2026-03-28T17:54:10Z https://yabu.me Addison https://yabu.me/npub12z3yzarwq6n46tt8f4pykkkl9n8f6wdzepe4whq375q5jpjy5ehq37cc8l https://r2.nothing-ever.works/stuff/cb096ad0-164d-402c-9065-b2cd96251f3a.jpg https://r2.nothing-ever.works/stuff/cb096ad0-164d-402c-9065-b2cd96251f3a.jpg https://yabu.me/nevent1qqsxrpv92an5dz840z8d0yemxay4d8p2m8ljhu42rdy6yj283qx9myqzypg2yst5dcr2whfdvax5yj66mukva8fe5ty8x46uz86szjgxgjnxunlwcyr In reply to <a href='/nevent1qqst5ap8a8a4sv7wx9yhfr0sevuc9tznexsk6knjuy9s5pnw4vf5lhg4l0etj'>nevent1q…0etj</a><br/>_________________________<br/><br/>ah I already follow you my friend 😄 2026-04-07T11:18:26Z https://yabu.me/nevent1qqsz839s3skq97rkjtkclyyn5q3e6uucs9jaqkpn2yge02ne0fd9alqzypg2yst5dcr2whfdvax5yj66mukva8fe5ty8x46uz86szjgxgjnxujllc6j I may very well be giving up on reading random blogs soon. The machines have gotten too good at simulating decent writing, and I simply cannot tolerate having my time disrespected so often.<br/><br/>Humans with decent, human-written #blogs, let yourselves be known. Otherwise, I will need you to, politely, fuck off. 2026-04-06T23:19:39Z https://yabu.me/nevent1qqsf6hm99e457qnhj66hpgusw395lv9vfmp82v2utes38u77zw4hnaczypg2yst5dcr2whfdvax5yj66mukva8fe5ty8x46uz86szjgxgjnxug4mdcn Right now, there&#39;s a really funny opportunity to burn an Outlook zero day. 2026-04-04T18:25:02Z https://yabu.me/nevent1qqsxucddhkjs249nnmqpgu6p39cyeju5xd36sxy74dhkp2axgeswywczypg2yst5dcr2whfdvax5yj66mukva8fe5ty8x46uz86szjgxgjnxufxhv86 In reply to <a href='/nevent1qqsgw0f7cez5w4y2tkx83dyj7zwamywqyfgythea2zz27rj99r88rese7wpvy'>nevent1q…wpvy</a><br/>_________________________<br/><br/>Concur; <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1958mefcsz02gs9h45vwrj7q92cjd3l0gflk2e04m7ev4ynvuzr8qayx4mx" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Frederik Braun �</span> (<span class="italic">npub1958…x4mx</span>)</a></span> asked for my take here, and I don&#39;t have much else to say. Last CTF I attended without this rule was really unfortunate. 2026-03-29T02:51:50Z https://yabu.me/nevent1qqs2hnwpy8wac4s2q5ud3jgr7wsefugpx5qkn2aylpefp47ad9zzgcqzypg2yst5dcr2whfdvax5yj66mukva8fe5ty8x46uz86szjgxgjnxuasqzj8 In reply to <a href='/nevent1qqsryxesrksww62jzpatu8cegfumuhz5xg4m60rx3y0rtx93g8vq4hsa7ktaj'>nevent1q…ktaj</a><br/>_________________________<br/><br/>meanwhile, they are also sending slop to OSS folks. See my most recent comments in PCRE2 repo, lol 2026-03-19T22:58:41Z https://yabu.me/nevent1qqsrtszd77tntdcepcp34ypj9gec4dd6424dj6mfwcn0t7628eua9xqzypg2yst5dcr2whfdvax5yj66mukva8fe5ty8x46uz86szjgxgjnxuxuttp5 In reply to <a href='/nevent1qqsteccc2wyuk92z0zjnkha7e43yd8xwj0dyuzryqk8tmm2tmhc49hs3a5g9q'>nevent1q…5g9q</a><br/>_________________________<br/><br/>Then it&#39;s time for an Rc&lt;RefCell&lt;Session&gt;&gt; instead of a lifetime (or Arc&lt;RwLock&lt;...&gt;&gt; if asynchronous). Just be careful to avoid cycles. :) 2026-02-18T08:26:18Z https://yabu.me/nevent1qqs8qrwa973nds76uvkytxen0qx6mhcj37dy2yh2cehu3k4pd60uk6gzypg2yst5dcr2whfdvax5yj66mukva8fe5ty8x46uz86szjgxgjnxusrszzc In reply to <a href='/nevent1qqsgcqy85ua7u67fw4xcaaxl6ud2xne0w50l22cxdk9xeqta4jnq7xgckhnps'>nevent1q…hnps</a><br/>_________________________<br/><br/>Yeah, you&#39;ll need some indirection here. You can&#39;t move session while it is borrowed. Alternatively, you can keep the widgets in the session (e.g., in a vec or smth) and only offer (mutably) borrowed access to the widgets by an ID or something. It just depends on what&#39;s appropriate for your use case; presumably, widgets should always be deinitialized when the session is, so the session should &#34;own&#34; the widgets. 