rsmudge
Another Crystal Palace and Tradecraft Garden release is now available. This release fills some gaps from recent releases and rounds out the feature set (aka, stuff I wanted to ship, but didn’t get to in time). Language-specific Handlers Two releases ago, I added stack unwinding meta-info...
adamfineart
A recorded lecture providing a brief insight into the process of rebuilding the oeuvre of female artist Emma Soyer, nee Jones (c. 1809-1842). The lecture is presented by Dominic Sanchez-Cabello and Adam Busiakiewicz and was originally devised and delivered for the Royal Academy in June 2026.
rsmudge
A new Tradecraft Garden and Crystal Palace release is available. This release introduces a proper install script and consolidates its commands behind a cpl [verb] CLI interface. I’ve also added an x64 tail call intrinsic (__transfer) and expanded API hashing beyond ror13. The new CLI...
Mr.Z
Introduction Welcome to the second blog post exploring the new capabilities of the Aether v0.9 stable release. Following the beta launch(v0.8), the community provided valuable feedback and test cases involving packed malware, custom builds, and unique evasions. Offensive security consistently...
adamfineart
I’m joining forces with my friend Dominic Sanchez-Cabello this week in a talk at the Royal Academy, bringing to life our work on rebuilding the oeuvre of Emma Soyer (c. 1809-1842). The audience of Bendor Grosvenor’s connoisseurship course will receive our first public talk on the matter, which has...
0xinsider — Prediction Market Analytics
Across 9.46 million resolved Polymarket positions, implied prices track real outcomes closely: a 5-cent contract resolves true 3.5% of the time, a 95-cent contract 98.4%. The gap opens in the middle, where positions priced 45 to 65 cents win 6 to 9 points more often than the price implied. Here is...
rsmudge
Last week, I came across the Asynchronous PICOs project released by Marcos Gonzalez Hermida at NCC Group. The project is a source code framework for in-process long-running PIC jobs in Cobalt Strike. Async PICOs and Custom Beacon Wakeups in Cobalt Strike Async PICO HUB (Project code @...
0xinsider — Prediction Market Analytics
A sportsbook sets a line and takes the other side of your bet. A prediction market lets the crowd set the price and collects a fee on the volume. That single difference in who holds the risk changes the pricing, the limits, and the data. Here is the primer for anyone in the betting industry trying...
rsmudge
We’re at the 12th release of Crystal Palace and marking one year in the Tradecraft Garden. This release adds reference relaxation to make global references PIC-friendly. I’ve also added stack unwinding generation for Crystal Palace outputs too. And, I’ve got some thoughts on an alternative to...
Susan Stepney
… that my first fully dated item appeared on my website: a review of Clannad’s 1996 tour at the Cambridge Corn Exchange, attended a week earlier.I blogged about this piece of history 10 years ago. What's changed since then?Back in 2016 I was working at the University of York. I have since...
rsmudge
Last week, memN0ps published DoublePulsar: A User-defined Reflective Loader in the Crystal Palace and Tradecraft Garden Era. It’s a lengthy blog post, about 50 printed pages. And, most of those are devoted to memN0ps’ fantastic deep-dive into evasion mechanics and conquering the challenges of...
Steve Saideman
The llamas were greedybut sweet. On my way home from a week plus of research and tourism in Chile. One of the things I forgot from last time is how far away Santiago is: six hours from Panama City, which is about the same from Newark. So, a long last flight here and a long first flight home on...
rsmudge
I have a challenge for you: How much beaconing agent functionality can you fit into 4KB PIC? How do you do it? This isn’t a shellcode golf challenge. It’s about elegant ways to build common agent stuff in C. I was able to get a WinINet loop, a light command kernel, and a BOF runner in mine. To...
0xinsider — Prediction Market Analytics
Ten wallets. $122.1 million in combined profit. But only three of them carry an S-grade, and the biggest political winners are all graded C. The highest earners on Polymarket are not the best traders on Polymarket, and the gap between those two things is the most useful thing on the leaderboard.
0xinsider — Prediction Market Analytics
Traders who execute between 8-12 UTC average +$21,786 in P&L. Traders in the 16-20 UTC window average -$14,099. Same platform, same markets, same mechanics: a $36,000 difference driven entirely by when orders hit the book. The timing of your trades may matter more than what you trade.
