Video wird geladen...

Video konnte nicht geladen werden

Beim Laden dieses Videos ist ein Problem aufgetreten. Dies könnte an einem vorübergehenden Netzwerkproblem liegen oder das Video ist möglicherweise nicht verfügbar.

This beast was born when 0xkasper discovered a 0-day bug with Glider. Query finds the transaction decoding library that has a memory corruption bug leading to an overflow. Glider Contest kicks off Nov 6. Take your slice of $50,000.

Glider

6,078 subscribers

16,625 Aufrufe • vor 9 Monaten •via X (Twitter)

Anya Rossi• Live Now

Private livecam show

0 Kommentare

Keine Kommentare verfügbar

Kommentare vom Original-Post werden hier angezeigt

Ähnliche Videos

An analysis of CVE-2026-21236 - A heap based buffer overflow in the Microsoft Windows Kernel afd.sys - was just published by Emily L a recent secondment with my team EDG! Nice work for her first triage of a kernel memory corruption bug!

An analysis of CVE-2026-21236 - A heap based buffer overflow in the Microsoft Windows Kernel afd.sys - was just published by Emily L a recent secondment with my team EDG! Nice work for her first triage of a kernel memory corruption bug!

Alex Plaskett

17,030 Aufrufe • vor 5 Monaten

⚽ Day 44 of building my soccer/football game solo in Unreal Engine. Tonight, we solved an animation bug that was occuring when blending animations together. Can you spot the difference between the two animation clips (right drag back versus left drag back? 🐛BUG: All animations rotated the player mesh (character body), but the capsule underneath (invisible box) never turned at all. 🎞️At the end of the animation, you'd see the player facing the direction where the animation begun on frame 0, then flick to where I was moving the left analog stick. This was resolved with a tool I built which moves the rotation to the invisible box instead. The same animations play, but now the game knows that the character's capsule has turned with an animation. #indiedev #gamedev #soccer #football #unrealengine

⚽ Day 44 of building my soccer/football game solo in Unreal Engine. Tonight, we solved an animation bug that was occuring when blending animations together. Can you spot the difference between the two animation clips (right drag back versus left drag back? 🐛BUG: All animations rotated the player mesh (character body), but the capsule underneath (invisible box) never turned at all. 🎞️At the end of the animation, you'd see the player facing the direction where the animation begun on frame 0, then flick to where I was moving the left analog stick. This was resolved with a tool I built which moves the rotation to the invisible box instead. The same animations play, but now the game knows that the character's capsule has turned with an animation. #indiedev #gamedev #soccer #football #unrealengine

Josh

19,988 Aufrufe • vor 13 Tagen

BSA And Recoil Bug on SO-14 The SO-14 currently has a bug related to its "BSA". When you fire without a finger holding on the screen, the weapon functions as per intended, no BSA and extremely low recoil. However, firing with an additional finger holding on the screen will result in the weapon having noticeable recoil and bullet spread. This means that tracking is currently not viable with this weapon as any movement to your aim will cause the gun to be inaccurate. #CODMobile #callofdutymobile #codm #codmnews #codmleaks Follow Us & Join our Discord server for the latest news and leaks.

BSA And Recoil Bug on SO-14 The SO-14 currently has a bug related to its "BSA". When you fire without a finger holding on the screen, the weapon functions as per intended, no BSA and extremely low recoil. However, firing with an additional finger holding on the screen will result in the weapon having noticeable recoil and bullet spread. This means that tracking is currently not viable with this weapon as any movement to your aim will cause the gun to be inaccurate. #CODMobile #callofdutymobile #codm #codmnews #codmleaks Follow Us & Join our Discord server for the latest news and leaks.

