Federated Timeline

#NowPlaying #NewMusicTuesday "Animalistic" - #Plush https://youtu.be/yKv3IdCBjcE?si=sQuGeIG1L9QJy741

Men take only their needs into consideration -- never their abilities.
-- Napoleon Bonaparte

Debian OpenSSL used 4 first.
#rng #privatekey

It would be a disaster
It would be a disaster
I've got this sinking feeling
I'm not dreaming
We'll be sorry soon

The PHP foundation announced there will be a security release tomorrow (Oct 21) addressing two critical PHP vulnerabilities that could lead to remote code execution. We'll all be racing against an exploit storm. Keep a close eye on your PHP-based frameworks.

To find your PHP instances using runZero, check out: https://www.runzero.com/blog/php/

And for the latest developments, tune into runZero Hour with our research team tomorrow at 1pm ET (link in 🧵).

Register for runZero Hour here: https://www.runzero.com/research/runzero-hour/

Exploiting Reversing (ER) Series | Article 11: Windows: Missing Bounds in the Print Spooler.

The article has 60 pages, free. A user-mode target this time instead of a kernel one, worked end to end: from a missing bound check to a SYSTEM shell, with the service still running afterwards.

Published on:

https://www.blackstormsecurity.com/research/

What it covers:

[+] The bug: a heap overflow (CWE-122) in the Print Spoolers form-enumeration path, reachedthrough InternalEnumForms → CopyIniFormToFormInfo → PackStrings → memcpy.

[+] It is still unpatched. I submitted it to Microsoft in March 2026 and MSRC assessed it as below the bar for immediate servicing, because the PoC requires administrative rights. Re-confirmed working in October against current mainstream and Canary builds.

[+] The exploitation, which is two thirds of the article, with four stages: groom, corrupt, control, execute. The process never crashes: spoolsv.exe is left running and the planted form deleted.

[+] Important note: I had already notified the MSRC months ago that I would write an article about the vulnerability and publish it.

This article will be published on https://exploitreversing.com/ next week.

Hope you enjoy the read!

#Windows #PrintSpooler #VulnerabilityResearch #ExploitDevelopment #ReverseEngineering #HeapExploitation

One Hit Wonder #44 — got it in one (7 seconds, 1,293 points)!
🟨🟨🟨🟨🟨
🟩🟩🟩🟩🟩
https://lex.games/onehitwonder

Cornell’s Jane Doe sends letter to faculty leaders, saying she felt 'unsupported' https://www.upi.com/Top_News/US/2026/10/20/jane-doe-writes-letter-to-cornell-faculty/4661792536451/?utm_source=dlvr.it&utm_medium=mastodon

Silvester in Bristol wird 2026/2027 richtig wild – statt eines zentralen Feuerwerks feiern Sie verteilt über zahlreiche #Clubs und Theater mit Epic Line-ups! 🎉 Von der legendären ABBA-Disco bis zur Jungle-Nights-Party im Bristol Old Vic gibt es für jeden Geschmack etwas. #Silvester #England #Nachtleben – aber Achtung: Tickets sind schnell weg, also jetzt schon die offiziellen Kanäle checken! 🥳 Willkommen zu einer unvergesslichen New-Year's-Eve ...

https://events.europa.tips/bristol-new-years-eve

Got my new video done and out, AND didn't have as much headache issues and I have been having! A Good Day (TM)!

This paintin from Eberhard Löbel (GDR 1976) reminds me of Star City: The Man on the left looks like the Chief Designer and the man in the middle like Sergei Nikulov. 😁

Found in the Leipzig City History Museum, Old Town Hall

#StarCity #ForAllMankind #Leipzig

Can't, waiting for the Knicks to get through all of this carrying on so the game can finally start.

Power brokers exploit Trump’s dwindling attention span behind closed doors https://www.alternet.org/alternet-exclusives/demented-trump/ via Alternet.org

White House orders Kimberly Guilfoyle to 'stay away': report https://www.alternet.org/kimberly-guilfoyle-donald-trump-fired/ via Alternet.org

An interview with OnlyFans CEO Keily Blair about plans to offer financial services to its 2.5M active creators, a potential IPO, and more (Emma Hinchliffe/Fortune)

https://fortune.com/2026/10/20/onlyfans-ceo-interview-keily-blair-ipo/
http://www.techmeme.com/261020/p54#a261020p54

New lighting diagram! This one is more about portrait lighting and getting separation from the background without a hairlight!

