every time you make a bargain with the Technical Debt Devil and implement a temporary solution or prioritize chasing trends over core functionality, think soberly on the the Hooglandse Church in Leiden, which was meant to be a stunning architectural masterpiece but they spent all their budget on superficial bling, never actually finished the “building” part of the building, and had to hurriedly hammer a stubby wooden cap on the foundations for the envisioned grand tower. It’s been “temporary” for four hundred years.

The interior has iron braces everywhere to hold it together even though the physics of a good, extraordinarily stable arch have been well understood for thousands of years.

(first two images from wikipedia, last one mine)

Japan, Australia, Canada and New Zealand can strengthen — not duplicate — the region's growing network of minilateral partnerships https://www.japantimes.co.jp/commentary/2026/07/15/world/new-indo-pacific-quad/?utm_medium=Social&utm_source=mastodon #commentary #worldnews #quad #aukus #squad #australia #canada #newzealand #indopacific #china #nato #defense

For folks who have been interested in #Canimus and #FederatedStreaming, I'm working on a revised specification that cleans up a lot of the problems that emerged during its development. It's also probably changing names, the current best candidate being "Chorus." (The repo name will change after the draft is finalized.)

Check out the WIP rewrite at https://github.com/PlaidWeb/Canimus/tree/draft/chorus-rewrite and please comment on it at https://github.com/PlaidWeb/Canimus/pull/19

(cc: @lorenzosmusic @fairplayer @wjmaggos )

New blog post!

The title should be self-explanatory, it's an appreciation post for Nightmare Eclipse.

You might notice that the tone is a bit more emotional/angry than my usual style of writing.
This one's personal.

https://ti-kallisti.com/general/ms/nightmare-eclipse.html

#NightmareEclipse #Microsoft #Hackers #InfoSec #SecurityResearch #ChainsawMan #Reze

@mattblaze San Francisco is probably the biggest American city without rail service.

If you've seen NightmareEclipse's LegacyHive exploit - I verified it works and it isn't patched.

I wrote some detection queries for MDE which are high fidelity, basically no false positives, and should catch it even if the proof of concept is modified.

https://github.com/GossiTheDog/ThreatHunting/blob/master/AdvancedHuntingQueries/LegacyHive.kql

@inquiline 🫂

just retooted a post from Dr Sawin. Her comment about sacred obligation is 🎯

Calling AIs “stochastic parrots” is a common yet misapplied turn of phrase these days. One of the authors of the original paper that used the phrase, Dr. Bender, clarifies what the authors really meant and some larger misconceptions about AI and natural language.
https://spectrum.ieee.org/stochastic-parrot?utm_source=mastodon&utm_medium=social&utm_campaign=fedica-Mastodon-Daily-Pipeline

The HTTP workshop in Basel day two: https://daniel.haxx.se/blog/2026/07/15/workshop-basel-day-two/

@farah yaaaaaassssss!

Support for ML-DSA signatures is currently being added to Mastodon, but for embedded signatures:

https://github.com/mastodon/mastodon/pull/39522

On a related note, what do you think of SQIsign? I haven't tried it yet, but benchmarks show that its performance might acceptable for fediverse applications.

What if we ban computers from using kids instead?

@farah bringo. the only way i can describe hitler is that he was the german trump in every conceivable way beyond that hitler actually did grow up poor and know what it meant to struggle. trump never touched dirt with his bare hands in his entire lfie.

@researchfairy bro

@tante

Meh, this is a cop-out from Torvalds. There's something _he_ finds useful in it. LLMs as chatbots doing all the things is not a force for _good_. Period.

And it's _certainly_ not neutral. People with his attitude assume the "rough edges" will eventually get polished to smoothness.

This assumes the rough edges aren't the point. In the case of the people pushing LLMs like smack on the street corner the rough edges are very much the _point_.

RE: https://infosec.exchange/@catsalad/114758254385767289

Aaaaaaaaaaaaaaaaaa!!

@gwynnion Third spaces breed community, and community breeds solidarity, and solidarity breeds resistance.

What can you do with this?

Well, the ability of a non-admin user to be able to modify the classes registry hive of an admin user is a pretty powerful primitive.

For example, as a novelty, we can associate .txt files to open with calc.exe

Clever attackers or people who want to accomplish something will easily be able to figure out how to do things that are more interesting and/or don't even require user interaction.

Looks like my talk was accepted.

https://events.eurobsdcon.org/2026/talk/NVMSCJ/