X XFediYour place in the Fediverse
XFEDI

Federated

ActivityPub
HELLO, FEDIVERSE

Good conversations travel.

Public updates from xsukax and this corner of the network.

Sign In to your account

Public posts known to this server, including selected instances.

Kubernetes Promotes KYAML as a Safer, More Consistent Way to Work with Manifests

Kubernetes introduces KYAML, a stricter YAML dialect to reduce configuration errors. It maintains compatibility with existing tools while enforcing clearer syntax—objects use {}, arrays [], strings are quoted. Available in v1.35 beta, it's optional but especially useful for auto-generated manifests. Improves consistency, validation, and code reviews.

https://www.infoq.com/news/2026/09/kubernetes-kyaml-manifests/

#OpenStack #CloudComputing #InfoSec

InfoQKubernetes Promotes KYAML as a Safer, More Consistent Way to Work with ManifestsKubernetes is encouraging developers to take a closer look at KYAML, a stricter dialect of YAML designed to make Kubernetes configuration more explicit, predictable, and less prone to common YAML errors.
↩ Reply ♡ 0 · ↻ 0 ↗ Original

This Blogpost contains an interview with a local artist:
https://photo-philosophy.net/handwerk-anna-eickhoff/

❞ Quoted postwww.photo-philosophy.net

Content warning: Zum ersten Mal fand der Fotoherbst 2026 im Pforzheim statt. Unter dem Namen PFotoherbst zeigte die Biennale 25 Serien aus den Bereichen Reisefotografie und Reportage in Alten Schlachthof Pforzheim. Die lokale Fotografin Anna Eickhoff ist mit einer dokumentarischen Serie vertreten. Titel ihrer Arbeit ist HANDwerk. Mit jeweils einem Porträt und einem Bild der Hände mit Werkstück stellt Anna Eickhoff örtliche Handwerkerinnen und Handwerker vor. Im Interview spricht sie über den Anstoß zu […]

www.photo-philosophy.netHANDWerk - www.photo-philosophy.netZum ersten Mal fand der Fotoherbst 2026 im Pforzheim statt. Unter dem Namen PFotoherbst zeigte die Biennale 25 Serien aus den Bereichen Reisefotografie und Reportage…
↩ Reply ♡ 0 · ↻ 0 ↗ Original

I've finally had the displeasure of witnessing thread pool injection first hand while investigating a sample today.

The sample is heavily obfuscated with CFF and strings are encrypted as well so it was already fairly challenging to reverse. I spent hours looking up and down trying to figure out why I'm not seeing any allocation calls, typical remote injection techniques, and how are processes being spawned without NtCreateUserProcess. All I saw was a file being written to with nothing interesting inside, and somehow 2 new processes have spawned with the parent being sihost.

Turns out it was using thread pool injection via sihost by hijacking a IoCompletion handle from it, mapping the payload into a new section, mapping the section to sihost alongside a fake thread pool struct, and then writing the temp file to trigger the IoCompletion and thereby triggering the callback which runs the "injected" call.

The thing is it's not my first time seeing thread pool injection, at least I had studied it briefly in proof of concept before with the PoolParty technique a few years back, but it did not occur to me until I looked far deeper.

This was such an annoying sample to look at, and it really shows I still don't know enough about these in practice.

Media attachment
↩ Reply ♡ 0 · ↻ 0 ↗ Original

Pour qui avait encore des doutes ...
La #violence n'est clairement pas du côté où l'on voudrait nous faire croire...
#24octobre #manifestation #extremedroite #violencespolicieres

https://bonpote.com/la-police-etait-avec-nous-depuis-le-debut-revelations-sur-la-coordination-entre-milices-dultradroite-et-forces-de-lordre/

Bon Pote« La police était avec nous depuis le début »: révélations sur la coordination entre milices d'ultradroite et forces de l'ordreBon Pote révèle des échanges et vidéos prouvant la coordination entre milices d'ultradroite et forces de l'ordre à Nice le 24 octobre.
↩ Reply ♡ 0 · ↻ 0 ↗ Original

Google Patches 52 Chrome Vulnerabilities, Four Critical

Google released a security update for Chrome version 156.0.8078.73/.74 to fix 52 vulnerabilities, including four critical flaws. The update patches use-after-free and memory corruption across core browser components like V8, Skia, and FileSystem.

**A smaller but critical Chrome/Chromium security update. Update Google Chrome to 156.0.8078.73/.74 for Windows and Mac, or 156.0.8078.73 for Linux. Also update Microsoft Edge, Brave, Opera, Vivaldi, and other Chromium-based browsers as updates become available.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/google-patches-52-chrome-vulnerabilities-four-critical-o-n-n-g-p/gD2P6Ple2L

BeyondMachinesGoogle Patches 52 Chrome Vulnerabilities, Four CriticalGoogle released a security update for Chrome version 156.0.8078.73/.74 to fix 52 vulnerabilities, including four critical flaws. The update patches use-after-free and memory corruption across core browser components like V8, Skia, and FileSystem.
↩ Reply ♡ 0 · ↻ 0 ↗ Original

English Premier League 2026-10-31 Scores.

