Elise (TLS 2026 Edition)

and, reported!
3 line PoC, explanation is only a few sentences, surprisingly simple vuln
https://fedi.katze.sh/system/media_attachments/files/117/479/451/628/743/112/original/3fdab8ba183e9446.png

2026-10-21 14:32:15 UTC

- reply

still works on 8.5.12!
https://fedi.katze.sh/system/media_attachments/files/117/479/380/611/132/376/original/d51dc2abdcd31a4a.png

2026-10-21 12:03:11 UTC

- reply

bf6cf28d32a393a6a7e2b1ba5b99cfed8c6f1d0786b2a4d1db2d3953bf84d99462d0e5ead3930ddc2dc9693591ada005f8e9c078acaafba76c7db87ecc34f445349a9aa94acf3e4c882c91da181a4f8efba1c8fca972a228cb0beae4d811c366c7a555353e266621a41b900ee4a9a45e39369e672da7f31472ed8d54b5f0636bb2d836a6e403020c75446bc71732341819cfaa356192e8e65e6924501f4b785d4a3713b7830b775123faa80dd8b4e7ac4c986498be1dec2d2dbc480e4f08741507a777d1d1eaf499f2857450086bcc3937505c167683524e51318dca1a776e86b05a987da9cf5172e5e22943e5c572ca2774d6c8468ab1ebe140845c50ae285caf1adf7134f94e4b5d7625eba3133c2820563c54f48750e4f5c0c25a04491dbeebe21ddbfc3390b0dc3873774438fa43e3884f5ce3c2c027781c7f730a0266335356f8fbb34a4320d95667f2d9b1477c639b2ef9916ba888c7d4d1ec0d97ce445830a030349a2a90a5bdf1474933c8f1f513952143e3dd3f52dd7e00e1585ccfca7c1a9a0255506771019561c0b1ec1d7f0edbc910d7c3a0be70a9cb3a7289c4311b3a7f743e8d48451fa4cf0fe1adc21d25d91278c03f49f1aea331f0fe5af89513cda54122e9f532e66824ed6acd8d99862f8faa01a3e54fc7a09f171418808c509b8b88ab4279bc49d0b3f03a7b3e09eb1999b1b2a2312da771c2361e5319e3c065524afe2ef8db1fdb477d16c6f5872c894baf3bd5a63d5ace633322114c376782a122e80e3fa67a35a7cdcb96f8f95144e909deffbc6dfe3532576fa6106516177014d73756c5f6612174140c47246fa889ee4637c7904eaadf85819a9f8e86c0da5c1bffe99cfc98ba6e608f8d67a57a1768d22f4d815b56a2c4cea5d5391e82b8d05885dce3296eb09f2e975dc08503bfe3936018ed3e33b81192817c8e8713e7f0a54a456b13a090be7d53bd7f02be87153b76e2be735923ad75c515cd869928d16949fc5e23ef718c38c29f6f1456f528e9a0e449b9f5539d7d63af92acd69b6f2b48f5f0216eb858eeaa300526fd30e8387a3ba022ecf4447790e89d4934ea203d4acaff06d9dc53517cf7806a11a7c97ced9e9ab836de18c31fe106a26548e2be3956d1fd65dc62184e3a2eec24aff70aa3944e3ca152447113f9e0d455b57f34903bdbf5332f502c5189a4e6c0e8ecdfcb76a37361ff6d6273c6c11be7422ca931d6663869eb18456c821aba403171102e9109d6689182ab6a372e5e08d539f4b95d53d64bd62683f68c7a7dc708b3809938ea9d7be863feb2c474316f8d336c01c2a0b00a79f339df61ea154d83fd939eb15a5b56bcde3ebe5bdf281decc5e0cf8db58403e41aad0bf3dc3a02c6fa4c0c29b04acb2739cc9954992ae676cd5794705ae02cca20bb3a8d9a8ba3caeeedcc4a0255315238a784a3f91dc817283d7182b22716c6d03d32fd754b93550de301fdc4a7febef7b94cfa9239c889ec37d9dc17027f0e1051f3308bd576eaaf8326f6f7c0be5299f5b2270fa9d6d63d79bc6af9eee67cc63983b76a2b38ebb0c9c345e3f434c049968259a982ffe4ddac7518656401ea163fe0e81a5f4540381a5dcdb78efb3528e3d54698f234dee5d56e3dc32cc4140cbcda2725feaf35b5047251efb9f1fe3d32d6b06068407e2b47c3edd22bc3c3b3a079b0ef0dd583d2627b712c3aa88b638b84914e5973770a716ce6b0eae6aa4f1d78bdeb6e54b849115f12eeff7550b5d328163bbb0dfd5610a938f689aba76bd52b1db9f414feadec9bf9e3942085025633b81a67ead20fba053ae5c177510f148447101311a6b26246af47485be6d7467c59981df867304f2ca4b6deb22580c6ba8c5abb352365d09e7df62ca4912acbb04805454e633f1218d3f2b17037be607846cc8b88f628859ec2caa4a50b7aa1034543f7c914155b83779fdd15a57b21415dd7801c69626ff904632ffaabe8eace722414d0c23246e794bf0517ef677878ffc313bcc775387fddf7c8ef8a568fc95768636a7277bb8a55e17db61af5ddebfa8c81c63c8ad13232de2e498d83051d16026d1a8d71d86319b53dde59c36b65ef1b626eb6c8d412b2c61f21d8f97dc735ed71075d4a1940fe721d8d3c847ace3d0ac820fa0a30cf6a76c0169db1a60cc49523313d61cd315a2656f9a6f0570b3d76aadc9cd3057948846adb05c92b54d8c92233df94c31a45ca94170995d5d9c3c2eb7cb1c49b1eafd60794d3ba9c4e2d53d5c8dbc3983265b04d23bc14d29ea4744e1757dc5191ad0caeee293316d727c6bc2be10c9fe12ad139289b6164a47f477fef9094aa30c1dee6e0a00c9b38a2b8cb304975026275d5798c9cf1b5239b0326d70fe5faec567ff439c2eeda7bf1a3768feddf648d21fb651be85dacbf28958908f54e