2026-02-18T08:09:07Z https://yabu.me/nevent1qqszrhk5a3v26zrlka6lvtkngz5pc0r60tls4dzl4y2s9qpjch67uwszypg2yst5dcr2whfdvax5yj66mukva8fe5ty8x46uz86szjgxgjnxujagkfh In reply to <a href='/nevent1qqswc62njjfz7mhk02qm63u9pc698kajz76cd9qj82srrzk8uv8cwcqvk0qpk'>nevent1q…0qpk</a><br/>_________________________<br/><br/>Can you be more specific about what you want to do? 2026-02-18T08:00:39Z https://yabu.me/nevent1qqsg6wa4p7u3wrcuxntrxt7f4tr9aj73lztgw8s0uyzpc40h5654zrszypg2yst5dcr2whfdvax5yj66mukva8fe5ty8x46uz86szjgxgjnxumx5nqj On the ethical obligation to use LLMs for vulnerability research: <a href="https://addisoncrump.info/research/a-horrible-conclusion/">https://addisoncrump.info/research/a-horrible-conclusion/</a> 2026-02-07T12:04:36Z https://yabu.me/nevent1qqsqye9e2rp97g8v6g4x0tzc7wqfu44rat4lvaxphfxdzzuryvsuxwczypg2yst5dcr2whfdvax5yj66mukva8fe5ty8x46uz86szjgxgjnxunasnam I appear to have been indexed by an LLM-based hiring platform: <a href="https://www.getprog.ai/profile/10711159">https://www.getprog.ai/profile/10711159</a><br/><br/>I&#39;ve submitted a takedown request, but I struggle to believe that this platform is GDPR-compliant. Anyone have a more educated view on this, and what my options are?<br/><br/>#gdpr #law #recruiting #llm 2026-02-05T11:26:12Z https://yabu.me/nevent1qqszlpl56kkc0q6yccn64dct2za7y6x5lxrex27xa6hn0crw2pex74qzypg2yst5dcr2whfdvax5yj66mukva8fe5ty8x46uz86szjgxgjnxumydv84 There seems to be some misinfo kicking around that France (or Ukraine, depending on who you ask) intentionally fed false information to the US, which was then observed as transmitted to Russia.<br/><br/>Ukrainian sources dispute this heavily: <a href="https://unn.ua/en/news/did-ukraine-allegedly-provide-the-us-with-distorted-intelligence-the-gur-rejected-fakes-from-kremlin-bot-farms">https://unn.ua/en/news/did-ukraine-allegedly-provide-the-us-with-distorted-intelligence-the-gur-rejected-fakes-from-kremlin-bot-farms</a><br/><br/>Only sources boosting this claim are reporting based on Twitter reports.<br/><br/>If this actually happened, you would never hear about it; this would be one of the most closely guarded counterintelligence secrets around. Stay safe out there kids, and fact check online sources with trusted ones. 2026-01-19T04:41:53Z https://yabu.me/nevent1qqs8smkj3684npw2utdcearhma05ea7l40qx630mjn74e7wdts0nc3qzypg2yst5dcr2whfdvax5yj66mukva8fe5ty8x46uz86szjgxgjnxu7nyvrd In reply to <a href='/nevent1qqszm4xgdened2h56p7exqag8u8uc9xuzeu322k6shmget232m80drqzcfeht'>nevent1q…feht</a><br/>_________________________<br/><br/>Glad it was thought-provoking, but it sounds like I need to work on my communication style... 😅 I&#39;m glad you liked it! 2026-01-01T16:53:48Z https://yabu.me/nevent1qqsdmqmz3kmgjfyeu2uljr32vhwarrkutvmzum6l5mt997x5rp7nm9gzypg2yst5dcr2whfdvax5yj66mukva8fe5ty8x46uz86szjgxgjnxuzej007 I&#39;ve added the slides and the source code for the Sokoban game to the links for my presentation; it appears on the app, but seemingly not the website... For reference, they are:<br/><br/>Links<br/>[Source Code (wasm)](<a href="https://codeberg.org/addisoncrump/39c3-clients">https://codeberg.org/addisoncrump/39c3-clients</a>)<br/>[Source Code (web)](<a href="https://codeberg.org/addisoncrump/pages-source">https://codeberg.org/addisoncrump/pages-source</a>)<br/>[Slides](<a href="https://docs.google.com/presentation/d/15lsrpwDTH2kdZFNVKPrACytP96uz3qK6lES8F3EU5Ro/edit?usp=sharing">https://docs.google.com/presentation/d/15lsrpwDTH2kdZFNVKPrACytP96uz3qK6lES8F3EU5Ro/edit?usp=sharing</a>)<br/>[Sokoban Fuzzer](<a href="https://github.com/addisoncrump/sokoban-fuzz">https://github.com/addisoncrump/sokoban-fuzz</a>)<br/><br/>I&#39;ll be changing out the sokoban puzzle every 30 minutes from hereon out :)<br/><br/>#39c3 #fuzzing 2025-12-27T13:02:05Z https://yabu.me/nevent1qqsrqfhl60d43y663cmcs5m39n9u5xqn9mhynlt6lscamphwutvrwmgzypg2yst5dcr2whfdvax5yj66mukva8fe5ty8x46uz86szjgxgjnxuy0kxux A little