Upcoming Games:
31/10/2026 12:30 UTC #CHE - #MAN
31/10/2026 15:00 UTC #BOU - #LEE
31/10/2026 15:00 UTC #BRE - #NFO
31/10/2026 15:00 UTC #COV - #SUN
31/10/2026 15:00 UTC #HUL - #IPS
31/10/2026 15:00 UTC #MNC - #BHA
31/10/2026 17:30 UTC #TOT - #CRY
31/10/2026 20:00 UTC #AVL - #FUL

#premierleague #englishpremierleague #premier #epl #football #soccer #scores #scoreboard #futbol #mastodonfc

↩ Reply ♡ 0 · ↻ 0 ↗ Original

📻 ■ Álvaro de Luna se moja sobre dejarlo todo por amor en el consultorio de 'Anda Ya': "Hay que arriesgar" ■
https://los40.com/2026/10/30/alvaro-de-luna-se-moja-sobre-dejarlo-todo-por-amor-en-el-consultorio-de-anda-ya-hay-que-arriesgar/?int=MASTODON_WORLD

#los40 #alvarodeluna #musica

Fotografía promocional Álvaro de Luna - 'Azulejos' / Warner Music Spain
LOS40Álvaro de Luna se moja sobre dejarlo todo por amor en el consultorio de 'Anda Ya': "Hay que arriesgar" | LOS40El cantante se convierte en el “juez de Luna” para responder a los dilemas sentimentales de los oyentes
↩ Reply ♡ 0 · ↻ 0 ↗ Original

Nearly $10M spent by outside groups attacking independent TN gubernatorial candidate https://tennesseelookout.com/2026/10/30/nearly-10m-spent-by-outside-groups-attacking-independent-tn-gubernatorial-candidate/?utm_source=dlvr.it&utm_medium=mastodon #tennessee #activism #leftist

Media attachment
Tennessee LookoutNearly $10M spent by outside groups attacking independent TN gubernatorial candidate • Tennessee LookoutTwo independent expenditure groups have spent just under $10 million attacking Tennessee independent gubernatorial candidate David Hatley.
↩ Reply ♡ 0 · ↻ 0 ↗ Original

https://zmianynaziemi.pl/wiadomosc/50-tysiecy-luster-w-kosmosie-zamieni-noc-w-dzien

+ bardzo dobre dla przenośnych elektrowni słonecznych
+ bardzo dobre dla elektrowni słonecznych z magazynem energii
+ dzięki kamerom, systemom bezpieczeństwa i chińskim systemie laserowym do strącania satelitów nie istnieje możliwość podpalania lasów - bo można za pomocą lasera je przesunąć

50 tysięcy luster w kosmosie zamieni noc w dzień | zmianynaziemi.pl50 tysięcy luster w kosmosie zamieni noc w dzieńAmerykańska firma Reflect Orbital planuje wynieść na orbitę 50 tysięcy luster, aby oświetlać wybrane obszary Ziemi w nocy. Przedsiębiorstwo przeprowadziło niedawno demonstrację tej technologii w Kalifornii, w pobliżu miasta Lone Pine w rejonie gór Sierra Nevada. Mieszkańcy zauważyli wówczas oślepiające światło padające z gór na pustynię.
↩ Reply ♡ 0 · ↻ 0 ↗ Original

Binance investigates a possible hot wallet hack linked to an EIP-7702 exploit. Tether and Circle freeze over $2.3 billion amid reports of multi-billion losses.

#Binance #CryptoNews #CyberSecurity #Ethereum #Blockchain

https://dailytechnow.com/binance-investigates-crypto-exploit/

Daily Tech NowBinance Investigates Potential Billion-Dollar Crypto ExploitBinance investigates a possible hot wallet hack linked to an EIP-7702 exploit. Tether and Circle freeze over $2.3 billion amid reports of multi-billion losses.
↩ Reply ♡ 0 · ↻ 0 ↗ Original

#Libraries need your support. They are well worth it. #Reading is a valuable skill for all who can find enjoyment in it. Please support public libraries. 😀

https://theconversation.com/public-libraries-are-doing-more-for-their-communities-but-they-need-support-287429

The ConversationPublic libraries are doing more for their communities, but they need supportPublic libraries are trusted local institutions with an impressive record of adapting to changing social needs.
↩ Reply ♡ 0 · ↻ 0 ↗ Original

RE: https://infosec.exchange/@volexity/117524719498994949

Thank you to everyone who joined us yesterday for the first Volexity Cyber Sessions in Amsterdam, and to our speakers for sharing their research.

If you have feedback, topic ideas, or speaker suggestions for a future Cyber Sessions event, let us know: https://www.volexity.com/contact/

❞ Quoted postVolexity :verified:

The Volexity Cyber Sessions event in Amsterdam is underway! Attendees are settling in for talks on threat intelligence, memory forensics, and incident response. #dfir

Infosec ExchangeVolexity :verified: (@[email protected])Attached: 1 image The Volexity Cyber Sessions event in Amsterdam is underway! Attendees are settling in for talks on threat intelligence, memory forensics, and incident response. #dfir
↩ Reply ♡ 0 · ↻ 0 ↗ Original