You have something cool to share? Don't forget the CFP for Phrack's 40th anniversary!

So true! OLS=ordinary least squares, MLE=Maximum likelihood estimator.

Would you look at that, it's tmp.0ut Volume 4! Happy Friday, hope you enjoy this latest issue! tmpout.sh/4/

I wrote a blog post about a linux toy rootkit: hkopp.github.io/2025/04/an-ld_…

Yes, we're beating a dead horse. But that horse still runs in corporate networks - and quietly gives attackers the keys to the kingdom. We're publishing what’s long been exploitable. Time to talk about it. #DSM #Ivanti code-white.com/blog/ivanti-de…

Lost count on how often we achieved full domain compromise through DSM, but double digit for sure. This product ist extremely hard to configure and leaves a large attack surface even if configured correctly. If in use, make sure to read the blog and follow the recommendations! ☝️

An NYU professor AI-proofed his assignments. The students complained they were too hard and that “he was interfering with their ‘learning styles.’”

State of Statecraft (SOS) is a new security and intelligence conference purposed to bring together observers of espionage, sabotage, influence, and other unique forms of covert statecraft to share their work with a community hyper-focused on tackling state-sponsored ops.

This is Ocho. Ocho lives in my bathroom and hangs out on my orchid plant. Every day I soak a Q-Tip in water and put it down for him wherever he is (on the plant or behind the toilet or on the vanity) and he comes running over and gets a drink. Was my first reaction to smash him?

The Path of a Packet Through the Linux Kernel net.in.tum.de/fileadmin/TUM/…

nasm.re/posts/cryptode…

Hackers got DOOM running on a copy of Michel Foucault's 'Discipline and Punish'

whatever bfswa.substack.com/p/im-so-tired

Marathon finishing time distribution proves one of my biggest leadership lessons: Deadlines work! … even if they are somewhat arbitrary

CTF in 2026

I spent the evening looking into quantum computing timelines as a non-expert in quantum computing. Here is what I’ve learned: We currently have machines with ~1,000–1,500 physical qubits at error rates around 10⁻³, and Google’s algorithm requires ~500,000 physical qubits

Actual zero day vulnerability researcher and exploit developer here. Top-of-the-field skills across Browser full-chain, hypervisor VM escape, OS kernel and baseband on record since before AI existed. And a proud solo owner of a zero day intelligence company. Anthropic just

Tor relays and post-quantum lists.torproject.org/mailman3/hyper…

Narrative violation and great insight from the latest Citadel Securities banger by Frank Flight: "We illustrated back in February that demand for software engineers, the most AI exposed occupation was accelerating higher, which we argued violates the displacement narrative.