2026-10-21 11:44:56 UTC

- reply

confirmed working on 8.5.10 too
https://fedi.katze.sh/system/media_attachments/files/117/478/717/531/160/332/original/88ce9529ccf26d46.png

2026-10-21 11:27:01 UTC

- reply

ok thinking more about this, there's no way this is the same vuln, this is another one.
today is really a day for php.

2026-10-21 11:19:59 UTC

- reply

the "get a writeup done quickly before the patch drops" vs the "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"

2026-10-21 11:12:40 UTC

- reply

"ERROR: AddressSanitizer: attempting double-free" from php 8.4.25

2026-10-21 11:10:18 UTC

oh noooooo

2026-09-18 06:01:57 UTC

"I probably have one of the sanest home assistant installs" girl home assistant and sane do not go in the same sentence

2026-08-27 17:43:32 UTC

"It concerns me how enthusiastic you are about being yelled at."

2026-07-17 09:26:41 UTC

"ow, ow... my ears fell off"

2026-05-11 17:33:26 UTC

These hashing algorithms are getting out of control
https://fedi.katze.sh/system/media_attachments/files/116/557/133/772/532/911/original/0eedd462eefd07bc.jpg

2026-05-11 14:21:04 UTC

Does anyone have a spare GPN ticket they would be willing to sell to me?

2026-05-11 13:09:04 UTC

- reply

And the final 4
https://fedi.katze.sh/system/media_attachments/files/116/556/091/265/961/263/original/fb58f47fed1359d3.webp
https://fedi.katze.sh/system/media_attachments/files/116/556/092/934/407/295/original/485d1f4e1cf7df0e.webp
https://fedi.katze.sh/system/media_attachments/files/116/556/093/045/032/134/original/d768269cd0113f21.webp
https://fedi.katze.sh/system/media_attachments/files/116/556/094/721/566/050/original/b8ac0a3471138247.webp

2026-05-11 13:06:02 UTC

- reply

More buildings in Rennes
https://fedi.katze.sh/system/media_attachments/files/116/556/082/432/985/406/original/6966d314e283a5da.webp
https://fedi.katze.sh/system/media_attachments/files/116/556/084/164/575/492/original/bf524db0607e930e.webp
https://fedi.katze.sh/system/media_attachments/files/116/556/084/335/666/912/original/82bf04ab41a645a8.webp
https://fedi.katze.sh/system/media_attachments/files/116/556/084/731/559/383/original/8e9d6c5610272bee.webp

2026-05-11 13:02:24 UTC

- reply

More of a pretty girl! This time looking at the camera (@npub1xn4…weal)
https://fedi.katze.sh/system/media_attachments/files/116/556/060/835/962/286/original/107698e215e35ce2.webp
https://fedi.katze.sh/system/media_attachments/files/116/556/061/450/816/813/original/2135514d0f512283.webp
https://fedi.katze.sh/system/media_attachments/files/116/556/068/554/935/135/original/508bbf23242cafa7.webp

