Hey @bytecodevm (eleven red pandas 🐼🐼🐼🐼🐼🐼🐼🐼🐼🐼🐼), got any spicy bytecode / VM / language implementation / JIT / music

Bagnes, Switzerland
Joined November 2010
eleven red pandas retweeted
Every Mac on macOS 27 now has a free LLM built into the Terminal. No account. No API key. No internet. No token bill. Setup (1 minute): 1. sudo fm license (enter your Mac password, one time) 2. fm available (checks the model is downloaded) 3. fm respond “your question” Works on any Apple Silicon Mac, M1 included. - Pipe files: cat notes.txt | fm respond -i “summarize this” - Get JSON back: build a schema with fm schema object, pass it with --schema - Local API: fm serve gives you an OpenAI-compatible endpoint on localhost - Resume chats: sessions save to ~/.fm/sessions/ The limit is 4,096 tokens per session, and your prompt, instructions, and the answer all share it. So skip code and math. Use it for summarizing, extracting, classifying, and rewriting. Free, private, offline, and already on your Mac.
96
274
29
2,034
207,472
eleven red pandas retweeted
When one is listening to comfortably numb
31
457
50
2,326
61,080
eleven red pandas retweeted
🚨 Critical Okta Access Gateway flaw allows administrators to execute system commands; CVE-2026-115547 The vulnerability affects the Okta Access Gateway Admin Console and carries a CVSS score of 9.1. ⠀ An authenticated administrator can submit specially formatted configuration values to execute commands within the context of the OAG service account. Key details: • Network exploitable • Low attack complexity • Administrative access required • No user interaction required • Affects OAG versions before 2026.10.2 ⠀ Okta has resolved the vulnerability in Access Gateway 2026.10.2. Administrators should manually upgrade affected appliances. Source: trust.okta.com/security-advi…
5
35
10
130
18,375
eleven red pandas retweeted
a trusted intermediate CA just "leaked" (the private key was 4)
99
425
248
7,049
1,517,565
eleven red pandas retweeted
For the next few days or weeks, anyone now has a root CA thanks to eMudhra. Time to have some fun with MiTMing unwilling devices!
48
231
82
2,825
480,573
Clean indirect syscalls on Windows x64. It single-steps a hooked ntdll stub with the CPU trap flag to learn the live System Service Number and the syscall opcode, then jumps to that opcode with different arguments and a spoofed return address. The public proof of concept injects a calc.exe launcher into Notepad. core-jmp.org/2026/10/syscall… #DirectSyscalls #DoomSyscalls #EDR #EDRBypass #ETW #ETWThreatIntelligence #HalosGate #HellsGate #IndirectSyscalls #NTDLL #parametertampering #PEB #PEBWalking #ProcessInjection #returnaddressspoofing #RIPspoofing #ROR13 #si13nt #SilentisVox #SYSCALL #SyscallRevenant #SystemServiceNumber #SysWhispers #TartarusGate #TrapFlag #VectoredExceptionHandler #VEH #WindowsInternals
1
201
eleven red pandas retweeted
Kernel shellcode resources out there: PLATINUMPICK: Windows KernelMode Shellcode Development Framework github.com/winterknife/PLATI… sickle-pdk: payload dev kit with a few ring 0 stubs github.com/wetw0rk/sickle-pd… No real generator exists for modern Windows. Guess we’ll have to build one
13
74
2,415
eleven red pandas retweeted
CVE-2026-81376: VS Code RCE via Security Feature Bypass; $4,000 bounty. Write-up: samchen.blog/blog/vscode-nes…
9
43
3
316
25,125
CVE-2026-23866: Finding a Whatsapp NDay core-jmp.org/2026/10/cve-202… CVE-2026-23866 described incomplete validation of WhatsApp AI-rich Instagram Reel messages that could make another device fetch an arbitrary URL. numb3rs used only the public NVD text, grepped an iOS 25.9.72 IPA for AiRich, and proved a 1-click UIApplication.openURL path. The CVE’s automatic media sink was not reproduced; a 10 October edit points at LaTeX unifiedData image URLs. #AIRich #Android #CVE202623866 #CWE20 #CWE601 #Frida #IDAPro #InputValidation #InstagramReels #iOS #MobileAppSecurity #nday #NdayResearch #numb3rs #protobuf #Swift #WhatsApp #whatsmeow
1
2
195
core-jmp.org/2026/10/followi… STM32F401 Xbox One controller from “we have SWD” to a live CoreSight instruction trace. ETM and TPIU are programmed from OpenOCD, SWO is captured on PB3 with a hobbyist logic analyzer, and Ghidra explains why the first decode dies: the PLL moves the baud rate, then firmware steals the pin for I2C2. #ARM #CoreSight #CortexM #DWT #ETM #FaultInjection #FirmwareAnalysis #FirmwareReverseEngineering #Ghidra #HardwareHacking #ITM #JTAG #logicanalyzer #MatthewAlt #OpenOCD #Pulseview #SerialWireOutput #STM32 #SVD #SWD #SWO #TPIU #VoidStarSecurity #wrongbaud #XboxOne