YOUTUBE
https://www.youtube.com/watch?v=TcaByIMrvv0

PATREON
https://www.patreon.com/TrentonHoshiko/posts/patreon-lighting-172939524

PEERTUBE
https://trentontube.trentonhoshiko.com/w/8vBWXtM3vFQCwLak2VgUxD

#SupportIndieFilm #Filmmaking #Cinematography #Photography #VideoProduction #YouTube #PeerTube

of course they are all monthly subscriptions. There's only one that seems to be security conscious and HIPAA compliant, and it starts at $25/month for a service I haven't needed in at least a decade until now. So it seems that Dropbox Fax is the only viable option these days. It does at least have a free tier with a pay-as-you-go option.

New powerful ad by team Talarico.

"Texas was built by hope. By people who had no business believing — but believed anyway. To every Texan who’s ever wondered if anyone in power is paying attention: We are taking our state back. Because a little bit of hope is a dangerous thing."

Let's watch and share.

https://www.youtube.com/watch?v=P9coTl6n_6o
#UsPol
1/n

Shigeru Yoshida, who died OTD in 1967, served as Prime Minister of #Japan from 1946 to 1947 and from 1948 to 1954 https://cromwell-intl.com/travel/japan/tokyo-shinjuku/?s=mb #travel #history

… and NodeJS too. Security release coming out tomorrow - October 21.

https://nodejs.org/en/blog/vulnerability/october-2026-security-releases

Man shot by ICE in Austin federally indicted
A federal grand jury has formally indicted Wilber Rafael Garces-Perez with one count of Assaulting, Resisting, Impeding, and Obstructing a Federal Officer.
https://www.kxan.com/austin-ice-shooting/garces-perez-indicted/
#AustinICEshooting #Austin #Crime #Local #News #TopStories

man i'm done with computer
i'd put all of the metal
back into the ground
stack dirt on top
to not let it out
total tech wipeout
it's a distraction
toting Light disaster
in hand, ran out of inaction
not the time to be tactful
my stance is more than posture it's actual
take any glass of water
introduce a computer to moisture
put it out of action
now smash em
pull apart the glass
popping pixels like pills
i'm the RGB Alpha
i cast my magic spells
with the code i got left
i'll Hex ya
get Splashed, who's next?
bring out your tech
let it get wrecked up
cos i am fed up
of all this messed up tech stuff
i've had e-fxcking e-nuff
of computer i'm done

そうかそうか、ロシア軍将校は接近経路(avenue of approach)の計画すらできないどアホ軍事素人から勝ってないですね。じゃ、今はもっと頼りにならんぞ？
そういえば、トランプくん、きみも徴兵から逃がしたじゃないのか？

https://x.com/CasetaBosque/status/2112634343478771801

⬛⬛⬛⬛⬛⬛
⬛⬛⬛⬛⬛⬛
🟩🟩🟩🟩🟩⬛
🟩🟩🟩🟩⬛⬛
🍎⬛⬛🟢⬛⬛
⬛⬛⬛⬛⬛⬛

Score: 9

📻 Top 10 @acarsdrama posts (past 24h):
📊 Total Engagement: ❤️ 48 | 🔄 50 | 📈 98 | 📊 Avg: 9.8

1. ⏰ 02:34 UTC | ❤️ 42 | 🔄 39 | 📊 81
   📝 Air to Ground Message: REPORTS OF UFOS, BEHIND/US, FAST MOVING Area: Cleveland, OH, USA Type: Airbus A220-300A: #a5f69ff3015 F: #f1f993be662 #acars #v...
   🔗 https://live.acarsdrama.com/@acarsdrama/117470899077650190

2. ⏰ 13:59 UTC | ❤️ 3 | 🔄 2 | 📊 5
   📝 Air to Ground Message: THE WIFI NO WORKY IN FIRST CLASS AND PREMIUM. ITS ROUTER ACCESS POINT ADVERTIZES SETMEUP. THE BACK DOES WORK. Area: Blaine, MN,...
   🔗 https://live.acarsdrama.com/@acarsdrama/117473592587764399

