tntr

I'm watching some folks reverse engineer the xz backdoor, sharing some *preliminary* analysis with permission. The hooked RSA_public_decrypt verifies a signature on the server's host key by a fixed Ed448 key, and then passes a payload to system(). It's RCE, not auth bypass, and gated/unreplayable.

This might be the best executed supply chain attack we've seen described in the open, and it's a nightmare scenario: malicious, competent, authorized upstream in a widely used library. Looks like this got caught by chance. Wonder how long it would have taken otherwise.

Hmmm

Reposted by

tntr

y'know, i used IRC for 20+ years and it never made me wait 5 minutes to "download an update."

#cats

👏 No 👏 Reaction 👏 at 👏 all 👏 github.com/hashicorp/va... #HashiCorp #Sad #Vault #notOSS

Reposted by

tntr

The void says he checked outside and it's raining. He recommends staying in bed all day.

🏃today I ran my 30'000km 🥳 #running #ultrarunning

Reposted by

tntr

BREAKING: Manga artist Akira Toriyama, creator of Dragon Ball, has died at 68

Morgestraich: Vorwärts, Marsch!

Wow openai.com/sora

Is there a bsky mastodon crossposter somewhere?

at least achieved sth today.

One afternoon off

Nice longrun with a good friend up the #HoheWinde #longrun #trailrun #running

👀

Reposted by

tntr

wenn mama daheim ist: alle kinder schlafen bis 8 uhr wenn papa daheim ist: 6.30 Uhr Partyyyyyy

My wife and I are looking for small phones (Android, not iOS). Looking at this verge Article, I think this is a lost cause. www.theverge.com/23913658/bes... Why aren't there any more smartphones which are smaller than 15 cm?

I got Hexcodle #149 in 5 guesses! hexcodle.com ⏫⏬⏬🔽⏬✅ 🔼⏬🔼🔽🔽✅ ✅🔽✅✅🔽✅ ✅🔽✅✅✅✅ ✅✅✅✅✅✅

Check out my 2023 Year in Sport! strava.app.link/YgNJ6xeVUFb

Reposted by

tntr

Reposted by

tntr

Shout out to everyone struggling with seasonal affective disorder in the northern latitudes. You made it half way! The light will start coming back now! ❤️

Reposted by

tntr

a very merry “can you take a look at my computer?” season to all

I imported 5 friends from Twitter to Bluesky

Import your Twitter follows to Blueskyskygaze.io

Reposted by

tntr

Happy New Who Day kids...

Adfinis AG based in Switzerland, is looking for a new Project Manager in the Cloud Native team join.com/companies/ad... #adfinis #opensource #cloudnative #jobs