Looks like hyp3rlinx also got interested in #IBMi :)

https://hyp3rlinx.altervista.org/advisories/IBMi_Navigator_Server_Side_Request_Forgery_CVE-2024-51463.txt

https://hyp3rlinx.altervista.org/advisories/IBMi_Navigator_HTTP_Security_Token_Bypass-CVE-2024-51464.txt

(CVE-2024-51463, CVE-2024-51464)

[RSS] Security Bulletin: IBM PowerHA SystemMirror for #IBMi is vulnerable to multiple vulnerabilities in the PowerHA Web Interface [CVE-2024-55897, CVE-2024-55896]

https://www.ibm.com/support/pages/node/7180036?myns=swgother&mynp=OCSSPHQG&mynp=OCSWG60&mync=A&cm_sp=swgother-_-OCSSPHQG-OCSWG60-_-A

[RSS] Remote Memory Access in Linux

https://u1f383.github.io/linux/2024/12/28/remote-memory-access-in-linux.html

[RSS] The Feasibility of Using Hardware Breakpoints To Extend the Race Window

https://u1f383.github.io/linux/2024/12/29/the-feasibility-of-using-hardware-breakpoints-to-extend-the-race-window.html

[RSS] From Arbitrary File Write to RCE in Restricted Rails apps

https://blog.convisoappsec.com/en/from-arbitrary-file-write-to-rce-in-restricted-rails-apps/

[RSS] What does [it] mean to "Commit Params/Return"? #Ghidra

https://old.reddit.com/r/ghidra/comments/1hpom0c/what_does_mean_to_commit_paramsreturn/

Waymo (aka Google) admits that it trains its robotaxis to break the law. When WaPo reporter finds robotaxis fail to stop for pedestrians in marked crosswalk 70% of the time, Waymo says it follows "social norms" rather than laws.
Expert explains: When robotaxis obey law, they don't go fast enough to compete successfully with Uber, so Google execs ordered engineers to ignore laws.
https://wapo.st/3ZZDifm

BeyondTrust SaaS hack announced just before Xmas was used to access US Treasury Department.

I understand it impacts other customers, too - the threat actor stole keys used to access customer workstations (even where they deployed the on prem server - the product is a reverse proxy effectively), which BeyondTrust has opted not to disclose to customers.

https://www.reuters.com/technology/cybersecurity/us-treasurys-workstations-hacked-cyberattack-by-china-afp-reports-2024-12-30/

This is, BTW, why I'm such a passionate #Kagi enthusiast. Their technology is good, but their business plan -- subscriptions instead of advertisements, bootstrapped instead of VC-based -- matters way more. It means that they *have* to focus on what's good for their users, not what pleases the current whim of the stock market and the billionaires.

I dearly wish more companies would catch that clue…

@sue this doesn't change the fact that as the result of regulation UX on web got much worse. If the rules are good, they should be enforced. If they are imperfect, they should be refined. Waiting for thousands of adtech players to suddenly play nice is...unrealistic.

@cR0w @wdormann @screaminggoat @obivan Another point for the LLM's I guess?

to elaborate: i went without heating for the last 2 years of kitsune tails production. we have enough to run the heating now, but if you want to play gay fox girl SMB3 and help ensure the heating stays on, you can get it on sale now: https://store.steampowered.com/app/1325260/

or on itch: https://eniko.itch.io/kitsunetails

#GameDev #PixelArt #QueerGames #IndieGame #IndieDev #RetroGaming

Reminder: Tomorrow, @lavados, @lunkw1ll and I will give a talk at #38c3 about #Rowhammer at 12:00. If you want to check whether your computers are vulnerable to #Rowhammer, visit https://flippyr.am. Everything is open source! You can build our ISO and flash it onto your USB stick. If you're feeling lazy and trust us, come to Hall 3 by the palm tree and get a free USB stick with the ISO already flashed.

@gsuberland @mcc 🫡

@gsuberland @mcc OMG I *know* what we will do on NYE!

Can We Find Beauty in Tax Fraud? #38c3

https://streaming.media.ccc.de/38c3/relive/402

This looks fun!

'International Obfuscated C Code Contest' Will Relaunch, Celebrating 40th Anniversary https://developers.slashdot.org/story/24/12/29/1730224/international-obfuscated-c-code-contest-will-relaunch-celebrating-40th-anniversary?utm_source=rss1.0mainlinkanon

I have this PCB where circular solder points are perfect, while square ones ("negative legs") seem to have solder repellent fields around them.

Is this a known thing or my skill/material issue? If the former, how should I solder these things?

#soldering

Volkswagen's bad streak: They know where your car is, Chaos Computer Club says – and they don't know how to secure it properly. https://reynardsec.com/en/volkswagens-bad-streak-we-know-where-your-car-is/

In 10 mins: Dialing into the Past: RCE via the Fax Machine – Because Why Not?

https://events.ccc.de/congress/2024/hub/event/dialing-into-the-past-rce-via-the-fax-machine-because-why-not/

#38c3