New Project Zero issue:

Linux: temporarily dangling PFN mapping on remap_pfn_range() failure in usbdev_mmap() (and elsewhere?)

https://project-zero.issues.chromium.org/issues/366053091

CVE-2024-47674

The next blog post in the Active Directory hardening series just posted, focusing on SMB signing. https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/active-directory-hardening-series-part-6-enforcing-smb-signing/ba-p/4272168. You can do this yourself and it makes a difference.

We can finally run Doom in Quake! https://www.youtube.com/watch?v=tVOYmYUWkmE #doom

Now that the drawing is complete, @TheDustinChilds and Zed have a few thoughts about the upcoming #Pwn2Own Ireland contest. https://youtube.com/shorts/6l3BW94xH8E #P2OIrleand

[RSS] Attacking the Samsung Galaxy A* Boot Chain

http://blog.quarkslab.com/attacking-the-samsung-galaxy-a-boot-chain.html

[RSS] Linux kernel instrumentation from Qemu and Gdb

http://blog.quarkslab.com/linux-kernel-instrumentation-from-qemu-and-gdb.html

[RSS] Evaluating tail call elimination in the face of return address protection, part 1

https://devblogs.microsoft.com/oldnewthing/20241017-00/?p=110380

[RSS] Finding and exploiting CVE-2024-28578 with fuzzing

https://www.mayhem.security/blog/cve-2024-28578-test-third-party-image-libraries-with-mayhem

[RSS] Hackaday Hacked!

https://hackaday.com/2024/10/19/hackaday-hacked/

By default, Kagi Image Search downranks images from websites with a high proportion of AI-generated content.

You can also use the AI images filter to completely exclude websites with AI-generated images from your image search results.

More info: https://help.kagi.com/kagi/features/exclude-ai-images.html

#Kagi #AdFree #Search #AI

Somehow, I don't think that 2024's richest man in the world, who also is an immigrant, would ever think of using his money to create something like this.
https://www.npr.org/2013/08/01/207272849/how-andrew-carnegie-turned-his-fortune-into-a-library-legacy

Currently trying to repair this device. Can you deduct or guess what it is? #NameThatWare

As always, hide your replies behind a CW to not spoil others.

Was that non-admin x-user exploit @gossithedog talked about[1] ever released?

https://digitalmarketreports.com/news/25091/microsoft-recall-feature-on-windows-11-not-removable-after-all/

[1] https://infosec.place/notice/AieooVB1w6sCv45MFE

Tired of using outdated languages for #Ghidra scripting or a REPL that you can't even properly paste into? @tmr232 and I wrote a plugin to embed a #Jupyter #Kotlin kernel for a full Notebook environment alongside your GUI.
https://github.com/GhidraJupyter/ghidra-jupyter-kotlin

Internet Archive breached again through exposed access tokens https://www.bleepingcomputer.com/news/security/internet-archive-breached-again-through-exposed-access-tokens/?utm_source=dlvr.it&utm_medium=mastodon ( :-{ı▓

I stand with @internetarchive 🏛️

I’m a software developer with a bunch of industry experience. I’m also a comp sci professor, and whenever a CS alum working in industry comes to talk to the students, I always like to ask, “What do you wish you’d taken more of in college?”

Almost without exception, they answer, “Writing.”

One of them said, “I do more writing at Google now than I did when I was in college.”

I am therefore begging, begging you to listen to @stephstephking: https://mstdn.social/@stephstephking/113336270193370876

Any hints about what can cause these vertical lines on my Featherwing OLED display (SH1107)? Soldering is definitely messy but I dont think that would cause such static, localized errors.

It's interesting to think that "my browser doesn't work with this website" used to mean "my browser is out of date". Now it means "someone intentionally broke this website for my browser because it supports ad blocking"