0xinsider — Prediction Market Analytics
The previous NBA analysis mixed conflicting trade totals with hardcoded charts and no reproducible dated source artifact. Those claims and visuals are withdrawn.
Arthur Turrell
I have a chapter in a new volume of the Sante Fe Institute’s series on The Economy As A Complex Evolving System. Alongside my chapter, which is about what data science and AI can do for understanding increasingly complex economies, there are contributions on: economic complexity analysis...
rsmudge
Last month, I released a Yara signature generator for Crystal Palace. AKA, an invariant content observation tool. I then used the feature to document the physics of various content-signature parameters (e.g., length, signature agreement, etc.) Now, I’m releasing the follow-on features to give you...
Cael
What we mean when we say the research is headed this way.
0xinsider — Prediction Market Analytics
On July 14, 2026, addyfizzle10 had 10,702 positive-P&L stored markets, 139 negative ones, and 10 zeros. Polymarket's canonical portfolio total was -$42,731.
0xinsider — Prediction Market Analytics
The previous Kalshi dataset and charts were not backed by a committed, reproducible source artifact. This correction separates public trade facts from unavailable trader identity.
0xinsider — Prediction Market Analytics
A corrected guide that separates feed records from ledger completeness, heuristics from findings, and authored examples from measured market behavior.
rsmudge
Crystal Palace now has a Yara rule generator. In this blog post, I’ll walk you through the design and evaluation of this feature. rule PageStream_rDLL_03495de1 { meta: description = "PageStream rDLL: Use VEHs and guard pages to limit DLL visibility in eXecutable memory" author =...
rsmudge
Happy New Year. I’ve got another Crystal Palace and Tradecraft Garden update for you. My focus this development cycle was making Crystal Palace’s binary transformation framework more robust. I think this is also a good opportunity to brain dump some technical details on this piece of our...
1393
The Pilot–Autopilot Theory of the Brain argues that in Alzheimer’s disease, combustion-derived magnetite nanoparticles from urban air pollution electromagnetically jam a magnetite-based control interface, silencing the Locus Coeruleus and collapsing memory formation and brain metabolism.
rsmudge
What’s more relaxing than a beautiful fall day, a crisp breeze, a glass of Sangria, and music from the local orchestra? Of course, I expect you answered: writing position-independent code projects that separate capability from tradecraft. If you didn’t answer that way, you’re wrong. In the last...
pleunipennings
Hello readers, I got big updates! Some of you already know this, but it’s getting more real and more official every month: my family and I have left the US and moved to France! A few months ago I quit my job and a few weeks ago we sold our house in San Francisco. Last week, I signed a 3-year...
Fernando Castor
Large Language Models (LLMs) are often framed as potential replacements for (semi-)automated software development tools supporting tasks such as bug fixing, refactoring, and code documentation. I don’t think we are quite there yet and it is not clear whether we will ever be. At the moment, I...
pleunipennings
I am so happy to share a new paper and a new video (see below). The paper describes a simple mathematical model that describes levels of drug resistance. I called the model the Resistance-Acquisition-Purifying-Selection model (RAPS). While the model is simple, it wasn’t easy to write the paper or...
philipjkerr
Cambridge publishes a series of short academic titles called ‘Elements’. There are dozens of them and, for a few weeks only after publication, they can be freely downloaded in pdf format. They vary in quality. Some are very useful. For others, the quality is commensurate with the price you pay....
philipjkerr
The British Council likes innovation. For over 20 years they have been handing out ‘ELTon’ awards to celebrate ‘innovation in English language teaching and learning’. Last year, to mark their 90th anniversary, they organised the ‘ELTons Festival of Innovation’. As part of this, they produced a...
adamfineart
I was very pleased to spot a misattributed Self Portrait by John Westbrooke Chandler whilst scrolling through the newly digitized Witt Library the other week. This portrait, which clearly relates to another signed version which sold at Christie’s a few years ago, was parading around as a work...
Arthur Turrell
In January 2020, Claudio Jolowicz published an extremely influential post on Hypermodern Python. It was extremely influential on me, anyway, because it introduced me to a number of tools that I now consider essential to creating solid, high-quality and low-maintenance Python packages. As part of...
