Artificial truth

On Apple's M-based laptops, the webcam is living in a notch on top of the screen, which Asahi Linux works around by making the usable screen size smaller, so that the notch is hidden in a black bar.

One thing I do like very much about VSCode is the git gutter, the small indicators in the margin showing the added/modified/deleted lines equivalent to a git diff.

I just published a new release of Snuffleupagus, the hardening module for php7+ and php8+, version 0.14.0, codename "Blumenbach", named after Johann Friedrich Blumenbach, the scientist who gave the woolly mammoth its first scientific name, Elephas primige…

Tree-sitter is the current hot cool thing to parse languages, and is thus used by hipster editors like emacs, Neovim, helix and zed.

There is a new version of mat2: 0.15.0, this is a big one, with two new added formats, and a bunch of fixes: Be more upfront about the limited HEIC support.

It has been quite some time since I did some reversing, but with Binary Ninja's 10 year 35% sales, I thought that it would only be fair, given how much time I wasted spent in front of them, to actually pay for reverse engineering software once in my life.

In 2020, my friend anarcat published the CLA Denial-Of-Service attack, an interesting musing on the possibility of weaponising CLA, boiling down to: find a critical bug figure out a [non-trivial] patch for the bug publish the patch in their issue tracker…

I'm currently somehow or other writing a book, meaning that I'm spending a significant amount of time with markdown files open in my text editor, which happens to be (neo)vim.

With the internet being crawled to death to feed the AI God, it's becoming seriously annoying to exposed web content on the internet.

This blogpost is in French, as it explains how to block spam calls for Free Mobile customers.

There is a new minor release of fortify-headers, namely 3.0.2.

Since I published Carrot disclosure: Forgejo two days ago, numerous things happened: Friends of mine were reached out to, to "talk to me from a place of trust", or simply to convey to them in great details what an horrible person I am, which they found hi…

Since Fedora moved from Pagure to Forgejo, I finally had an incentive to take a good look at Forgejo's security posture.

I'm ~regularly doing lightweight security audits of the services I'm running exposed on the internet.

A recent article of the OpenBSD journal caught me attention: Pledge changes in 7.9-beta (archive.org mirror as it's currently offline).

The mysterious unreadable kernseal.txt file on PaX' documentation page has been sitting there since 2003, described as "sealed kernel storage design & implementation."

Thanks to the amazing work of the Asahi Team, Steam is running on my arm64 Linux on my Apple M2.

With more and more databases from stalkerware being made freely available, there were some internal conversations at Echap about what could be done with them to help victims.

A friend of mine, namely Antide "xarkes" Petit, came up with a pretty good rule of thumb that I think should be elevated into a law, Antide's Law: If it's unclear what a cyber-security company is doing, what they're doing is pretty clear.

I just published a new release of Snuffleupagus, the hardening module for php7+ and php8+, version 0.13.0, codename "Elephas", named after the genus of elephants.

There is a new minor release of fortify-headers, namely 3.0.1.

In 2025, I did, amongst other things: Read some books: Torture Taxi: On the Trail of the CIA's Rendition Flights Outlaws Inc: a lot of storytelling, not much meat, still interesting.

I gifted an Oculus Quest (that I got as a gift a couple of years ago) to my brother, but because we're in 2025 and everything computer-related sucks, one has to associate an online account with the device to make use of it.

In late 2022, I started to contribute to fortify-headers, and the original author, sin, was kind enough to entrust the project to me.

I've been running some parts of the *arr stack on my hypervisor at home for quite some time now, but only recently did I notice that they were packaged in Alpine!

Because the Freebox Pop is an underpowered piece of crap quite weak when it comes to NAT'ing anything above 100Mbps, I decided to get a proper machine and slap OPNSense on it: I'm paying for the whole fiber, I'm going to use the whole fiber.