstodon.org It likely does more useful than the attempt I once made to measure MCC coverage within the unit tests themselves, to find a set of unit tests that would get the same coverage but with less tests to run. I got it to work. It's a terrible idea. It'll tell you that your fourier transform tests can be replaced with a single test of zero bytes being put in, since that gives the same coverage.

0

Peter Bindels @dascandy@infosec.exchange · May 04, 2026

Replying to @rollbear@fosstodon.org

@rollbear@fosstodon.org No amount of coverage can show your tests are any good

0

2

0

Peter Bindels @dascandy@infosec.exchange · Apr 24, 2026

Replying to @fesshole@mastodon.social

@fesshole@mastodon.social I just finished Theme Hospital for the first time today.

0

Peter Bindels @dascandy@infosec.exchange · Apr 22, 2026

Replying to @alda@topspicy.social

@alda It recently auto-dubbed Barbara's Rabarberbar into English for me. Auto-dubbing people speaking is horrendous, but auto-dubbing a literal song is even worse.

7

1

2

0

Peter Bindels @dascandy@infosec.exchange · Apr 21, 2026

Replying to @bagder@mastodon.social

@bagder@mastodon.social If only they used more AI - 271 is child's play compared to what those AI could do.

2

0

Peter Bindels @dascandy@infosec.exchange · Apr 17, 2026

Replying to @ChrisMayLA6@zirk.us

@ChrisMayLA6 Good thing you saved up all that money that'd have gone to the EU.

2

0

Peter Bindels @dascandy@infosec.exchange · Apr 16, 2026

Replying to @malwareminigun@infosec.exchange

@malwareminigun Theoretically the .so model works fine and never needs string compares. It would only need it if you have a type in more than one so (or exe), that is hidden in at least one of them, that needs to be same-ish across the two. So just a user failure in linking. That does happen *extremely often* however, and is often the reason why people end up with doubletons - singletons that guarantee one instance per SO in which they're hidden, plus one for the rest. I've tried explaining dynamic linking often enough to give up on trying to fix that problem. First time I can remember explaining this is 2007 - and it's still a problem.

2

1

0

Peter Bindels @dascandy@infosec.exchange · Apr 16, 2026

Replying to @malwareminigun@infosec.exchange

@malwareminigun @david_chisnall @whitequark MSVC's approach is because of COM compatibility, right? I looked at it once a long time ago and ran away screaming.

2

3

0

Peter Bindels @dascandy@infosec.exchange · Apr 16, 2026

Replying to @lina@vt.social

@lina To be fair, in most cases it saw that question being asked it was rhetorical, because of the app being suspect and a writeup happening because of it. So if it's going to generate believable continuation of your prompt, that's likely what you'd be writing next. Except that it's got a very obvious bias for the things you'd publish, as opposed to those that get written and not publicly distributed as much because they're boring.

3

0

Peter Bindels @dascandy@infosec.exchange · Apr 09, 2026

Replying to @evacide@hachyderm.io

@evacide@hachyderm.io dang, if only I knew that would be a usable legal defense, I'd have sold so many zero days...

3

0

1

0

Peter Bindels @dascandy@infosec.exchange · Apr 09, 2026

Replying to @pee@mastodon.online

@pee @josephcox Yes, but only insofar as they have centralized push notification centers, and only if those push messages actually contain the data, and not encrypted or by reference.

1

0

Peter Bindels @dascandy@infosec.exchange · Apr 05, 2026

I need a meme of somebody converting a bridge (the kind that cars drive on that's 7 lanes wide or so) to 100% go just in one direction, marked as a "full bridge rectifier".

2

0

Peter Bindels @dascandy@infosec.exchange · Apr 03, 2026

Replying to @ns_online@trains-official.eu

@ns_online that's not just an ICR that's an ICR pulled by a Traxx.

1

0

Peter Bindels @dascandy@infosec.exchange · Mar 21, 2026

What is the most hairy x86 opcode you know? Best I could think of was some rex prefixed sib indexing thing. I got add with sib for flag meddling, and idiv for register load/unload shenanigans.