2026-05-11 12:58:28 UTC

- reply

A pretty girl! (@npub1xn4…weal)
https://fedi.katze.sh/system/media_attachments/files/116/556/033/074/917/416/original/7c93980393aa1c73.webp
https://fedi.katze.sh/system/media_attachments/files/116/556/033/976/221/848/original/1e13ef8c4551ed99.webp
https://fedi.katze.sh/system/media_attachments/files/116/556/038/291/979/928/original/987544ea37e1bdd7.webp
https://fedi.katze.sh/system/media_attachments/files/116/556/053/050/913/708/original/6b4b69f1bae967a9.webp

2026-05-11 12:50:45 UTC

- reply

The inside of a Metro station, and some more buildings
https://fedi.katze.sh/system/media_attachments/files/116/556/017/889/851/552/original/7473fee33cf94558.webp
https://fedi.katze.sh/system/media_attachments/files/116/556/018/440/871/214/original/e4535eacaeed351a.webp
https://fedi.katze.sh/system/media_attachments/files/116/556/018/519/047/373/original/48861095b34176cc.webp
https://fedi.katze.sh/system/media_attachments/files/116/556/018/701/284/346/original/f39762320e53b701.webp

2026-05-11 12:47:00 UTC

- reply

Buildings in Rennes
https://fedi.katze.sh/system/media_attachments/files/116/556/004/850/742/421/original/2712b549085c7506.webp
https://fedi.katze.sh/system/media_attachments/files/116/556/004/969/396/939/original/ab4837767a56f0dd.webp
https://fedi.katze.sh/system/media_attachments/files/116/556/005/907/581/221/original/bfd50f313eeac64e.webp
https://fedi.katze.sh/system/media_attachments/files/116/556/006/617/414/340/original/fa328b3f15fad96a.webp

2026-05-11 12:43:52 UTC

- reply

Paris!
https://fedi.katze.sh/system/media_attachments/files/116/555/995/657/839/084/original/8131bb57187a0df7.webp
https://fedi.katze.sh/system/media_attachments/files/116/555/996/739/917/777/original/f4438469619e09d0.webp
https://fedi.katze.sh/system/media_attachments/files/116/555/998/171/117/718/original/a51430f48830256f.webp
https://fedi.katze.sh/system/media_attachments/files/116/555/998/326/304/817/original/282b55d0028f64db.webp

2026-05-11 12:41:48 UTC

- reply

Flowers!
https://fedi.katze.sh/system/media_attachments/files/116/555/986/708/661/636/original/55a3227abc940f8a.webp
https://fedi.katze.sh/system/media_attachments/files/116/555/987/009/309/890/original/4f2add602941ba08.webp
https://fedi.katze.sh/system/media_attachments/files/116/555/987/105/086/100/original/725d5792c466a486.webp
https://fedi.katze.sh/system/media_attachments/files/116/555/987/128/742/924/original/61713c00bad92858.webp

2026-05-11 12:39:36 UTC

France Trip Photo Thread!
(The alt text on these are possibly not so great, and one of them is even missing as I did not know what to write, suggestions are welcome)

2026-05-11 09:12:08 UTC

I am approaching Paris at concerning speeds (the TVG is not going fast, but any movement in the direction of Paris is concerning)

2026-05-09 20:17:37 UTC

oh: "I should be a tide pod"

2026-05-07 10:15:47 UTC

- reply

Then why is it here?
https://fedi.katze.sh/system/media_attachments/files/116/532/752/199/819/128/original/e656d40e737e8a97.jpg

2026-05-07 09:45:49 UTC

Omg the tower from Sailor Moon is real???
https://fedi.katze.sh/system/media_attachments/files/116/532/647/372/679/450/original/e82beda2b0e2d1a9.jpg

2026-04-07 11:39:33 UTC

Boosts appreciated
I am looking for a new job, specifically in embedded development or embedded security. I have been writing Rust professionally for 5 years, and am also comfortable in C. I've found vulnerabilities in multiple generations of NVIDIA hardware, and have held talks on this. If anyone knows of any openings, or would want to refer me (I am open to more broad Software Engineering work if it's via referral), I would appreciate it. I'm open to both remote work, and hybrid inside Berlin. I'm reachable either here, or via mail at mail@katze.sh
#getfedihired