#security

Nvidia Board Probes Reports CEO Was Targeted by Spy https://www.cnet.com/news/nvidia-board-probes-reports-ceo-was-targeted-by-spy/ #Technology #Security #News

Unattended reboots with encrypted disks by @jmmv@mastodon.online https://lobste.rs/s/urg4yu #freebsd #security https://jmmv.dev/2026/11/zkeys-intro.html

PHP2Shell — Deep Dive https://lobste.rs/s/d8dgav #programming #security https://djad04.github.io/php2shell-deep-dive/

Catching prompt injections hidden in PDFs by @tclancy@social.tomclancy.info https://lobste.rs/s/hreu0b #pdf #a11y #ai #security https://tomclancy.info/joshua-judges-ruth.html

Dear Open Source Developers: It's OK not to embargo via @liberty@mathstodon.xyz https://lobste.rs/s/lhovnm #security https://opensourcesecurity.io/2026/10-embargo/

I’m not a fan of Deno’s security model (2024) https://lobste.rs/s/sh62d1 #security https://goldstein.lol/posts/deno-security/

*sshole, or when are we finally going to get rid of C? https://lobste.rs/s/owsnms #security https://sunshowers.io/posts/sshole/

Alpine Linux : openssh-server password authentication bypass https://lobste.rs/s/7dbarm #security https://www.alpinelinux.org/posts/2026-11-05-openssh-password-authentication-bypass/

GhostMap: The Android flaw that crashes your phone before you open the app https://lobste.rs/s/c99mdx #android #security https://www.bitdefender.com/en-us/blog/labs/ghostmap-android

OpenBSD top(1) adds flag to show chroot, pledge and unveil status https://lobste.rs/s/tfywf1 #openbsd #security https://undeadly.org/cgi?action=article;sid=20261106104957

If anybody is interested: distros like Secureblue and Kicksecure (and Kicksecure-based ones like Whonix and Qubes) reduce attack surface by disabling a bunch of kernel modules, and further harden the kernel via sysctl settings and kernel arguments. Secureblue also sends a notification when a system update fixes a vulnerability. secureblue.dev/features www.kicksecure.com/#security

How can I help fellow landlubbers without access the target system/architecture? I’m sharing some executable loot with a less tech savvy friend and while attempting to use reputable sources as per https://fmhy.net/downloading#software-sites . Other than doing that, I also sent them these pointers: Pointers Just to reiterate security considerations concerning pirated software: Scan the files with your anti virus software. If you only have Windows Defender AND it is updated, that’s mostly enough! Alternatively, upload the files to VirusTotal for a scan, but keep in mind that it sometimes gives false positives: https://www.virustotal.com/gui/home/upload Make a backup of your whole system before you install the software, so that in case it contains malware, you can just wipe the whole computer and restore it all. I recommend doing a full system backup to a USB stick or to an external hard drive or the likes. (Search for “backup” in the start menu, if using Windows.) Also, create a so called “bootable medium”, so that in case even the recovery partition of Windows gets infected (which would make you unable to reinstall the system), you can still reinstall. (Search “bootable media/USB” in the start menu.) I know it sounds like a lot, but this is the price of “free” software. Unfortunately/fortunately, video and audio files are a lot easier to make sure they are not malware, because they don’t have so called “executable code”. BONUS This is not meant to scare you, nor is it exaggeration, just the reality of things: If I had a Windows PC/laptop, and if I would use pirated software in any serious capacity (work or hobby), I would install the software on a laptop that is NOT connected to the internet (no WiFi, no network cable). I would then use a Microsoft Windows utility called TCPView from Microsoft’s Sysinternals suite ( https://learn.microsoft.com/en-us/sysinternals/downloads/tcpview ) to check what - if any - connections the software is trying to establish. If I see any connections to “weird” or unexpected websites (unrelated to the software, like fishy Chinese websites or such. Also, see: https://cs.rin.ru/forum/viewtopic.php?f=14&t=159345 ) I would BLOCK internet connectivity of the software in my Windows Firewall ( https://windowsforum.com/tutorials/block-specific-apps-network-access-with-windows-defender-firewall-advanced-security-on-windows-10-11.384955/ ). FINALLY You are always welcome to ask questions! What other considerations would you be giving to a near and dear friend whose less tech savvy but for whom you are not - at least at the moment - able to vet the files? Down the line, will start using OS capable containers again, which will make this question obsolete, but until then, please advise. 😊

Firecracker VM Escape: PwnEscape Part 2 https://lobste.rs/s/wzz4u3 #ai #security https://pwn.ai/blog/firecracker-escape

Forwarded Without Question: How Web Frameworks Overtrust the Forwarded Header https://lobste.rs/s/m5kism #security https://www.lkoskela.fi/blog/2026-11-05-forwarded-without-question/

How hard could implementing DTLS 1.3 possibly be? https://lobste.rs/s/lssm6h #security https://joturk.net/posts/dtls

Hacking the meta ray-ban smartglasses https://lobste.rs/s/xhrab6 #security https://p0pcycle.com/2026/11/06/hacking-the-meta-ray-ban-smartglasses/

Pushing the Limits with getaddrinfo https://lobste.rs/s/5cwnpu #networking #security https://acid.vegas/blog/pushing-the-limits-with-getaddrinfo/

Practical guide on out of tree mitigations on Linux https://lobste.rs/s/l6gu7r #security https://clehaxze.tw/gemlog/2026/11-04-practical-guide-on-out-of-tree-mitigations-on-linux.gmi

OpenBSD top(1) adds flag to show chroot, pledge and unveil status https://undeadly.org/cgi?action=article;sid=20261106104957 #openbsd #top #chroot #pledge #unveil #security #development #freesoftware #libresoftware

Single Point of Failure: The (Fictional) Day Google Forgot To Check Passwords (2014) https://lobste.rs/s/zf1ts0 #video #security https://youtube.com/watch?v=y4GB_NDU43Q