Nostr notes by Dmytro Oleksiuk

Slop-coded SPARC64 exploit for Solaris kernel vuln that recently ...

2026-07-30T17:59:17Z

Slop-coded SPARC64 exploit for Solaris kernel vuln that recently been fixed in Illumos by Dan McDonald:
https://www.illumos.org/issues/18118
https://github.com/illumos/illumos-gate/commit/08292a06bdfa570d21571965b7bd0f053b3aaaa5
No KASLR, no kernel heap NX -- ain't difficult target, heh. I don't have an access to latest 11.4 SRU to check if it was fixed by Oracle on current version, but on 11.3 SRU 36 it still there

👏 👏 👏 😊 ...

2026-07-16T11:23:51Z

👏 👏 👏 😊
https://lore.kernel.org/linux-media/CAHk-=wi4zC+Ze8e+p3tMv8TtG_80KzsZ1syL9anBtmEh5Z40vg@mail.gmail.com/

RE: https://mastodon.social/@d_olex/116902388645366483 Many ...

2026-07-12T09:51:22Z

RE: https://mastodon.social/@d_olex/116902388645366483

Many people have drawn entirely wrong conclusions from this post. Meanwhile, an actual solution for preventing this kind of tracking lays in a different ballpark:
1) Get a burner laptop for your hacktivism or organized crime activities, never use it for anything else;
2) Get some dedicated hardware to run your VPN or Tor client, for example -- a portable battery powered router with OpenWrt;
3) Configure and use this setup in a way that prevents the laptop from accessing the internet directly;

JIT improves performance when the rival is sorce code interpreter ...

2025-11-23T17:42:52Z

In reply to nevent1q…wrh4
_________________________

JIT improves performance when the rival is sorce code interpreter or byte-code VM, I’m speaking about shipping already compiled code for target platform/architecture

While environmentalists loosing their shit about carbon footprint ...

2025-11-23T17:24:05Z

While environmentalists loosing their shit about carbon footprint of blockchains and LLM models — I have another question: has anyone tried to estimate comparative carbon footprint of JS/JVM/.NET JiT compilers? I mean, like, seriously — instead if shipping pre-compiled binary artifacts we forcing millions of clients with nearly identical hardware and software configuration to perform the same set of unnecessary heavy computations every time when someone visits random web page or opens random app

It’s mostly related to “custom tools” part, I haven’t ...

2025-11-15T15:04:59Z

In reply to nevent1q…sf50
_________________________

It’s mostly related to “custom tools” part, I haven’t experimented much with public ones because even most advanced models can’t do much if your tooling suck for the first place

You have to sign NDA 😇

2025-11-15T14:00:17Z

In reply to nevent1q…89g4
_________________________

You have to sign NDA 😇

No

2025-11-15T13:57:25Z

In reply to nevent1q…ecwa
_________________________

No

People who went skeptical on “AI-orchestrated APT” report by ...

2025-11-15T13:55:59Z

People who went skeptical on “AI-orchestrated APT” report by Anthropic most likely haven’t tried to use their recent models coupled with custom MCP tools for intrusion security purposes. As person who did tried — I can say yes, they’re really that good. Getting Sonnet to hack shit for you isn’t even a challenge anymore, while gaining the same performance level from self-hosted models still is

On yes, this one and Vergilius Project as well: ...

2025-09-29T18:37:04Z

In reply to nevent1q…425u
_________________________

On yes, this one and Vergilius Project as well: https://www.vergiliusproject.com/ It’s not an actual documentation since they have only structures/prototypes info, but it’s really nice and accurate

Incomplete and outdated tho 😔 I seen something similar but ...

2025-09-29T17:24:18Z

In reply to nevent1q…gxvu
_________________________

Incomplete and outdated tho 😔
I seen something similar but more recent, have to check my notes/bookmarks

I’m sorry, but Facebook did more harm to humankind than all ...

2025-05-07T17:39:26Z

I’m sorry, but Facebook did more harm to humankind than all NSO-alike spyware vendors of the world altogether. You are fighting into the wrong direction