quote from: https://gekk.info/articles/traceroute.htm

[RSS] W3C - CSS Validator XXE

https://github.com/google/security-research/security/advisories/GHSA-745m-xmq6-g6x7

[RSS] A Quick Note On Two mempolicy Vulnerabilities

https://u1f383.github.io/linux/2025/03/30/a-quick-note-on-two-mempolicy-vulnerabilites.html

Does this person ever sleep?

“The sky was the color of television tuned to a dead channel”

80s meaning: grey
90s meaning: blue
Today: full of ads from the smart tv vendor

The prior (more than a year old by this point) CISA Cybersecurity Advisory minces words a bit less than the recent MAR.

The ICT (internal or external) may not detect compromise. The threat actor may retain persistence after "factory reset".

I’ve drawn around 5,000 comics in my life, and I’m pretty sure I had caffeine in my bloodstream for every single one of them.

CVE-2025-31160 Atop 2.11 heap problems:

"atop always tries to connect
to the TCP port of 'atopgpud' during initialization. When another local
program has been started (instead of 'atopgpud') that listens to this TCP
port, atop connects to that program. Such program is able then to send
unexpected strings that may lead to parsing failures in atop. These failures
result in heap problems and segmentation faults."

https://www.openwall.com/lists/oss-security/2025/03/29/1

This is really concerning, not just the raid but that Indiana University has literally disappeared XiaoFeng Wang (a full professor with a named chair position) from their web sites. The attacks on Chinese-born faculty were bad in Trump 1, but this I worry is way way worse.

RE: https://bsky.app/profile/did:plc:xvgztewzbfh7bpnklayrsvds/post/3lljj6nay722a

The value of generative AI can best be understood by our negotiation with Microsoft for our E5 license.

It's cheaper if we “take" Copilot than if we don’t.

That's some quality work right there.

@davidgerard or Lehman Brothers

The initial nova-core driver stub was merged to #Linux mainline for #LinuxKernel 6.15[1].

#Nova is going to be a #kernel driver for #Nvidia's modern GPUs written in #Rustlang. It is the successor of the #Nouveau kernel driver and serve as base for drivers like #NVK.

The core driver stub is not really useful for anything yet. But that should change soon – and I guess will be the turning point that'll sell #Rust for Linux to the world. 🥳

[1] https://git.kernel.org/torvalds/c/54e6baf123fde089cfa9f609b0b39b40abe41e94 and https://git.kernel.org/torvalds/c/b28786b190d1ae2df5e6a5181ad78c6f226ea3e1

Broadcom has determined a way to get more money out of VMware licensing:

If a customer has a single-processor server with 8 cores, VMware by Broadcom will license 72 cores.

😂

Released a new tool, packet-monkey:

https://github.com/timb-machine/packet-monkey

Packet Monkey is a tool to filter and classify PCAPs using Wireshark filters. I use it for layer 2/3 traffic analysis on engagements.

#tool, #code, #packetcapture, #trafficanalysis, #wireshark

Paged Out! #6 is out!
https://pagedout.institute/
Totally free, 80 pages, best issue so far!
'nuff said, enjoy!

(please boot to help spread out the news!)

We're live on Twitch and TikTok! Tune in as we stream—first, we'll be repairing a pulse-tone telephone adapter, and then we'll continue building our Apple I replica.

📺 Twitch: https://www.twitch.tv/racunalniskimuzej
📱 TikTok: https://www.tiktok.com/@racunalniskimuzej

Wow, __builtin_dump_struct is an amazing clang feature, how did I never hear about this before?

$ cat test.c
#include <stdio.h>

struct nested {
  int n;
};
struct foo {
  int member_a;
  unsigned long member_b;
  char *str;
  void *ptr;
  struct nested nested;
};

int main(void) {
  struct foo f = {
    .member_a = 123,
    .member_b = 0x4141414141414141,
    .str = "foobar",
    .ptr = &f,
    .nested = {.n = 42}
  };
  __builtin_dump_struct(&f, printf);
}
$ clang -o test test.c && ./test
struct foo {
  int member_a = 123
  unsigned long member_b = 4702111234474983745
  char * str = "foobar"
  void * ptr = 0x7fff1df41b78
  struct nested nested = {
    int n = 42
  }
}

The original version of this feature was introduced back in 2018 (though it was reimplemented since in 2022).

@Extelec

I really cannot stress enough how much of an unexpected marketing gift the term "vibe coding" has been for us.

Looks like @recon 2024 videos are being uploaded \o/

https://www.youtube.com/@reconmtl/videos