3. ⏰ 19:24 UTC | ❤️ 0 | 🔄 2 | 📊 2
   📝 Air to Ground Message: DONKEY..I MEAN DANKE Area: Seattle, WA, USA Type: Boeing 737-700A: #a6206884a75 F: #f8857929ef9 #acars #vdlm2
   🔗 https://live.acarsdrama.com/@acarsdrama/117474870705142970

4. ⏰ 15:37 UTC | ❤️ 0 | 🔄 2 | 📊 2
   📝 Air to Ground Message: HOWDY THERE PARTNER HOPE YER HAVIN A ROOTIN TOOTIN TUESDAY I GOT A FOR U CAN I PRETTY PLZ HAVE THE WX 4 XNA YEHAW Area: Louisvi...
   🔗 https://live.acarsdrama.com/@acarsdrama/117473977972348629

5. ⏰ 11:32 UTC | ❤️ 1 | 🔄 1 | 📊 2
   📝 Air to Ground Message: DUE TO MILITARY ACTIVITY IN CTR/TMA RZESZOW PO Area: Stockholm, Sweden Type: Boeing 737-800A: #a3fae1ffa64 F: #fbeab4299af #aca...
   🔗 https://live.acarsdrama.com/@acarsdrama/117473014543442173

6. ⏰ 01:01 UTC | ❤️ 0 | 🔄 2 | 📊 2
   📝 Air to Ground Message: THX SO MANY ACRONYMS LOL Area: Louisville, KY, USA A: #a68df7d542a F: #f38f1e43789 #acars #vdlm2
   🔗 https://live.acarsdrama.com/@acarsdrama/117470533249833949

7. ⏰ 20:24 UTC | ❤️ 0 | 🔄 1 | 📊 1
   📝 Air to Ground Message: HOLA CHICOS. WE ARE LANDING EARLY. 2053Z. CAN U PLS ADVISE GROUND CREW. MERCI BCP Area: Jersey Shore, NJ, USA A: #a96f46351f2 F...
   🔗 https://live.acarsdrama.com/@acarsdrama/117475106542518241

8. ⏰ 19:58 UTC | ❤️ 0 | 🔄 1 | 📊 1
   📝 Air to Ground Message: THERE WAS A PAX THAT COMPLAINED ABOUT A MANS ARM TOUCHING HERS. THE PAX CHANGED SEATS AND FAS THOUGHT IT WAS RESOLVED. ONLY PRO...
   🔗 https://live.acarsdrama.com/@acarsdrama/117475004687356383

9. ⏰ 18:16 UTC | ❤️ 1 | 🔄 0 | 📊 1
   📝 Air to Ground Message: ANY ADVICE ON HOW TO PROCEED IS IT WORTH GETTEING POLICE IF HE DENIES Area: Falaise, France Type: Airbus A320A: #a703182ef33 F:...
   🔗 https://live.acarsdrama.com/@acarsdrama/117474603122452220

10. ⏰ 18:15 UTC | ❤️ 1 | 🔄 0 | 📊 1
    📝 Air to Ground Message: HEY WE HAVE BEEN TOLD THAT A PAX HAS BEEN FILMING FO AND CABIN CREW IN FLIGHT CONFIRMED BY PAX BEHIND HIM WE DONT FEEL COMFORTA...
    🔗 https://live.acarsdrama.com/@acarsdrama/117474599451042067

#EWR

“BA Cinnamon Coffee Shop Assault Vehicle?!?”, asked Toad

“Yup,” said Frog

#lupulinBrewing

Huuuuge. Sweet and thick, cinnamon, coffee hints, boozy back notes, with a curiously flat body. Let it warm!

#ItsAlwaysStoutSeason
#LetItWarm #stout #CraftBeer

REVIEW 📣📣📣

American Dollhouse ★★★★ Brooklyn Horror Film Festival

John Valley's American Dollhouse turns Christmas cheer into a blood-soaked suburban nightmare. A love letter to the grizzled horror of the 70s and early 80s, it delivers twisted festive horror fun....

https://upcomingonscreen.com/american-dollhouse/

The Gambia to pay reparations to ex-dictator’s victims from sale of US mansion https://www.aljazeera.com/news/2026/10/20/the-gambia-to-pay-reparations-to-ex-dictators-victims-from-sale-of-us-mansion?traffic_source=rss

ホテルのチェックイン時に朝食は混んでいるから何ちゃらかんちゃらって言われて6時15分に起きて7時開店と同時に行ったら結構空いていて何だかなあな朝

@Gornes

You're opening yet Another Account with the exact same profile information but an entirely different female avatar

Asking for money while using different identities seems Scammy.
5th account in less thsn a month

BUZZ OFF !