1

0

Peter Bindels @dascandy@infosec.exchange · Mar 20, 2026

Replying to @odd@mstdn.social

@odd @SylvieLorxu Not to mention the decade long backlog of websites saying "if somebody tells you to activate developer mode to install software they're being dishonest" because that used to be true, and you'll have people and LLMs giving bad advice in that regard for the next decade at least.

2

1

0

Peter Bindels @dascandy@infosec.exchange · Mar 15, 2026

Replying to @sarahtaber@mastodon.online

@sarahtaber@mastodon.online last I heard fertilizer was a booming industry.

2

0

2

0

Peter Bindels @dascandy@infosec.exchange · Mar 14, 2026

Yeastie Boys - No Sleep Til Baking

3

0

Peter Bindels @dascandy@infosec.exchange · Mar 09, 2026

Replying to @codemonkeymike__dup_4496@fosstodon.org

@codemonkeymike@fosstodon.org @cinimodev@masto.ctms.me An *expired* operating system? Since when does that exist?

0

Peter Bindels @dascandy@infosec.exchange · Mar 04, 2026

Replying to @david_chisnall__dup_6636@infosec.exchange

@david_chisnall@infosec.exchange > And why is writing a formal specification believed to be easier than writing code? Code is just whatever format it takes to specify for a computer what it should do, in an unambiguous way. We simplify the code by making nonsensical things inexpressible. If a formal specification was easier enough to write, then that would *be* the code. Plus some synthesis tool to convert it to an executable.

4

0

1

0

Peter Bindels @dascandy@infosec.exchange · Mar 03, 2026

Replying to @Mara@hachyderm.io

@Mara me: Trashwebsite1! website: Extremely strong password, excellent!

8

0

Peter Bindels @dascandy@infosec.exchange · Mar 01, 2026

Replying to @mwk@donotsta.re

@mwk@donotsta.re it also removes the satisfaction from a ctcp ping +++ATH\r\n

2

0

Peter Bindels @dascandy@infosec.exchange · Feb 25, 2026

Replying to @Codeberg@social.anoxinon.de

@Codeberg@social.anoxinon.de For slogan, how about "The home of freedom" ?

0

Peter Bindels @dascandy@infosec.exchange · Feb 25, 2026

Replying to @georgetakei@universeodon.com

@georgetakei@universeodon.com The US *IS* learning lessons from the rise of Nazis in Germany. Just not the ones you expected.

0

2

0

Peter Bindels @dascandy@infosec.exchange · Feb 16, 2026

Replying to @brauner@mastodon.social

@cyphar @brauner I tried to first canonicalize the path (resolve symlinks, remove ./ and ../) and then check if the resulting path is still a subpath of the target root. I can see a few ways it differs from these two, but I don't know if those are security issues?

0

2

0

Peter Bindels @dascandy@infosec.exchange · Feb 16, 2026

Replying to @brauner@mastodon.social

@brauner what is the colloquially correct way? I have one but would love to hear from others that have done this before.

0

4

0

Peter Bindels @dascandy@infosec.exchange · Feb 14, 2026

Replying to @gsuberland@chaos.social

@bitchboss @ryanc @gsuberland we even got low ones for di, si, bp and sp... which means you cannot mov ah, bpl...

2

0

Peter Bindels @dascandy@infosec.exchange · Feb 14, 2026

Replying to @bitchboss@marcella.masto.host

@ryanc @bitchboss you forgot ah, al, ch, cl, dh, dl, bh, bl, dil, sil, spl and bpl. And of course r8l, r8w etc.

1

3

0

Peter Bindels @dascandy@infosec.exchange · Feb 05, 2026

Replying to @mattblaze@federate.social

@mattblaze@federate.social https://www.theguardian.com/us-news/2026/feb/04/steve-bannon-ice-immigration-agents-polling-sites-midterm-elections Surprising.

0

Peter Bindels @dascandy@infosec.exchange · Feb 03, 2026

Replying to @mattblaze@federate.social

@mattblaze@federate.social Trump can deploy ICE to drive around and pick up anyone "looking suspiciously like foreigner" in all counties that historically vote democratic. Doesn't matter if they're really foreigners, just having ICE driving around and potentially arresting you is enough to suppress voters.

0

1

0

Peter Bindels

Posts

Remote instance