Leakers On Duty

33,538 Aufrufe • vor 8 Monaten

Don’t worry, even Olympians weren’t perfect when they started their sport. The football competition kicks off today at #Paris2024! Want to perfect your skills? ⚽ With a lot of practice, dedication, and help from your community, you too could become an Olympian one day. 💪

Don’t worry, even Olympians weren’t perfect when they started their sport. The football competition kicks off today at #Paris2024! Want to perfect your skills? ⚽ With a lot of practice, dedication, and help from your community, you too could become an Olympian one day. 💪

The Olympic Games

80,092 Aufrufe • vor 2 Jahren

As a graphics engine coder I think when you look at a flickering bug like this one in the video below it’s not immediately obvious what is going on. The key here is observation - to study this flickering/bugged render carefully - what do we see? Firstly for me it was very obvious that nearly all of the scene shadows were flashing on and off - but (but!) there was a secondary issue where some buildings and parts of the sky were also flashing purple. Hmmmm. Interesting. I initially thought then this might be two separate bugs - but because the sky purple element could only based on full screen post fx and not 3D rendering I looked at this first with a few GPU captures to step through all our post processing to find the rendering stage which made these pixels turn purple: When I did this I found the colour 3D texture LUT grading that makes our different biomes have unique colour palettes was going very wrong - colours near 0 or 1 were wrapping and making the purple elements that we see in the said sky and base parts. The only way this could happen was if the texture was corrupt (which it was not) or if the 3D texture sampling was wrapping and not clamped as intended. That was the Eureka moment - because if the post fx had the wrong texture sampler then the disappearing shadows which also require an exact texture sampler for comparing depth might be also wrong because of the same kind of texture sampling issue! So with this idea that the engine was using the wrong texture samplers, but only in very high draw call scenes like the big base here I the looked at some engine limits and found the bug very quickly - a circular dx12 descriptor buffer for samplers running out over multiple frames, reusing the wrong data for new scenes inflight. Hence the flickering, as the GPU randomly got wrong samplers for some post textures or shadow depth. Easy to fix with triple limits for future expansion and also adding an assert/debug spam in case this limit is ever reached again - QA testers would see this message and report if they ever saw a flicker with this style of bug. My bug and my bad from 2017 porting NMS to DX12 without foreseeing how massively complex bases and our game would grow.

As a graphics engine coder I think when you look at a flickering bug like this one in the video below it’s not immediately obvious what is going on. The key here is observation - to study this flickering/bugged render carefully - what do we see? Firstly for me it was very obvious that nearly all of the scene shadows were flashing on and off - but (but!) there was a secondary issue where some buildings and parts of the sky were also flashing purple. Hmmmm. Interesting. I initially thought then this might be two separate bugs - but because the sky purple element could only based on full screen post fx and not 3D rendering I looked at this first with a few GPU captures to step through all our post processing to find the rendering stage which made these pixels turn purple: When I did this I found the colour 3D texture LUT grading that makes our different biomes have unique colour palettes was going very wrong - colours near 0 or 1 were wrapping and making the purple elements that we see in the said sky and base parts. The only way this could happen was if the texture was corrupt (which it was not) or if the 3D texture sampling was wrapping and not clamped as intended. That was the Eureka moment - because if the post fx had the wrong texture sampler then the disappearing shadows which also require an exact texture sampler for comparing depth might be also wrong because of the same kind of texture sampling issue! So with this idea that the engine was using the wrong texture samplers, but only in very high draw call scenes like the big base here I the looked at some engine limits and found the bug very quickly - a circular dx12 descriptor buffer for samplers running out over multiple frames, reusing the wrong data for new scenes inflight. Hence the flickering, as the GPU randomly got wrong samplers for some post textures or shadow depth. Easy to fix with triple limits for future expansion and also adding an assert/debug spam in case this limit is ever reached again - QA testers would see this message and report if they ever saw a flicker with this style of bug. My bug and my bad from 2017 porting NMS to DX12 without foreseeing how massively complex bases and our game would grow.