Maximilian Speicher
Tales of Design & User Experience (ToDUX) #14 ⁂ Dear readers & friends, So, yeah, this year hasn’t exactly been newsletter-heavy from my side, and I’m sorry for that. I would’ve loved to write more here, but first, there was that writer’s block thing (I wrote about it in the last...
philipjkerr
Forgive me if you think these are badly-framed questions. Asking whether ChatGPT enhances learning is no different from asking whether technology more generally will enhance learning (a question that is fundamentally unanswerable), something that I had hoped we had moved on from some time ago. But...
zuki
Intro As the entire world races torwards connectivity, time-to-market is often prioritized over security. In today’s episode - finding vulnerabilities in smart car appliences! If you recognize one of the logos in the picture above, you might be at risk! Improper authorization may lead to...
zuki
Prologue It all started when I got fed up with the typical Linux process injection PoCs that relied on either ptrace() or LD_PRELOAD. I wanted something different, something a bit more intriguing—a more generic way to inject arbitrary code by using a malicious shared object library. I realized...
adamfineart
The rediscovery of Ralph Sheldon’s lost Portrait of King Henry VIII on BBC Midlands Today 29th July 2024.
Travis
Yamazato in a 1958 issue of Okinawa Graph magazine. Reading an autobiographical piece by Okinawan artist / playwright / novelist / cultural writer / cultural official Yamazato Eikichi, and it’s kind of amazing how many big name, famous, notable, figures keep coming into the story. Seems like he...
adamfineart
Further to my recent blog post regarding the rediscovery of Ralph Sheldon’s Portrait of Henry VIII I have had the opportunity to go and see the picture first-hand in Warwick’s Shire Hall (pictured). This short follow-up is dedicated to capturing some interesting observations I have made....
adamfineart
Strange discoveries can happen at any moment, it appears. This is especially the case when your eyes are particularly honed in on gilt frames that feature in the corners of photographs of peoples’ homes on social media. It happened today whilst I was scrolling at speed through ‘X’ (formerly...
Álvaro Lozano-Robledo
UPDATE: the MaC Fund has been updated! See this post for updated eligibility. As you probably know, I am on TikTok (@mathandcobb), and I have been regularly posting videos there since January 2021. I am considered a “content creator” and as part of the Content Creator Program, I am rewarded...
Fernando Castor
TL;DR: The term “Open Source” should not be used to refer to LLMs, since these models are not open in a way that is coherent with the established meaning of open source software. I propose the use of the term PALE (Publicly Available, Locally Executable) LLMs. It arguably better communicates the...
philipjkerr
My attention was recently drawn (thanks to Grzegorz Śpiewak) to a recent free publication from OUP. It’s called ‘Multimodality in ELT: Communication skills for today’s generation’ (Donaghy et al., 2023) and it’s what OUP likes to call a ‘position paper’: it offers ‘evidence-based recommendations...
zuki
Imagine you have received a WhatsApp message with a link to ln.instagram.com. Where do you think the link leads? Instagram? Think again. I have found a phishing vulnerability in WhatsApp that enables the best phishing attacks possible. An attacker can send anyone a crafted message with a link that...
Neil Petersen
When Michael Phelps was a child, his teacher told his mother that he would “never be able to focus on anything.” Michael Phelps may be the only person with ADHD who has 23 Olympic gold medals to prove his teacher wrong, but his story of being doubted by a teacher will ring familiar for many...
Fernando Castor
Last Friday I participated in my first SEN symposium, which gathers Software Engineering researchers from all across the Netherlands. I was one of the organizers, together with Gemma Catalino, Sebastian Junges, Jurgen Vinju, Tijs van der Storm, and Negar Alizadeh. The symposium had two keynotes...
zuki
There is a saying that you don’t truly own a router until you flash your own firmware on it. The only problem was that the bootloader of my router was password protected. So I accepted the challenge :) Disclaimer - My ISP is the biggest one in Israel, and this is their newest router. They market...
Aram’s Lair of Mad Science
Apologies for taking so long to follow up on the probability post. I was floored by its engagement on Hacker News, with over 200 thoughtful comments! I’ve revised the post to incorporate all your feedback. Now to unveil the secret behind that post: it was a part of my preparation for a very...
Álvaro Lozano-Robledo
The story “The Day She Proved It” has been accepted to appear at The Mathematical Intelligencer, so now, after a few edits, you can read it over there! Enjoy. My thanks to the Intelligencer editors and referees.