Tag: Nix

  • Hacker News: Sound & Efficient Generation of DOP Exploits via Programming Language Synthesis [pdf]

    Source URL: https://ilyasergey.net/assets/pdf/papers/doppler-usenix25.pdf Source: Hacker News Title: Sound & Efficient Generation of DOP Exploits via Programming Language Synthesis [pdf] Feedly Summary: Comments AI Summary and Description: Yes **Summary:** The text discusses a novel approach to generating data-oriented exploits through a technique called Programming Language Synthesis (PLS). This method improves the efficiency and soundness of exploit…

  • Hacker News: Malicious extensions circumvent Google’s remote code ban

    Source URL: https://palant.info/2025/01/20/malicious-extensions-circumvent-googles-remote-code-ban/ Source: Hacker News Title: Malicious extensions circumvent Google’s remote code ban Feedly Summary: Comments AI Summary and Description: Yes **Summary:** The text discusses security vulnerabilities related to malicious browser extensions in the Chrome Web Store, focusing on how they can execute remote code and compromise user privacy. It critiques Google’s policies regarding…

  • Hacker News: Bypassing disk encryption on systems with automatic TPM2 unlock

    Source URL: https://oddlama.org/blog/bypassing-disk-encryption-with-tpm2-unlock/ Source: Hacker News Title: Bypassing disk encryption on systems with automatic TPM2 unlock Feedly Summary: Comments AI Summary and Description: Yes **Summary:** The text delves into the security implications of using Trusted Platform Module (TPM2) for automatic disk unlocking in Linux systems. It uncovers vulnerabilities present in popular implementations (specifically with clevis…

  • The Register: Microsoft’s latest on-prem Azure is for apps you don’t want in the cloud, but will manage from it

    Source URL: https://www.theregister.com/2025/01/15/azure_local_explained/ Source: The Register Title: Microsoft’s latest on-prem Azure is for apps you don’t want in the cloud, but will manage from it Feedly Summary: Azure Local is about hybrid management, not hybrid resource pools, and is catching up with virtual rivals Microsoft’s latest on-prem Azure offering is more about unified management than…

  • Hacker News: Superior Internet Privacy with Whonix

    Source URL: https://www.whonix.org/wiki/Homepage Source: Hacker News Title: Superior Internet Privacy with Whonix Feedly Summary: Comments AI Summary and Description: Yes Summary: Whonix is a privacy-focused operating system that offers robust anonymity and security features, primarily by routing internet traffic through the Tor network. Its architecture and numerous security measures provide advanced protection against various online…

  • Hacker News: The Evolution of SRE at Google

    Source URL: https://www.usenix.org/publications/loginonline/evolution-sre-google Source: Hacker News Title: The Evolution of SRE at Google Feedly Summary: Comments AI Summary and Description: Yes **Summary:** The text discusses the evolution of Site Reliability Engineering (SRE) at Google, emphasizing the challenges posed by increasing system complexity and the need for a paradigm shift in how reliability is approached. It…

  • Hacker News: U.S. Army Soldier Arrested in AT&T, Verizon Extortions

    Source URL: https://krebsonsecurity.com/2024/12/u-s-army-soldier-arrested-in-att-verizon-extortions/ Source: Hacker News Title: U.S. Army Soldier Arrested in AT&T, Verizon Extortions Feedly Summary: Comments AI Summary and Description: Yes Summary: A U.S. Army soldier, Cameron John Wagenius, has been arrested for allegedly hacking and leaking sensitive telecom data. His arrest highlights a concerning trend of military personnel becoming involved in cybercriminal…

  • Krebs on Security: U.S. Army Soldier Arrested in AT&T, Verizon Extortions

    Source URL: https://krebsonsecurity.com/2024/12/u-s-army-soldier-arrested-in-att-verizon-extortions/ Source: Krebs on Security Title: U.S. Army Soldier Arrested in AT&T, Verizon Extortions Feedly Summary: Federal authorities have arrested and indicted a 20-year-old U.S. Army soldier on suspicion of being Kiberphant0m, a cybercriminal who has been selling and leaking sensitive customer call records stolen earlier this year from AT&T and Verizon. As…