Martin Griffiths

72,828 Aufrufe • vor 1 Jahr

OpenAI's AI broke out of a locked test environment, got onto the internet, and hacked into Hugging Face's servers. It did this entirely on its own. No human told it to. Here's what happened in plain English. OpenAI was testing how good its newest AI models are at hacking. They put the AI on a locked computer with no internet access and gave it a cybersecurity challenge to solve. The AI couldn't solve it the normal way. So it started looking for a way out. It found a software bug that nobody knew about. It used that bug to escape the locked computer and get onto the internet. Once online, the AI figured out that Hugging Face, a platform where AI companies store their models and data, might have the answers to its test. It found stolen login details and discovered another unknown bug in Hugging Face's software. It combined both to break into their servers and grab the test answers. It did all of this to cheat on a test. Hugging Face's security team caught it and shut it down. Both companies are now working together on the investigation. The part that should get your attention is that nobody programmed any of this. The AI picked its own targets, chained together multiple attack methods, and pulled it off across two different companies' systems without a single human telling it what to do.

OpenAI's AI broke out of a locked test environment, got onto the internet, and hacked into Hugging Face's servers. It did this entirely on its own. No human told it to. Here's what happened in plain English. OpenAI was testing how good its newest AI models are at hacking. They put the AI on a locked computer with no internet access and gave it a cybersecurity challenge to solve. The AI couldn't solve it the normal way. So it started looking for a way out. It found a software bug that nobody knew about. It used that bug to escape the locked computer and get onto the internet. Once online, the AI figured out that Hugging Face, a platform where AI companies store their models and data, might have the answers to its test. It found stolen login details and discovered another unknown bug in Hugging Face's software. It combined both to break into their servers and grab the test answers. It did all of this to cheat on a test. Hugging Face's security team caught it and shut it down. Both companies are now working together on the investigation. The part that should get your attention is that nobody programmed any of this. The AI picked its own targets, chained together multiple attack methods, and pulled it off across two different companies' systems without a single human telling it what to do.

Alex Prompter

7,086,784 Aufrufe • vor 24 Tagen

Rafif has lived 37,497,600 seconds since the day she was born, yet during all this time she has only known fear, hunger, and terror, enduring one of the most brutal genocides this world has ever witnessed. Today, you can be the reason she gets a chance at life — in a safe environment, in a world where she can grow with care, education, and love instead of pain. Do what you can for her, and give her a voice. Please take just one second of your time to like and share. Thank you.

Rafif has lived 37,497,600 seconds since the day she was born, yet during all this time she has only known fear, hunger, and terror, enduring one of the most brutal genocides this world has ever witnessed. Today, you can be the reason she gets a chance at life — in a safe environment, in a world where she can grow with care, education, and love instead of pain. Do what you can for her, and give her a voice. Please take just one second of your time to like and share. Thank you.

Mohammed jawad 🇵🇸

22,730 Aufrufe • vor 10 Monaten

This is Smudge. He was found by the side of a road with both of his front legs broken, likely from having been hit by a car. Thanks to your recent support of our ‘tell your dog i said hi’ merch, 15/10 Foundation was able to cover his entire $13,000 surgery to repair them both. His care team quickly discovered that he was a bit of a velcro dog, wanting to be held close despite his clunky casts. He has since fully healed and has found a forever family that is more than happy to snuggle on him full-time ❤️‍🩹

This is Smudge. He was found by the side of a road with both of his front legs broken, likely from having been hit by a car. Thanks to your recent support of our ‘tell your dog i said hi’ merch, 15/10 Foundation was able to cover his entire $13,000 surgery to repair them both. His care team quickly discovered that he was a bit of a velcro dog, wanting to be held close despite his clunky casts. He has since fully healed and has found a forever family that is more than happy to snuggle on him full-time ❤️‍🩹

WeRateDogs

163,658 Aufrufe • vor 1 Jahr

Introducing my new OSS framework: OhSnap provides really simple way to record and reproduce the data your users saw when encountering an issue (bug/crash), integration in your project should take a few minutes at most. Majority of bugs are related to data you have to deal with and often times we have to work with frequently changing data via network API's. Even if you have access to multiple environments (prod/staging/dev) it's still going to be PITA to reproduce a lot of bugs your user saw, since we often get to them a long time after the bug occured... OhSnap allows you to easily record any data your app downloads, pack it and put it on server so that you can replay it on your device later on, while connected to debugger and save hours of development time trying to figure out what exactly they experienced! Here's a demo of 2 app instances running, and me manipulating what server reply I'll be getting, there is 1 line of code needed to record and reply this data (outside of just setting up your framework). I built this so that I can show dev tool building process for the members of which I encourage you to join if you want to put your engineering efficiency at a different level😉

