breaking
20 stories and discussions about breaking, aggregated from every source we track.
Conversations, my federated instant messaging client for Android, started out as many traditional open-source projects do: as an attempt to scratch my own itch. Development started in January 2014 in my student…
Conversations, my federated instant messaging client for Android, started out as many traditional open-source projects do: as an attempt to scratch my own itch. Development started in January 2014 in my student…
SAFA details the full exploitation of CVE-2025-13032, turning a double-fetch vulnerability in Avast's kernel driver into a local privilege escalation to SYSTEM on Windows 11.
<p>When I go to post a comment, the comment text box doesn't show up anymore.</p> <p>Instead the page content becomes corrupt and the Anubis HTML gets plopped into the page HTML somewhere, and then hangs/freezes or otherwise leaves me with nothing but an anime catgirl.</p>
Conversations, my federated instant messaging client for Android, started out as many traditional open-source projects do: as an attempt to scratch my own itch. Development started in January 2014 in my student…
Gambit Threat Intelligence reconstructed an ongoing campaign in which open source AI agents compromised online retailers for about $25 each.
<blockquote> <p>The Portable Document Format, better known as PDF, is one of the most widely used document formats worldwide, and in order to ensure information confidentiality, this file format supports document encryption. In this paper, we analyze PDF encryption and show two novel techniques for breaking the confidentiality of encrypted documents. First, we abuse the PDF feature of partially encrypted documents to wrap the encrypted part of the document within attacker-controlled content and therefore, exfiltrate the plaintext once the document is opened by a legitimate user. Second, we abuse a flaw in the PDF encryption specification to arbitrarily manipulate encrypted content. The only requirement is that a single block of known plaintext is needed, and we show that this is fulfilled by design. Our attacks allow the recovery of the entire plaintext of encrypted documents by using exfiltration channels which are based on standard compliant PDF properties.</p> </blockquote>
What you have to do something about. Releases, CVEs, outages, breaking changes. Every post ends on the consequence for a system you own. One email a day at 07:40.
Conversations, my federated instant messaging client for Android, started out as many traditional open-source projects do: as an attempt to scratch my own itch. Development started in January 2014 in my student…
Gambit Threat Intelligence reconstructed an ongoing campaign in which open source AI agents compromised online retailers for about $25 each.
Inside Ayrshare’s API backend migration: backward compatibility, feature flags, rollback controls and faster feature delivery without integration changes.
Two troops of chacma baboons are breaking into homes and shops but animal rights activists insist coexistence is the answer
A calibrated risk envelope for LLM quantization that refuses to answer where its own coverage doesn't hold - gracejackson-sudo/quant-delta-predictor
It’s been a month since I published the first part of this research, and interest from the Postgres community has been higher than I expected. Most vendors I contacted were shy to respond, so the Databricks…
I started writing this blog in 2004 and, every year I published at least one post until 2022. So four years of not writing about Python ... ...
Detect structural and semantic OpenAPI compatibility risks
.NET 8 and .NET 9 both reach end of support on November 10, 2026 (announcement). I have been going...