103
Cisco published CVE-2026-76504, a critical authentication bypass in Catalyst SD-WAN Manager. Landon Rice at VulnCheck showed that a single percent-encoded POST to /%6a_security_check plus a reserved Viptela username mints an admin JSESSIONID, because getRequestURI() does not decode while WildFly does. About 1,500 vManage consoles were internet-exposed; the bug was exploited as a zero-day. core-jmp.org/2026/10/revenge… #ATT&CKT1190 #AuthenticationBypass #Cisco #CiscoCatalystSDWAN #CVE #CVE202676504 #CWE177 #Envoy #getRequestURI #InitialAccess #JAAS #JSESSIONID #LandonRice #RBACBypass #SDWAN #SessionHijacking #URLencoding #Viptela #vManage #VulnCheck #WildFly #ZeroDay
1
89
Dumps WD and Samsung drive firmware, debugs a live HDD over JTAG, hot-patches overlay RAM to stall DMA READ EXT, then watches an Xbox 360 race start firing on unmodified stock firmware. core-jmp.org/2026/10/hdd-fir… #ATA #firmware #FirmwareAnalysis #FirmwareDumping #FirmwareHacking #grimdoomer #HDD #JTAG #LZHUF #Microcode #OpenOCD #overlaymodule #PC3000 #RyanMiceli #Samsung #servicearea #WesternDigital #Xbox360
1
1
4
161
Reverse Engineering a Ledger Nano X Hardware Implant core-jmp.org/2026/10/reverse… Reverse-engineered a real Ledger Nano X hardware implant for HARDWEAR.IO 2026 in Santa Clara. The add-on board does not break the Secure Element: it watches the OLED SPI bus, template-matches BIP-39 glyphs, stores the recovery seed at flash 0x7000, and sends it out over a Luat Air700E LTE modem with a Vodafone NL data eSIM. This article walks the 78-slide talk in source order and adds kitchen-table and operator notes. #ATT&CKT1195 #ATT&CKT1200 #BIP39 #CryptocurrencyThreats #CWE1263 #eSIM #firmware #FirmwareReverseEngineering #hardwareimplant #hardwarewallet #Hardweario #JoeGrand #Kingpin #Ledger #LedgerNanoX #MalwareAnalysis #OLED #SecureElement #SPIBusSniffing #SupplyChainAttack #SupplyChainSecurity
6
217
BeakSec's CVE-2026-107181: Telegram Desktop through 7.2.8 handed clicked links to the running instance over a local socket and never escaped the semicolon that separated commands. A leftover interpret: helper then sent named local files to a chat with no confirmation. One click, three tdata files, account takeover. Fixed in 7.2.9. core-jmp.org/2026/10/telegra… #AccountTakeover #arbitraryfileread #BeakSec #CommandInjection #CVE #CVE2026107181 #CWE77 #CWE862 #IPC #OffensiveSecurity #oneclick #SecurityResearch #SessionHijacking #Telegram #TelegramDesktop #URIHandler #windows #ZDI
138
AnyPwn is a pre-approval remote code execution bug in AnyDesk Linux 8.0.2. The session protocol's mode-5 handler trusts a remote payload length, adds a 16-byte object header with 32-bit arithmetic, wraps to a tiny allocation, and copies attacker bytes using the original huge logical length. The public PoC talks TLS to TCP/7070 and runs an arbitrary command; the same parser is reachable over AnyDesk relays. Fixed in 8.0.3. This is not CVE-2025-27918. core-jmp.org/2026/10/anypwn-… #AnyDesk #HeapBufferOverflow #HeapExploitation #heapgrooming #HeapSpray #IntegerOverflow #Linux #preauth #RCE #remotedesktop #UnauthenticatedRCE #V12
2
210
eleven red pandas retweeted
x86rc/vmp-lazy-unpack 是一款 Windows 下面的模拟脱壳工具,直接模拟进程加载进行脱壳分析,可以把模拟内存中的进程dump,不挂调试器,不走live dump! 简单来讲,你可以认为它是一个脱壳专用的迷你进程虚拟机! 以前的神级技术现在直接开源了! github.com/x86rc/vmp-lazy-un…
7
35
1
312
12,567
eleven red pandas retweeted
Check out our new VMProtect (v3.0 - v3.10 latest) unpacker 👀 More to come…
7
17
1
166
13,848
eleven red pandas retweeted
Windows 这波脸面是真挂不住了。 有人整出一套开源的 PowerShell 脚本,GitHub 上挂着 58K+ 星,图啥都不图,只办一件事:把 Win11 里那批你卸不动、关不了、日日硌应你的破烂,一回收拾利索。 1️⃣ 预装软件、推广插件,成批撵走 2️⃣ 遥测、广告 ID、个性化追踪,悉数掐断 3️⃣ Copilot、Recall、Click to Do 这类 AI 功能,连根薅掉 4️⃣ Bing 网页搜索、Edge 内嵌 AI,统统封掉 5️⃣ 顺带还能把 Win10 的经典右键菜单召回 MIT 开源,白使,不带捆绑,也不偷摸追踪。 最打脸的一点是,微软耗了这么多年,把 Windows 捯饬成广告口、搜索口、AI 口,结果这脚本一行指令下去,它又变回一台老老实实的电脑。 微软前头塞,社区后头删。 🔗 github.com/Raphire/Win11Debl…
40
357
8
2,157
131,342
ГОГ LOL
From a new Laserdisc rip of "Ultimate Teacher" (1988), probably one of the most unlikely Japanese OVA released on VHS in the West at the time.
118