Jason Odoom
@odoom.burntheinter.net
Human. / Security Engineer / he+him / 68CCAF80768A91A5
--
Shit posting account?
--
Shit posting account?
Reposted by Jason Odoom
Reposted by Jason Odoom
This might be the best executed supply chain attack we've seen described in the open, and it's a nightmare scenario: malicious, competent, authorized upstream in a widely used library.
Looks like this got caught by chance. Wonder how long it would have taken otherwise.
Looks like this got caught by chance. Wonder how long it would have taken otherwise.
Woah. Backdoor in liblzma targeting ssh servers.
www.openwall.com/lists/oss-se...
It has everything: malicious upstream, masterful obfuscation, detection due to performance degradation, inclusion in OpenSSH via distro patches for systemd support…
Now I’m curious what it does in RSA_public_decrypt
www.openwall.com/lists/oss-se...
It has everything: malicious upstream, masterful obfuscation, detection due to performance degradation, inclusion in OpenSSH via distro patches for systemd support…
Now I’m curious what it does in RSA_public_decrypt
oss-security - backdoor in upstream xz/liblzma leading to ssh server compromise
www.openwall.com
March 29, 2024 at 7:29 PM
This might be the best executed supply chain attack we've seen described in the open, and it's a nightmare scenario: malicious, competent, authorized upstream in a widely used library.
Looks like this got caught by chance. Wonder how long it would have taken otherwise.
Looks like this got caught by chance. Wonder how long it would have taken otherwise.
Yes, this is the correct order.
March 26, 2024 at 8:51 PM
Yes, this is the correct order.
Every memory and moment is part of an era. You just have to define when it begins and ends.
March 21, 2024 at 6:09 AM
Every memory and moment is part of an era. You just have to define when it begins and ends.
I really have to go take a poo but this talk is sooo engaging
March 17, 2024 at 7:21 PM
I really have to go take a poo but this talk is sooo engaging
"...SRE meaning you're a DevOps in the Mountain View area of the US." GOLD. 🤣🤣
March 16, 2024 at 12:29 AM
"...SRE meaning you're a DevOps in the Mountain View area of the US." GOLD. 🤣🤣
""Too many of us undervalue concentration, and substitute busyness for real productivity, and are quick to embrace whatever new techno-bauble shines brightest."
www.newyorker.com/culture/offi...
www.newyorker.com/culture/offi...
How I Learned to Concentrate
Twenty years ago, I had an intellectual experience that changed how I think about thinking.
www.newyorker.com
March 7, 2024 at 5:07 PM
""Too many of us undervalue concentration, and substitute busyness for real productivity, and are quick to embrace whatever new techno-bauble shines brightest."
www.newyorker.com/culture/offi...
www.newyorker.com/culture/offi...
Grabbed my phone and didn't realize there was a video playing which scared me a bit. I can only imagine what it would be like if you were to show someone from the distant past a smartphone. They too would be terrified at the sight of tiny people on a screen. Are they trapped?
March 7, 2024 at 1:53 PM
Grabbed my phone and didn't realize there was a video playing which scared me a bit. I can only imagine what it would be like if you were to show someone from the distant past a smartphone. They too would be terrified at the sight of tiny people on a screen. Are they trapped?
Told you.....
Yes, it's not meant for use outside but you know people will try.
February 27, 2024 at 1:37 AM
Told you.....
People who wear Apple's Vision Pro in public should be refered to as "Pro holes".
February 5, 2024 at 7:57 PM
People who wear Apple's Vision Pro in public should be refered to as "Pro holes".
I'll give it 5 years.
February 3, 2024 at 9:31 PM
I'll give it 5 years.
Imagine buying a ShmooCon ticket and not showing up. STOP DOING THAT. You're robbing others who are far more interested of an experience.
January 14, 2024 at 9:59 PM
Imagine buying a ShmooCon ticket and not showing up. STOP DOING THAT. You're robbing others who are far more interested of an experience.
The last Shmoo dates.
January 14, 2024 at 8:39 PM
The last Shmoo dates.
I don't want this. I want a Her companion that makes use of convergence. This is way too big.
Rabbit sells out 10,000 units of its R1 pocket AI companion in one day - https://www.theverge.com/2024/1/10/24033498/rabbit-r1-sold-out-ces-ai
Rabbit sells out 10,000 units of its R1 pocket AI companion in one day
The pocket AI assistant just made its debut at CES 2024.
www.theverge.com
January 11, 2024 at 10:18 PM
I don't want this. I want a Her companion that makes use of convergence. This is way too big.
It's pronounced oiler not you-ler
January 11, 2024 at 10:05 PM
It's pronounced oiler not you-ler
Compass Coffee is mid but the playlist is fire. I cannot concentrate.
January 6, 2024 at 7:55 PM
Compass Coffee is mid but the playlist is fire. I cannot concentrate.
Becareful of the precedents you set.
January 5, 2024 at 1:09 AM
Becareful of the precedents you set.
Big New Year Energy!
January 4, 2024 at 7:53 PM
Big New Year Energy!
Okay Zack Snyder, these blurry shots are annoying. I'm not even sure if I'm going to finish this. How's this in 'Top10?' Oh right because Netflix can do whatever it wants.
December 30, 2023 at 3:53 AM
Okay Zack Snyder, these blurry shots are annoying. I'm not even sure if I'm going to finish this. How's this in 'Top10?' Oh right because Netflix can do whatever it wants.
Is it cake? vs. Is it real or AI?
December 27, 2023 at 3:14 PM
Is it cake? vs. Is it real or AI?