Royce Williams roycewilliams

Micro Cookbook `RECIPE.TXT` — Binary Format Reference

Reverse-engineered specification of the recipe database format used by Micro Cookbook (Pinpoint Publishing, c. 1988–1994) on MS-DOS. This is sufficient to (a) reimplement the recipe extraction in any language, and (b) understand the on-disk structures well enough to recreate the original program's behaviour.

Status of knowledge: the record/field encoding is fully decoded and validated against the program's own print-out. The 32 KB header index region, SCREEN.TXT, and CONTROL.TXT are not decoded (not required for

Tracking Hashmob progress on cracking downloadable SHA1 hashes from Pwned Passwords.

Each new target hashlist is a delta - the "net new" from the previous downloads. My list here is in reverse chronological order.

ID	Hashlist Name	Hash Type	Found	Total	Recovered %
#H11651	Have I been Pwned v2025-03 (Delta V8.12)	SHA1 (100)	411,723,586	420,878,532	97.82%
#H9259	Have I been Pwned V8.12 (Delta V8.4)	SHA1 (100)	630,532	778,688	80.97%
#H7464	Have I been Pwned V8.4 (Delta V8)	SHA1 (100)	16,019,292

Original report

Affected Vendor OpenPrinting Affected Product Several components of the CUPS printing system: cups-browsed, libppd, libcupsfilters and cups-filters. Affected Version All versions <= 2.0.1 (latest release) and master. Significant ICS/OT impact?no Reporter Simone Margaritelli [evilsocket@gmail.com] Vendor contacted?yes The vendor has been notified trough Github Advisories and all bugs have been confirmed:

[https://github.com/OpenPrinting/cups-browsed/secu…|https://github.com/OpenPrinting/cups-browsed/security/advisories/GHSA-rj88-6mr5-rcw8]

(reproduced from an email I received 2025-09-06 1:03AM AKT)

(Nitrokey Logo)

Nitrokeys Offer Investment Security Without Infineon's Security Vulnerability

Recently, a significant security vulnerability in Infineon security chips was made public. Nitrokeys do not contain Infineon chips and are therefore not affected by this security vulnerability! Nevertheless, this incident holds interesting lessons for Nitrokey and our customers. In a nutshell: Security certifications are overrated and open source offers advantages over them. Nitrokeys offer a high level of investment security thanks to firmware updates. More on this below.

	# Partial hashcat benchmark comparison, 6.2.6 release vs 7.0.0 alpha
	# Single 4090, CUDA, 575.57.08, optimized kernel, -w 3
	# Only showing benchmarks with 5% or more change. Higher is faster.
	# 2025-07-31

	Mode \| Name \| Previous \| Current \| Diff \| % Diff
	---------------------------------------------------------------------------------------------------------------------------------
	0 \| MD5 \| 145824788773 \| 158354116103 \| 12529327330 \| +8.59%
	10 \| md5($pass.$salt) \| 145386855059 \| 157744853131 \| 12357998072 \| +8.50%
	11 \| Joomla < 2.5.18 \| 140934665341 \| 152237381817 \| 11302716476 \| +8.02%

	#-----------------------------------------------------------------------------
	# All HIBP SHA1 hashes beginning with b2e98, as of 2025-02-25, by frequency in leaks.
	#
	# The HIBP API receives a hex prefix, and returns all hashes with that prefix
	# (with the prefix omitted), including frequency count, across all leaks in HIBP.
	# The first hash is often much more likely to be the password behind the query,
	# demonstrating the limits of k-anonymity as a mitigation when frequency is included.
	# Of the 618,979 passwords represented, 96.8% of them (599,297) are the top one.
	#
	# Permalink: https://gist.github.com/roycewilliams/2034c9253d46fbcaefb13f8e5d42daa2

	# Download from ftp.logitech.com/pub/quickcam
	# Contains file listing, plus various checksums
	# As of: 2024-12-13

	45056 Jan 23 2015 60patch.exe
	4620192 Jan 23 2015 LogiCamSettings.exe
	4666496 Jan 23 2015 LogiUCDpp.exe
	1191792 Jan 23 2015 LogitechWebcamProperties.dmg
	721408 Jan 23 2015 albumpatch.exe
	72416 Jan 23 2015 avifix.exe

	# Because this appeared to exist nowhere else in the Googles.

	= F2A0D5919C61DB3D (space)
	! = 695109AB020E401C
	" = A02BAAA4A6AE5FEA
	# = C2A20CAE7226E17D
	$ = DB2294261F598B4C
	% = 1068F8D7B3E22BFF
	& = A86FB73C70515BD7
	' = 6D12862D8225EBC6

	# hashcat rule to only insert non-contiguous dots/periods
	# Created 2024-04-13 by TychoTithonus (Royce Williams)
	# Source:
	:
	i1.
	i2.
	i2.i1.
	i3.
	i3.i1.

	#!/usr/bin/python
	# -- coding: utf-8 --
	#
	# Copyright 2017, Francesco "dfirfpi" Picasso <francesco.picasso@gmail.com>
	#
	# Licensed under the Apache License, Version 2.0 (the "License");
	# you may not use this file except in compliance with the License.
	# You may obtain a copy of the License at
	#
	# http://www.apache.org/licenses/LICENSE-2.0

Royce Williams roycewilliams

Micro Cookbook RECIPE.TXT — Binary Format Reference

Nitrokeys Offer Investment Security Without Infineon's Security Vulnerability

What has happened?

Micro Cookbook `RECIPE.TXT` — Binary Format Reference