Liverpool made it three wins from three in the Champions League after overturning a two-goal deficit to beat Villarreal 4-3, with Florian Wirtz scoring his first of the season.

#Football #ucl #LiverpoolFC #ChampionsLeague #VillarrealCF #footbanewsandupdates #championsleague2026 #footballnews2026

https://www.mondiaries.com/2026/10/ucl-liverpool-overcome-disastrous-start.html

Looking around at the new 5.0 release of #Mastodon that's coming here soon. I realize it's superficial of me, but the first thing that jumped out at me is I really like the new Orange theme. They've made some pretty significant changes to the UI. I expect there's going to be those that love and those that hate, but so far I'm in the former group. I've only been poking around for a couple minutes, but so far I'm really liking what I'm seeing.

https://blog.joinmastodon.org/2026/10/5.0-a-closer-look/

#Mastodon5

► https://FunHouseRadio.com <- TUNE IN

So is anyone else terrified of the #teslaroadster?

Still a long way to go, but for my first TIG T joint I won’t complain!

I can't help but feel like the rate at which big vulnerabilities and security incidents in open source and adjacent areas happen have really cranked up now. I assume this is how it felt to be a Windows sysadmin in the early 00s, what with Sasser, Blaster and whatever else was going on at the time. It seemed like a quite hectic time in all the records I've read from that time.

Louder Sound 🤘 Nirvana's Nevermind passes AC/DC's Back in Black to become the sixth best-selling album of all time: Taking physical sales, digital downloads and streaming into account, Nevermind has also outsold Pink Floyd's The Dark Side Of The Moon http://dlvr.it/TW0JtH LinkInBio for More 🤘 #LouderSound #heavymetal #metal

New 4K-capacity southeast Austin venue announces inaugural lineup
AEG Presents' 4,000-capacity venue, officially named United Heritage Hall, announced its inaugural lineup of shows this week.
https://www.kxan.com/news/local/austin/new-4k-capacity-southeast-austin-venue-announces-inaugural-lineup/
#Austin #CentralTexasThingstoDo #Entertainment #Local #News #TopStories

Felt compelled to make a gif of this scene.

#StarTrek #VOY #StarTrekVOY

Less than 30 minutes to upgrade my #OpenBSD VPSs to 8.0.

In the beginning of _A Castrovel Adventure: Part 3_, Lady Vaeol divines the threat facing the Elven-Highland peace talks...

#pathfinder #pathfinder2e #lashunta #castrovel #rpg #ttrpg #worldbuilding #worldanvil

(and I am not eager to send a financial document through a sketchy online fax service)

Mmmmm spicy beef

They’re soooo cute. Thank YOU @dotmeow

Now that anyone can issue trusted certificates if they have the number 4, I guess that’s gonna hurt LetsEncrypt’s top line revenue and cause their share price to tank.

https://arstechnica.com/security/2026/10/the-internet-goes-on-high-alert-after-discovery-of-8-compromised-tls-certs/

How Nebraska helped turn 2026 into the year of the independent US Senate candidate https://tennesseelookout.com/2026/10/20/repub/how-nebraska-helped-turn-2026-into-the-year-of-the-independent-us-senate-candidate/?utm_source=dlvr.it&utm_medium=mastodon #tennessee #activism #leftist

Pope Urban III died OTD in 1187 https://cromwell-intl.com/travel/france/avignon/chateauneuf-du-pape.html?s=mb #travel #history

This incident makes me wonder if there’s anything similar to CertSpotter ingesting CT logs and continuously running lattice attacks on every ECDSA signature in them, and if not, should there be 🤔

AR (SHARP): latest activity (24h) (server2) sssweather_test #suninfo #solarinfo #spaceweather #solarflare