Solaris Engineer at Sun^H^H^HOracle (Release management, Security, X11, GNOME); former board member of @XorgFoundation & @OpenSolaris. https://xitter.cf/t.co/09dz3ZWwpQ

San Francisco Bay Area, Calif.
Joined May 2007
OooOOooOooo, happpy halloooweeeeeen!!
C23 appears to have been published: iso.org/standard/82075.html I sort of expected to get a formal notification of some kind, but ¯\_(ツ)_/ Thanks to everyone who contributed to this effort over the past decade or so, particularly our editors @__phantomderp and Freek Wiedijk.
2
9
105
4,467
C23 appears to have been published: iso.org/standard/82075.html I sort of expected to get a formal notification of some kind, but ¯\_(ツ)_/ Thanks to everyone who contributed to this effort over the past decade or so, particularly our editors @__phantomderp and Freek Wiedijk.
4
35
1
176
12,566
A commenter at Citation Needed suggested I have not adequately explained why I support Kamala Harris, and why I believe it is absolutely critical that everyone who can vote comes out to vote for her. In case I have indeed not been clear, here is my response. PLEASE vote.
36
62
3
535
27,846
CVE-2024-9632: X.Org X server and Xwayland: Heap-based buffer overflow privilege escalation in _XkbSetCompatMap openwall.com/lists/oss-secur…
2
3
579
H. Ye and H. Hu, "Too Subtle to Notice: Investigating Executable Stack Issues in Linux Systems" ("BADASS") huhong789.github.io/papers/y… [OpenBSD's been calling out the Linux antipattern that is PT_GNU_STACK for years..] xitter.cf/canadianbryan/status/1…
Linux has a tendency toward introducing dangerous antipatterns to the ecosystem, the comparison Theo makes to executable-stacks is a real one, and keeps being repeated. news.ycombinator.com/item?id…
6
1
17
1,512
25 years ago on Sep 29, 1999, MITRE announced the CVE Initiative. There's too much to say, so I'll be brief. CVE was not possible without a concerted, mostly-voluntary, community-wide effort. It's accomplished a lot, but it's daunting to see how much still needs to be done...
3
16
3
43
7,526
Google post on "Eliminating Memory Safety Vulnerabilities at the Source" shows how transitioning to memory safe code dropped memory vulnerabilities from 76% to 24% on Android over 6 years: security.googleblog.com/2024…
1
13
1
20
3,344
Think that running Solaris means you're stuck with an ancient version of Java? Think again: 
pkgs.tribblix.org/openjdk/ 
#illumos #solaris #openjdk
7
20
629
Replying to @Oracle
@Oracle #Solaris has obsoleted Python 3.7. But I still need it - what do I do? blogs.oracle.com/solaris/pos…
2
3
201
Today we've released #OracleSolaris 11.4.72, our quarterly feature update. The announcement is at blogs.oracle.com/solaris/pos… , a summary of new features is at blogs.oracle.com/solaris/pos… , and a mastodon thread with some more details is at fosstodon.org/@alanc/1129955… .
1
6
20
542
Today is Oracle's quarterly Critical Patch Update release day, so for #OracleSolaris we have released updates for 11.4 & patches for 10. For info on 11.4 SRU 71, see blogs.oracle.com/solaris/pos… .
1
7
20
548
For info on the security fixes in those releases, see the Oracle Systems Risk Matrix in the July 2024 CPU Bulletin at oracle.com/security-alerts/c… and the Oracle Solaris Third Party Bulletin for July 2024 at oracle.com/security-alerts/b… .
1
5
244
#Oracle #Solaris 11.4.71.170.2) (@OracleSolaris SRU 71.170.2) New: old libffi 3.2.1 (back temporarily) Updates: Unbound, httpd, Jinja2, git, libarchive, PHP, FF, TB Security: python, gnu-indent Bugs fixes:31 EOF: n/a CVEs: 52
1
5
9
457
And to prove their commitment to realism, Marvel hired the oldest actor they could find to play the President of the United States.
157
3,220
110
90,329
1,334,581
Yep 😂😬
9
29
5
294
36,981
"I decided to write my own version of Unix V7 so students could learn all about it and study the operating system code." Watch Andrew S. Tanenbaum, recipient of the 2023 ACM Software System Award, talk abt the origin of MINIX and its long-lasting impact: youtu.be/mHqX6aXh5Fc
1
54
4
140
7,378
The RADIUS protocol is commonly used to control admin access to networking gear. Today, Cloudflare and a team of researchers are disclosing a vulnerability in RADIUS based on its outdated use of MD5. Learn more: cfl.re/3xNIoBw
1
23
3
50
10,164
🧮 Clang and GCC are introducing the "counted_by" attribute for flexible array members! The new attribute helps compilers know the bounds of a flexible array member, making hardened apps less exploitable. 👀 Learn more ⬇️ goo.gle/3LiaQP1
2
12
1,934