Introducing my new OSS framework: OhSnap provides really simple way to record and reproduce the data your users saw when encountering an issue (bug/crash), integration in your project should take a few minutes at most. Majority of bugs are related to data you have to deal with and often times we have to work with frequently changing data via network API's. Even if you have access to multiple environments (prod/staging/dev) it's still going to be PITA to reproduce a lot of bugs your user saw, since we often get to them a long time after the bug occured... OhSnap allows you to easily record any data your app downloads, pack it and put it on server so that you can replay it on your device later on, while connected to debugger and save hours of development time trying to figure out what exactly they experienced! Here's a demo of 2 app instances running, and me manipulating what server reply I'll be getting, there is 1 line of code needed to record and reply this data (outside of just setting up your framework). I built this so that I can show dev tool building process for the members of which I encourage you to join if you want to put your engineering efficiency at a different level😉

Krzysztof Zabłocki

30,484 Aufrufe • vor 2 Jahren

#ContestAlert 🚨 Make your Diwali a pay-tastic affair! 🎇 Participate in the #CheQItToWinIt contest and be one of the 7 lucky winners to get a Nothing Phone (2a) Plus!📱 Here’s how to get in on the festive fun: ✅Download the CheQ app ✅Pay your credit card bill on CheQ ✅Take a screenshot of your payment confirmation screen ✅Share the screenshot, tag CheQ and use #CheQItToWinIt. Make sure you’re following CheQ too! 🏆Every day, one lucky winner wins a Nothing Phone (2a) Plus! 🔊Rules ✅Contest duration: Oct 30 - Nov 5, 2024. ✅Only payment made within the contest period will be considered valid. ✅A minimum total transaction of ₹5000 is required to qualify ✅Multiple entries allowed with different payment screenshots. 📢Winner Announcement ✅All the eligible entries will be selected after verification of their payment by the CheQ Team. ✅All the winners will be announced on this page on November 11. 🔥Brownie points on more retweets! 👀 It’s that simple to make this Diwali truly fantastic! Participate now! 🚀 #CheQItToWinIt #ContestAlert #NothingPhone #GiveawayAlert #CreditCards #CheQ #Diwali #creditcardbillpayments

#ContestAlert 🚨 Make your Diwali a pay-tastic affair! 🎇 Participate in the #CheQItToWinIt contest and be one of the 7 lucky winners to get a Nothing Phone (2a) Plus!📱 Here’s how to get in on the festive fun: ✅Download the CheQ app ✅Pay your credit card bill on CheQ ✅Take a screenshot of your payment confirmation screen ✅Share the screenshot, tag CheQ and use #CheQItToWinIt. Make sure you’re following CheQ too! 🏆Every day, one lucky winner wins a Nothing Phone (2a) Plus! 🔊Rules ✅Contest duration: Oct 30 - Nov 5, 2024. ✅Only payment made within the contest period will be considered valid. ✅A minimum total transaction of ₹5000 is required to qualify ✅Multiple entries allowed with different payment screenshots. 📢Winner Announcement ✅All the eligible entries will be selected after verification of their payment by the CheQ Team. ✅All the winners will be announced on this page on November 11. 🔥Brownie points on more retweets! 👀 It’s that simple to make this Diwali truly fantastic! Participate now! 🚀 #CheQItToWinIt #ContestAlert #NothingPhone #GiveawayAlert #CreditCards #CheQ #Diwali #creditcardbillpayments

CheQ

248,543 Aufrufe • vor 1 Jahr

NATIONAL OOTD DAY On June 30, National OOTD Day gives us an opportunity to express ourselves and document our personal style by sharing our Outfit Of The Day on social media. Get ready to show off your best self by sharing your OOTD that makes you feel beautiful. #NATIONALOOTDDAY Fashion and self-expression both play a role in self-confidence. On National OOTD Day we want you to take a few extra minutes getting ready, select an outfit that reflects your outstanding style, and put on the perfect smile before taking a selfie. Then let the world know just how much better your day is going to be when you have your OOTD!

