Trustworthy JavaScript for the Open Web https://lobste.rs/s/rojlaw #security #web
https://hacks.mozilla.org/2026/05/trustworthy-javascript-for-the-open-web/
security
Zapscape - Guest to host escape in KVM/x86 https://lobste.rs/s/2hatf3 #linux #security #virtualization
https://github.com/V4bel/Zapscape
schrodingers-toctou: The binary you run is not the program you wrote https://lobste.rs/s/bmnusu #c #compilers #security
https://github.com/xoreaxeaxeax/schrodingers-toctou
Overwhelmed by randomness of my toots? Protip: you don't need to follow me/people, you can just follow hashtags for interaction. I use several, like:
#InfoSec #Privacy #Venice #Food #Art #F1 #Caturday (yup) & #LazyPip #Education #Security #Photography #Motorbike & #Ducati #theNetherlands #PhotoChallenge
TONTOU: On the Exploitability of Time-of-Neutralization to Time-of-Use Windows https://lobste.rs/s/eodvvq #pdf #security
https://people.csail.mit.edu/mengjia/data/2026.USENIX.TONTOU.pdf
#PSA #openssh #ssh #security
OpenSSH 高危漏洞
影响版本
8.5p1 <= OpenSSH < 9.8p1
处置建议
更新 OpenSSH > 9.8p1
或
LoginGraceTime=0
https://www.secrss.com/articles/67636?app=1
https://ubuntu.com/security/CVE-2024-6387
#ChatControl is OFF the table for now. 💪
But the Danish Minister of Justice and chief architect of the current Chat Control proposal, Peter Hummelgaard, wants to bring it back in December.
😡 He now even claims your activism was paid for by Big Tech! 😡
We must keep fighting for #encryption and our right to #privacy 🔒️
Legal experts called DHS’ move to use driver’s license data for citizenship checks more evidence of federal overreach.
“The administration wants to get as much data as it can, however it can, whenever it can.”
https://www.propublica.org/article/dhs-citizenship-checks-drivers-license-data?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon-post
#News #DHS #Immigration #Data #Privacy #Security #Law #Trump
We are excited to share our latest work on making secure messaging more decentralized!
We've developed DMLS – a new approach that brings fork resilience to the MLS protocol, solving a key challenge in distributed systems while maintaining Forward Secrecy.
This work was made possible by eQualitie, who funded it as part of the SplinterCon Breakout program.
#Cryptography #MessagingLayerSecurity #DecentralizedMessaging #Messaging #OpenSource #Security #E2EE #Encryption
A long interview, but a must-watch. Tristan studied at Stanford, interned at Apple, and started a company that got bought by Google where he ended up working on design. He founded the Center for Humane Technology with Aza Raskin, who’s worked at Mozilla and whose father began the Macintosh project. You’ll find them on stage and podcasts together, but this was just several days ago.
#ai #agi #asi #bigdata #bigtech #data #llm #ml #privacy #security #surveillance #ubi
Mullvad exit IPs as a fingerprinting vector https://lobste.rs/s/c6nclb #privacy #security
https://tmctmt.com/posts/mullvad-exit-ips-as-a-fingerprinting-vector/
Libera IRC Channels Sorted by Number of Users
----
- 2 hours ago | 4 points | 0 comments
- URL: https://netsplit.de/channels/?net=Libera.Chat
- Discussions: https://news.ycombinator.com/item?id=40983500
- Summary: Libera.Chat, an IRC network, reported an average of 33,386 users and 23,157 chat rooms. Notable channels include #linux, #python, #archlinux, #ubuntu, #rust, #security, #kde, #debian, and #thelounge.