interactive post on a little error in fuzzer evaluations: <a href="https://addisoncrump.info/research/metric-shenanigans/">https://addisoncrump.info/research/metric-shenanigans/</a> 2025-10-28T16:31:44Z https://yabu.me/nevent1qqs2zk67gyn688pz3lwkuct7hn0k8dc8e6060q4nteucd8uspus6vrszypg2yst5dcr2whfdvax5yj66mukva8fe5ty8x46uz86szjgxgjnxuugcg0g Got angry, posted about academic fuzzing research status quo again: <a href="https://addisoncrump.info/research/what-the-hell-are-we-doing/">https://addisoncrump.info/research/what-the-hell-are-we-doing/</a> 2025-10-26T01:21:26Z https://yabu.me/nevent1qqs83wvnqh83uy5y2frtrxr6ly8f5n2p3m39pwdu9jwdu0fhm6mzr8szypg2yst5dcr2whfdvax5yj66mukva8fe5ty8x46uz86szjgxgjnxurg667w New rant about fuzzing just dropped: <a href="https://addisoncrump.info/research/consideration-of-input-shapes/">https://addisoncrump.info/research/consideration-of-input-shapes/</a> 2025-08-14T23:39:45Z https://yabu.me/nevent1qqsrkf8dr6r9797sluk6ymtxkekkskupsyexfnw87qppsgy8mmwnnvqzypg2yst5dcr2whfdvax5yj66mukva8fe5ty8x46uz86szjgxgjnxu5athhf Happy to announce the SBFT&#39;25 fuzzing competition! Unlike previous years, we will favour fuzzers which are better at discovering novel edges and **will accept existing fuzzers as submissions**, so there is no excuse to not join in :^)<br/><br/>Register and find details here: <a href="https://sbft25.github.io/tools/fuzzing">https://sbft25.github.io/tools/fuzzing</a> 2024-11-11T14:38:50Z https://yabu.me/nevent1qqsvc32qlpxzwlk2h46sckg834vunfu5kefr2spmz59qgcncth42z2gzypg2yst5dcr2whfdvax5yj66mukva8fe5ty8x46uz86szjgxgjnxudwv5y9 Why I don&#39;t write exploits*: <a href="https://addisoncrump.info/important-information/why-i-dont-write-exploits/">https://addisoncrump.info/important-information/why-i-dont-write-exploits/</a><br/><br/>In which I describe why I avoid writing exploits at all costs.<br/><br/>#testing #defense #vulnerability #academia #research 2024-10-06T16:12:21Z https://yabu.me/nevent1qqszltsymea2ekvplj9ke8gyp9gh3z0us38q6nvkna6re6atn5957lczypg2yst5dcr2whfdvax5yj66mukva8fe5ty8x46uz86szjgxgjnxuxy7hd6 In reply to <a href='/nevent1qqswj548yjxurl25lxhmmhkk740yp7f0m3yscguttcatlur7pvu6wvgvjwrul'>nevent1q…wrul</a><br/>_________________________<br/><br/>How would that be applied? My goal is to simply rearrange the pixels, this seems more like signal processing. 2024-09-30T06:17:41Z https://yabu.me/nevent1qqsyn8efzdejvad4nsk2n07508w9my6adrczgztxlm2gdm2dayqncjgzypg2yst5dcr2whfdvax5yj66mukva8fe5ty8x46uz86szjgxgjnxuvqnd3n Suppose I have an image and want to show the distribution of colours in that image. Obviously, I can sort the pixels in a line and be done. But what if I wanted to preserve the original photo&#39;s dimensions, while minimising the colour distance across neighbouring pixels in both dimensions?<br/><br/>#graphics #computationalimaging #art 2024-09-30T03:43:48Z https://yabu.me/nevent1qqsvdyj2aer6z2d69rr0v8yutmzrvjzdm79cpv3v9fathse9les754czypg2yst5dcr2whfdvax5yj66mukva8fe5ty8x46uz86szjgxgjnxuqe5xs9 More ranting, as a result from a conversation I had with a couple other #fuzzing people:<br/><br/><a href="https://addisoncrump.info/research/fuzzers-and-gaming/">https://addisoncrump.info/research/fuzzers-and-gaming/</a> 2024-09-14T23:44:58Z https://yabu.me/nevent1qqs2ht49vcklx3s8lm7gz3gqnw0ctskvs7hnkf4gnerehys50kqjfgczypg2yst5dcr2whfdvax5yj66mukva8fe5ty8x46uz86szjgxgjnxufdufre New rants for today:<br/> - PCRE2 and fun testing difficulties: <a href="https://secret.club/2024/08/23/ring-around-the-regex-2.html">https://secret.club/2024/08/23/ring-around-the-regex-2.html</a><br/> - Ruminations on fuzzer evaluations: <a href="https://addisoncrump.info/research/thinking-about-fuzzer-evaluation/">https://addisoncrump.info/research/thinking-about-fuzzer-evaluation/</a> 2024-08-24T01:57:21Z