NATIONAL OOTD DAY On June 30, National OOTD Day gives us an opportunity to express ourselves and document our personal style by sharing our Outfit Of The Day on social media. Get ready to show off your best self by sharing your OOTD that makes you feel beautiful. #NATIONALOOTDDAY Fashion and self-expression both play a role in self-confidence. On National OOTD Day we want you to take a few extra minutes getting ready, select an outfit that reflects your outstanding style, and put on the perfect smile before taking a selfie. Then let the world know just how much better your day is going to be when you have your OOTD!

Tracy Lynne 💕

17,579 Aufrufe • vor 1 Monat

It seems that there's now a somewhat focused effort to take out Motor Sich for good. The plant has been hit many times since spring 2022. The other day it was also hit by a FAB-500 with an UMPK guidance kit, meaning that, yes, Zaporozhye is now in range of guided aerial bombs.

It seems that there's now a somewhat focused effort to take out Motor Sich for good. The plant has been hit many times since spring 2022. The other day it was also hit by a FAB-500 with an UMPK guidance kit, meaning that, yes, Zaporozhye is now in range of guided aerial bombs.

Russians With Attitude

73,087 Aufrufe • vor 10 Monaten

The Library of Alexandria created the first catalog of all human knowledge 2,300 years ago, and a team of fewer than 20 people just finished the modern version and made it free for the entire planet. It is called OpenAlex. The name is not an accident. The ancient library had the Pinakes, a catalog mapping every scroll, every author, every subject. When the library fell, the map of what humanity knew fell with it. For the last two decades, that map existed again, but it was locked up. Elsevier owns Scopus. Clarivate owns Web of Science. If your university could not afford the subscription, you could not see the structure of science itself. Entire countries were priced out of knowing what research existed. OpenAlex indexes 474 million scholarly works. Every author disambiguated. Every citation traced. Every institution and funder connected. It updates with roughly 50,000 new works every day. The whole thing is CC0. Not just free to search. Free to download, copy, sell, and build on. The API allows 100,000 requests a day without an account. The ancient library burned and the catalog was lost for two millennia. The new one cannot burn. Anyone can hold a copy.

The Library of Alexandria created the first catalog of all human knowledge 2,300 years ago, and a team of fewer than 20 people just finished the modern version and made it free for the entire planet. It is called OpenAlex. The name is not an accident. The ancient library had the Pinakes, a catalog mapping every scroll, every author, every subject. When the library fell, the map of what humanity knew fell with it. For the last two decades, that map existed again, but it was locked up. Elsevier owns Scopus. Clarivate owns Web of Science. If your university could not afford the subscription, you could not see the structure of science itself. Entire countries were priced out of knowing what research existed. OpenAlex indexes 474 million scholarly works. Every author disambiguated. Every citation traced. Every institution and funder connected. It updates with roughly 50,000 new works every day. The whole thing is CC0. Not just free to search. Free to download, copy, sell, and build on. The API allows 100,000 requests a day without an account. The ancient library burned and the catalog was lost for two millennia. The new one cannot burn. Anyone can hold a copy.

Ihtesham Ali

139,792 Aufrufe • vor 2 Monaten

This was the day before my Mum Louise was declared in such pain and discomfort that she needed to be put on a ventilator and EOL life care started although of which was never discussed with me first. It was the beginning of June 2020 when her hospital shockingly started Mum on the midazolam & morphine cocktail NG163 but it wasn’t until her last day the 8th June that I discovered a driver attached to her arm and the horrors were finally related to me. Sadly I never discovered the full story until the start of this year when I finally received mums medical records, roughly 480 pages of them and such was the depth of evil carried out in a “care” setting that I started legal proceedings to try and save other family’s going through what I and so many others have also had to go through. Our family’s should’ve been safe…

