Unauthenticated RCE vs all GNU/Linux systems to be fully disclosed in 2 weeks with no working fix yet in c/linux@lemmy.ml
[-] treasure@feddit.org 23 points 1 month ago

This link should be working.

Quoting from the OP tweet:

* Unauthenticated RCE vs all GNU/Linux systems (plus others) disclosed 3 weeks ago.
* Full disclosure happening in less than 2 weeks (as agreed with devs).
* Still no CVE assigned (there should be at least 3, possibly 4, ideally 6).
* Still no working fix.
* Canonical, RedHat and others have confirmed the severity, a 9.9, check screenshot.
* Devs are still arguing about whether or not some of the issues have a security impact.

I've spent the last 3 weeks of my sabbatical working full time on this research, reporting, coordination and so on with the sole purpose of helping and pretty much only got patronized because the devs just can't accept that their code is crap - responsible disclosure: no more.

Unauthenticated RCE vs all GNU/Linux systems to be fully disclosed in 2 weeks with no working fix yet in c/cybersecurity@sh.itjust.works
[-] treasure@feddit.org 8 points 1 month ago

Me too, I'm looking forward to the writeup.

58
Unauthenticated RCE vs all GNU/Linux systems to be fully disclosed in 2 weeks with no working fix yet (nitter.poast.org)
submitted 1 month ago* (last edited 1 month ago) by treasure@feddit.org to c/privacy@lemmy.ml
11 comments fedilink

EDIT: Original post seems to have been removed, try this Nitter mirror instead.

39
Unauthenticated RCE vs all GNU/Linux systems to be fully disclosed in 2 weeks with no working fix yet (nitter.poast.org)
submitted 1 month ago* (last edited 1 month ago) by treasure@feddit.org to c/cybersecurity@sh.itjust.works
19 comments fedilink

EDIT: Original post seems to have been removed, try this Nitter mirror instead.

88
Unauthenticated RCE vs all GNU/Linux systems to be fully disclosed in 2 weeks with no working fix yet (nitter.poast.org)
submitted 1 month ago* (last edited 1 month ago) by treasure@feddit.org to c/linux@lemmy.ml
29 comments fedilink

EDIT: Original post seems to have been removed, try this Nitter mirror instead.

These Human Rights Defenders Were Hacked by Pegasus. Now They Want Police to Charge the Spyware Maker. in c/technology@lemmy.world
Is my 5700x3d overheating at 85c or is it just hot? in c/pcmasterrace@lemmy.world
[-] treasure@feddit.org 18 points 1 month ago

85°C is still fine. You wouldn't want your system running at those temps all the time but if those are only spikes during intensive tasks, you're good.

If you want your PC to run a bit cooler, check your airflow, set manual fan curves, or try out a mild undervolt.

Gesucht: Smartphone in c/kaufempfehlungen@feddit.org
[-] treasure@feddit.org 5 points 1 month ago

Löten ist hier nicht mal erforderlich. Der Akku hat einen Flachstecker, der sehr einfach zu lösen ist. Die eigentliche Herausforderung wird Kleber sein, da man das Handy zum Lösen der Rückplatte erst erhitzen und dann mit viel Vorsicht und Geduld abhebeln muss. Der Akku ist ebenfalls verklebt, sodass man erstmal mit Isopropanol rangehen muss und auch hier wieder viel Vorsicht und Geduld braucht.

Hier findest du ein YouTube-Video dazu. Ist zwar ein allgemeiner Teardown statt ein Batterietausch, aber die Schritte sind auch da enthalten.

I hate the rich in c/memes@lemmy.ml
[-] treasure@feddit.org 20 points 2 months ago

Cannot complain.

Spotted the German.

Rule in c/196@lemmy.blahaj.zone
[-] treasure@feddit.org 63 points 3 months ago

The screenshot is getting crispy, time to get it out of the deep fryer

ich🛋️🤳🏻iel in c/ich_iel@feddit.org
[-] treasure@feddit.org 7 points 3 months ago

Also wirklich, die sollten ihre Applikation zum Anzeigen von Lemmy-Inhalten stattdessen "Verbinde" nennen, ganz nach dem Vorbild des Internet-Ausbaus in Deutschland.

Smashing idea: how East Germany invented ‘unbreakable’ drinking glasses in c/sachsen@feddit.org
[-] treasure@feddit.org 3 points 3 months ago

Da hat sich in der Guardian-Redaktion bestimmt jemand von diesem fern-Video inspirieren lassen.

The Best Encrypted Messengers in 2024 in c/privacy@lemmy.ml
[-] treasure@feddit.org 5 points 3 months ago

That's mentioned in the article I believe. I was just trying to save some people a minute or two. :)

The Best Encrypted Messengers in 2024 in c/privacy@lemmy.ml
[-] treasure@feddit.org 113 points 3 months ago

TLDR: Avoid Telegram and WhatsApp. Recommended messengers are Session, Signal, SimpleX and Threema. Honorable mention: Briar.

Lumpi would like scritchies until the universe ends in c/cat@lemmy.world
[-] treasure@feddit.org 11 points 3 months ago

He wants all kinds of pets, rubs and scritches. Belly rubs too, but please without touching the belly.

291
Lumpi would like scritchies until the universe ends (feddit.org)
submitted 3 months ago by treasure@feddit.org to c/cat@lemmy.world
7 comments fedilink

...touching the belly is still deadly though.

view more: next ›

treasure

joined 3 months ago