This host is mostly for my random stuff, and in little part acts like a well-intentioned placeholder for the typosquatted domain.
Currently I'm using this host for saving the items from my own feeds to the Wayback Machine and provide in-links for search engines. I hate that I have to do this, but the non-sense ideology of Mastodon pretty much ruined the search feature for Fediverse as a whole, and this wasn't changed by the fact that they owned their mistake and implemented search eventually.
Yes, I (or anyone else) could do similar things with other peoples published feeds, regardless of the tantrum. No, you can't defederate this, because the process doesn't rely on an instance.
My friends at Ravenfortech wrote an introductory #malwareanalysis post on the INC #Ransomware:
https://translate.kagi.com/https://scribe.rip/@ravenfortech/inc-ransomware-elemz%C3%A9s-a909b5aed114
This gang recently pwned the Hungarian company responsible for military procurement (VBÜ) and now selling the data for $1M.
Based on the analysis the malware is very simple. INC uses 2023 CitrixBleed (2023) and spear phishing for initial access:
https://www.sentinelone.com/anthology/inc-ransom/
This doesn’t paint a picture of mature security at VBÜ to say the least…
No camel can perish on the Hungarian internet
It is just natural that in #Ghidra #Sleigh “The [operator] identifier must appear in the [bit pattern section] as if it were a term in a sequence of constraints but without the operator and right-hand side of the constraint.”, see section 7.4.3:
https://scrapco.de/ghidra_docs/GhidraDocs/languages/html/sleigh_constructors.html
But it seems, you can’t use the identifier in the display of the instruction if it’s part of a constraint.
Error: “wrong type (should be family) in pattern equation”
Why is that?!
(Workaround: define an alias token for the same bits and use that in display)
If a #Ghidra build throws an error similar to:
“No IP found for $slaspec in module: $dir”
You have to extend the certification.manifest file in $dir.