This was the day before my Mum Louise was declared in such pain and discomfort that she needed to be put on a ventilator and EOL life care started although of which was never discussed with me first. It was the beginning of June 2020 when her hospital shockingly started Mum on the midazolam & morphine cocktail NG163 but it wasn’t until her last day the 8th June that I discovered a driver attached to her arm and the horrors were finally related to me. Sadly I never discovered the full story until the start of this year when I finally received mums medical records, roughly 480 pages of them and such was the depth of evil carried out in a “care” setting that I started legal proceedings to try and save other family’s going through what I and so many others have also had to go through. Our family’s should’ve been safe…

Wayne Cunnington

579,803 Aufrufe • vor 2 Jahren

Enjoy this journey while you can. There will be a day when you don’t have anyone to throw with or lift with or play pickup racquetball and then hit the sauna after with. There will be a day when you can’t immediately roll from your workout into breakfast/lunch/dinner with 8 of your best friends. There will be a day when disputes cannot be settled with a game of madden, 2K or the show. You will realize that showing up late for work pales in comparison to the fear you had about showing up late to the field or the weight room. You can say that you’ll still train hard, keep yourself in shape, hold YOURSELF accountable. It’s easy to say when you have a goal you’re working towards with a collective group. But when you don’t have that, damn it gets hard. So enjoy it. Take advantage of the time and the energy. For some guys it happens after 6 years of pro ball. For others it happens after 4 years of college. But it will leave you. Let me repeat that: IT WILL LEAVE YOU AND IT SUCKS WHEN IT DOES.

Enjoy this journey while you can. There will be a day when you don’t have anyone to throw with or lift with or play pickup racquetball and then hit the sauna after with. There will be a day when you can’t immediately roll from your workout into breakfast/lunch/dinner with 8 of your best friends. There will be a day when disputes cannot be settled with a game of madden, 2K or the show. You will realize that showing up late for work pales in comparison to the fear you had about showing up late to the field or the weight room. You can say that you’ll still train hard, keep yourself in shape, hold YOURSELF accountable. It’s easy to say when you have a goal you’re working towards with a collective group. But when you don’t have that, damn it gets hard. So enjoy it. Take advantage of the time and the energy. For some guys it happens after 6 years of pro ball. For others it happens after 4 years of college. But it will leave you. Let me repeat that: IT WILL LEAVE YOU AND IT SUCKS WHEN IT DOES.

Jack Barry

63,098 Aufrufe • vor 1 Jahr

I was eleven years old. My mother was taking me to an eye specialist when we were stopped by a patrol of the IRGC at this very spot. A few strands of my hair were visible, and I had grown too tall for my trousers. Again and again she pleaded with them not to take me, explaining that I was tall for my age, that she had just returned from the front lines and had not yet found the time to buy me new clothes. I was frightened, but my mother's fear was far greater than my own. Many years have passed since that afternoon. Yet when I see this place of cruelty and its power holders reduced to dust, I am overcome with emotion and an unexpected, trembling relief. To witness a regime of terror crumbling into ruin feels like learning to walk after long paralysis, like unfurling wings and discovering flight, like water offered at last to one who has wandered for hours through the Sahara. I feel a release, a memory long buried in the body beginning at last to loosen. In this moment, the child I once was seems to breathe again.

I was eleven years old. My mother was taking me to an eye specialist when we were stopped by a patrol of the IRGC at this very spot. A few strands of my hair were visible, and I had grown too tall for my trousers. Again and again she pleaded with them not to take me, explaining that I was tall for my age, that she had just returned from the front lines and had not yet found the time to buy me new clothes. I was frightened, but my mother's fear was far greater than my own. Many years have passed since that afternoon. Yet when I see this place of cruelty and its power holders reduced to dust, I am overcome with emotion and an unexpected, trembling relief. To witness a regime of terror crumbling into ruin feels like learning to walk after long paralysis, like unfurling wings and discovering flight, like water offered at last to one who has wandered for hours through the Sahara. I feel a release, a memory long buried in the body beginning at last to loosen. In this moment, the child I once was seems to breathe again.

Sheema Kalbasi شیما کلباسی

1,184,987 Aufrufe • vor 5 Monaten