Blocking Copy Fail (CVE-2026-31431) in Kubernetes with Tetragon https://lobste.rs/s/iwmyfo #security
https://isala.me/blog/mitigating-copy-fail-with-tetragon/
[oss-security] Evince/Atril/Xreader command injection CVE-2026-46529 https://lobste.rs/s/rlpzut #linux #security
https://lwn.net/ml/all/ce81312b-99e1-4305-a816-e74b2bd1ffd5@app.fastmail.com/
Cybersecurity Looks Like Proof of Work Now https://lobste.rs/s/dzlbeb #security #vibecoding
https://www.dbreunig.com/2026/04/14/cybersecurity-is-proof-of-work-now.html
Multi-Agent gVisor Isolation https://lobste.rs/s/z9ccd2 #linux #security #virtualization
https://gvisor.dev/blog/2026/04/15/magi-multi-agent-gvisor-isolation/
#Incus impressed me as a #Proxmox alternative, but #IncusOS? That’s the next evolution!
IncusOS comes with all the missing things like ARM64 (aarch64) support, boot safety, full disk encryption, immutable images (read-only and signed) and fully locked down to operate in API only mode.
For me, it’s a mix of #Talos, #Harvester and Proxmox where it merges the best features of all ones!
Tags: #PVE #Virtualization #Containerization #Container #Containers #Linux #Debian #ARM64 #aarch64 #opensource #security #immutable #foss #LXC #LXD #VM #VPS #Immutable #secureboot #TPM
Blog post: https://gyptazy.com/incusos-a-platform-for-modern-virtualization-containerization-infrastructure/
IncusOS comes with all the missing things like ARM64 (aarch64) support, boot safety, full disk encryption, immutable images (read-only and signed) and fully locked down to operate in API only mode.
For me, it’s a mix of #Talos, #Harvester and Proxmox where it merges the best features of all ones!
Tags: #PVE #Virtualization #Containerization #Container #Containers #Linux #Debian #ARM64 #aarch64 #opensource #security #immutable #foss #LXC #LXD #VM #VPS #Immutable #secureboot #TPM
Blog post: https://gyptazy.com/incusos-a-platform-for-modern-virtualization-containerization-infrastructure/
Edited 305d ago
Curious about the latest trends in Open Source, GitHub, and AI? I recently had a great conversation with GitHub’s @alacolombiadev and @kedashakerr about this year’s Octoverse Report! We discussed how AI is shaping programming language preferences, the evolving approach to security in open source projects, and what these changes mean for developers.
Tune in to hear our thoughts and takeaways!
https://the-github-podcast.simplecast.com/episodes/typescripts-takeover-ais-lift-off-inside-the-2025-octoverse-report #opensource #ai #security #github
"six CVEs for serious security vulnerabilities in dnsmasq" https://lobste.rs/s/tvhqam #security
https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2026q2/018471.html
NHS Goes To War Against Open Source https://lobste.rs/s/qp0vi5 #ai #security
https://shkspr.mobi/blog/2026/05/nhs-goes-to-war-against-open-source/
I published “Being the Change🌍 (featuring my abandoned and ongoing changes)” at
https://www.ii.com/be-the-change/
#BeTheChange #BeingTheChange #BeKind #CarFree #Boycott #Shopping #FLOSS #Standards #Activism #Hacktivism #AsciiDoc #Markdown #Privacy #Security #Tech
#InfiniteInk
#Byℵ #ByNM
Serviços federados são mais seguros: o que a exposição de dados de milhões de usuários do Whatsapp nos ensina?
https://blog.isacloud.im/servicos-federados-sao-mais-seguros/
Top #Hezbollah commander killed in Israeli strike on #Beirut - 2 security sources
Top Hezbollah commander #IbrahimAqil was killed on Friday in an Israeli strike on Beirut's southern suburos, 2 #security sources told Reuters.
One of the sources said he was killed alongside members of Hezbollah's elite Radwan unit as they were holding a meeting.
#Israel #Lebanon #Iran #Gaza #MiddleEast #war #geopolitics
https://www.reuters.com/world/middle-east/top-hezbollah-commander-killed-israeli-strike-beirut-two-security-sources-2024-09-20/
DigiCert Revokes Certificates After Support Portal Hack https://lobste.rs/s/c1qedl #security
https://www.securityweek.com/digicert-revokes-certificates-after-support-portal-hack/