Cloudflare targets 2029 for full post-quantum security via @RunxiYu https://lobste.rs/s/csxbgu #cryptography #security
https://blog.cloudflare.com/post-quantum-roadmap/
security
Nix security advisory: Privilege escalation via symlink following during FOD output registration https://lobste.rs/s/lwdzn1 #nix #security
https://discourse.nixos.org/t/nix-security-advisory-privilege-escalation-via-symlink-following-during-fod-output-registration/76900
Flatpak: Complete Sandbox Escape https://lobste.rs/s/cjbxsj #devops #security
https://github.com/flatpak/flatpak/security/advisories/GHSA-cc2q-qc34-jprg
The Future of the Con Is Already Here, It's Just Not Evenly Distributed - In Pursuit of Laziness https://lobste.rs/s/5majlp #ai #security
http://manishearth.github.io/blog/2026/06/17/the-future-of-the-con-is-already-here/
Please Do Not Hack Me - The Tale of a TeamSpeak Use-After-Free https://lobste.rs/s/fxksjw #security
https://modzero.com/en/blog/please-do-not-hack-me/
What's new in pip 26.1 - lockfiles and dependency cooldowns https://lobste.rs/s/w2oiaq #python #release #security
https://ichard26.github.io/blog/2026/04/whats-new-in-pip-26.1/
The woes of sanitizing SVGs https://lobste.rs/s/foxx1z #security #web
https://muffin.ink/blog/scratch-svg-sanitization/
GitHub RCE Vulnerability: CVE-2026-3854 Breakdown https://lobste.rs/s/8fxgx7 #security #vibecoding
https://www.wiz.io/blog/github-rce-vulnerability-cve-2026-3854
Carrot disclosure: Forgejo https://lobste.rs/s/swbkcl #security
https://dustri.org/b/carrot-disclosure-forgejo.html
In which I think out loud about Password Managers and take a closer look at 1Password and Bitwarden: https://www.tbray.org/ongoing/When/202x/2026/04/09/Password-Manager-Angst
Protecting Cookies with Device Bound Session Credentials https://lobste.rs/s/nyorr5 #browsers #security #web
https://security.googleblog.com/2026/04/protecting-cookies-with-device-bound.html
Total.js RCE gadgets all around https://lobste.rs/s/fi28gj #javascript #security #web
https://criticalthinkingpodcast.github.io/research/totaljs-rce-gadgets
Capsicum vs seccomp: Process Sandboxing via @RunxiYu https://lobste.rs/s/hbirya #freebsd #linux #security
https://vivianvoss.net/blog/capsicum-vs-seccomp
You shouldn't trust Trusted Publishing by @yossarian https://lobste.rs/s/8d9pgd #python #security
https://blog.yossarian.net/2026/07/07/You-shouldnt-trust-trusted-publishing
Put your SSH keys in your TPM chip https://lobste.rs/s/ggum7f #linux #security
https://raymii.org/s/tutorials/Put_your_SSH_keys_in_your_TPM_chip.html
Mind the Gap - Where TEE Attestations Fall Short and Why Do TEEs Need Proof of Cloud | Flashbots Writings https://lobste.rs/s/q0tq4s #cryptography #hardware #security
https://writings.flashbots.net/mind-the-gap-tee-poc
I Do Not Recommend Bitwarden https://lobste.rs/s/miwd1w #security
https://マリウス.com/i-do-not-recommend-bitwarden/
How Rust is susceptible to supply chain attacks and what we can do to mitigate the inevitable https://lobste.rs/s/1areqp #rust #security
https://kerkour.com/rust-supply-chain-nightmare
Windows Defender is being used to hack Windows via @Jeremiah https://lobste.rs/s/hihcnv #security #windows
https://hackingpassion.com/bluehammer-windows-defender-zero-day/
Copy Fail: 732 Bytes to Root on Every Major Linux Distributions https://lobste.rs/s/wsmc8s #linux #security
https://xint.io/blog/copy-fail-linux-distributions
cPanel & WHM Authentication Bypass (CVE-2026-41940) https://lobste.rs/s/m8t9px #php #security
https://labs.watchtowr.com/the-internet-is-falling-down-falling-down-falling-down-cpanel-whm-authentication-bypass-cve-2026-41940/
Secure signatures without a private key by @katexochen https://lobste.rs/s/ghmidi #cryptography #security
https://katexochen.aro.bz/posts/reproducible-secure-signatures/
Copy Fail — 732 Bytes to Root via @fossdd https://lobste.rs/s/eeifdc #linux #security
https://copy.fail/
Surely there must be a way to make container secrets less dangerous? https://lobste.rs/s/66gclj #devops #security
https://dalmatian.life/2026/04/11/surely-there-must-be-a-way-to-make-container-secrets-less-dangerous/
What iOS Lockdown mode actually does https://lobste.rs/s/oh3snl #video #ios #reversing #security
https://www.youtube.com/watch?v=5D3lWDUEJA8