Posts
2589Following
623Followers
1381
repeated
pancake 
pancake@infosec.exchange
Yay! The r2k plugin for #radare2 is back! #kernel #reverseengineering
0
1
0
repeated
solarbird
solarbird@solarbird.netgoogle’s latest fuckery: if you write online, read this
The Google app for iOS now adds THEIR links to YOUR posts from YOUR website unless you opt-out.
Their links lead people away from your site and back to Google. Because that’s definitely what you want, right? That’s why you have a blog or portal or web site or whatever. You want people to leave your site and go back to Google.
Oh, it’s not?
If you don’t like it, you can “Opt out.” Opting out is a pain in the ass. Here’s where you go to do it. You have to enter every variation of each of your domains or it won’t work. It will take up to 30 days, during which time Google will continue to pollute your work and your writing and your website with their modifications and their added links to take people away from your site and back to themselves.
For example, here’s the list of what I need to opt-out just for this one blog:
solarbird.nethttp://solarbird.nethttps://solarbird.netwww.solarbird.nethttp://www.solarbird.nethttps://www.solarbird.netweb.solarbird.nethttp://web.solarbird.nethttps://web.solarbird.netYes, you explicitly have to file no prefix, http:, and https: variants separately. They say so.
Making it difficult like this is 100% intentional and entirely designed to make it as annoying as possible, and also, to make sure you slip up if at all possible and forget one or more combinations.
(Tho’ I am just going to depreciate web. as a prefix right now, to bring down the load a little. Still gonna list ’em, though, because spite is why.)
Right now it’s only in the Google app for iOS and it’s probably a test to see whether they can get away with it without complaint, and how much revenue it generates. Let’s make that a combination of no and as close to zero as possible. Because otherwise they’ll roll it out everywhere, and probably derank you if you don’t go along.
Fucking hell, Google. Fuck you. Just… fuck you.
7
22
0
buherator
buheratorShow content
An EP titled “Shannon Entropy” deserves an insta-boost (it’s pretty good too!)
https://artsrecordings.bandcamp.com/album/shannon-entropy-ep
0
0
0
repeated
Aurynn Shaw
aurynn@cloudisland.nzit is a very strange world when my terminal emulator program is taking up 1.2GB of memory.
4
2
1
repeated
daniel:// stenberg://
bagder@mastodon.socialHere's the latest #curl hackerone issue I mentioned the other day: https://hackerone.com/reports/2871792 another one of those "we found a function call so therefore your program must be vulnerable".
Disclosed for educational purposes. Don't do this.
6
3
0
repeated
Per Vognsen
pervognsen@mastodon.socialFast conditional breakpoints via eBPF!?! Let's go! https://pernos.co/blog/linux-kernel-additions/
"With the new feature we contributed to 6.10 it's instead possible to filter the breakpoint hits in the kernel without ever trapping to rr or using ptrace. We can install a hardware breakpoint via the perf events subsystem and attach a BPF program to it that checks for matching register values and suppresses signals for those iterations that are not of interest."
1
3
0
buherator
buheratorhttps://boehs.org/node/dark-web-security
0
1
4
repeated
Daniel Gruss
lavados@infosec.exchangeGot some negative or unrealistic threat model results that still bring interesting insights? A side channel that requires root to leak something from the kernel? Reproducing prior work? Somewhat related to microarchitecture? Here's your venue: uasc.cc
First edition is happening on February 19 in Bochum, the day before RuhrSec.
We accept submissions (papers, posters, talks) starting today and try to provide reviews within a 2 week time frame of submission.
Last Submission Deadline: January 27, 2025
0
4
0
buherator
buheratorstalld: unpatched fixed temporary file use and other issues
https://security.opensuse.org/2024/11/29/stalld-fixed-tmp-file.html
0
1
2
buherator
buheratorLinux: Race can lead to UAF in net/bluetooth/sco.c: sco_sock_connect()
https://seclists.org/oss-sec/2024/q4/130
What a mess:
“the reporter also did not reply to any of linux-distros’ members questions, most notably ‘have you contacted either security () kernel org or the bluetooth maintainers about this issue?’”
“the issue may be the same as CVE-2024-27398”
0
3
4
buherator
buheratortuned: local root exploit in D-Bus method instance_create and other issues in tuned >= 2.23 (CVE-2024-52336, CVE-2024-52337)
0
3
5
repeated
Electrospaces
Electrospaces@mastodon.socialNEW: The phones of the new NATO Secretary General Mark Rutte (including a hotline with the White House):
https://www.electrospaces.net/2024/12/the-phones-of-new-nato-secretary.html
1
2
0
repeated
Jason Scott
textfiles@mastodon.archive.orgThe Archive has definitely hit the phase of "it works unless it doesn't, and then it will suddenly work". This is where the urge to just throw open what's left just to drop bug reports or complaints is high, but you just need to keep tracking things down. This was a quarter century codebase! It's beyond amazing it got this far, this fast. But every time I go back to work at my interfaces, the team has made them run better and better.
0
1
0
repeated
Eric Wastl
ericwastl@hachyderm.ioThis was my tenth(!) year building 25 days of puzzles for #AdventOfCode. You can solve them all for free! Most people write code to solve them, but you can solve them however you like. I hope they help people become better programmers. 🌟
The first puzzle comes out in two hours: https://adventofcode.com/
6
4
0
repeated
melanie ensign (she/her)
Wednesday@defcon.socialThe 2024 Economist Word of the Year:
“kakistocracy” - Government by the least qualified or most unprincipled citizens.
https://www.economist.com/culture/2024/11/29/the-economists-word-of-the-year-for-2024
0
4
0
repeated
cynicalsecurity 
cynicalsecurity@bsd.network
Show content
After my recent experience with a new laptop, imposed upon me by a client, I feel the need to describe what I’d want from computing, both as a “practitioner” (“shaman”? “fool”?) and as a user.
First and foremost I like to know where my data is, both physically and logically.
I would, therefore, appreciate having some form of storage server which does everything from storing files to my calendar and email. It would be redundant, etc. (i.e. a NAS of some form).
Secondly, we’d have IPv6 so that I could reach said server from everywhere without NAT, CGNAT, transparent carrier-to-carrier NAT (you don’t want to know), etc.
Then, for those who have computing needs, we would have a co-system we would connect next to the NAS, automatically speaking some form of NFS (no, not SMB, not over my dead body) and which would be used automatically by the NAS when a request needed oomph (e.g. video editing on a stored video).
All of this would be topped with a beautiful “portable viewer” which would have a laptop size / format and would do nothing other than connect over the network to your server and allow you to “do things.”
A mobile phone would, similarly, tap into your server to do what it needs to do.
There would be minimal storage on these edge devices.
Wait, you say, this is “The Cloud”.
No, it is absolutely not because I want the data to be mine and nothing to be on the edge devices.
Wait, you say again, this is “Plan 9 meets VNC (in its original Olivetti Research Labs incarnation)”.
Yes, it is.
I still believe that one of the worst ever decisions to be taken was the PC back in 1981 followed by the obtusity of many in thinking that somehow PC “democratised” computing or could replace mainframes, minis and servers with its architecture.
Quoting “The 6M Dollar Man”: We can rebuild him; we have the technology.
We don’t need to continue using the crap they peddle us, we need to sit down and say “OK, now let’s be grown ups and build what we need, not what others want to us to build.” (note: 0xide is a step in that direction)
2
2
1