CVE-2026-4747
Re what's quoted in the opening post at <https://forums.freebsd.org/threads/102251/>, please note that Nicholas Carlini has not yet made a public statement about findings.
(I should not treat notebookcheck.net as an authoritative source on this matter.)
Distributing the Keys for Private Access to the Web https://lobste.rs/s/gg5n7g #cryptography #security #web
https://cdt.org/insights/distributing-the-keys-for-private-access-to-the-web/
Bypassing DPI with eBPF, no VPN or proxy needed https://lobste.rs/s/mhflmp #linux #networking #security
https://bora.sh/bypassing-dpi-with-ebpf/
A Cryptography Engineer’s Perspective on Quantum Computing Timelines https://lobste.rs/s/pfoohx #cryptography #security
https://words.filippo.io/crqc-timeline/
BrowserStack local leaking private key by @hanno https://lobste.rs/s/exqgps #browsers #cryptography #security
https://infosec.exchange/@badkeys/116359377342260172
John Pavlovitz: "If they are calling for ballrooms and not gun control, they are telling you what they value, and it isn't human."
#politics #security #priorities
89 vulnerabilities in XAPI / Citrix XenServer https://lobste.rs/s/hhrtcd #security
https://shittrix.moksha.dk/
OpenSSH begins warning for non-PQC key exchanges https://lobste.rs/s/edkm8d #networking #security
https://www.openssh.com/pq.html
Getting root on on TP-Link Smart Switches using CVE-2026-1668 https://lobste.rs/s/kgbtwo #networking #reversing #security
https://blog.tangrs.id.au/2026/04/06/exploiting-cve-2026-1668-part-3/
Assessing Claude Mythos Preview’s cybersecurity capabilities https://lobste.rs/s/aw2jr4 #security #vibecoding
https://red.anthropic.com/2026/mythos-preview/
Cloudflare targets 2029 for full post-quantum security via @RunxiYu https://lobste.rs/s/csxbgu #cryptography #security
https://blog.cloudflare.com/post-quantum-roadmap/
Nix security advisory: Privilege escalation via symlink following during FOD output registration https://lobste.rs/s/lwdzn1 #nix #security
https://discourse.nixos.org/t/nix-security-advisory-privilege-escalation-via-symlink-following-during-fod-output-registration/76900
Flatpak: Complete Sandbox Escape https://lobste.rs/s/cjbxsj #devops #security
https://github.com/flatpak/flatpak/security/advisories/GHSA-cc2q-qc34-jprg
The Future of the Con Is Already Here, It's Just Not Evenly Distributed - In Pursuit of Laziness https://lobste.rs/s/5majlp #ai #security
http://manishearth.github.io/blog/2026/06/17/the-future-of-the-con-is-already-here/
Please Do Not Hack Me - The Tale of a TeamSpeak Use-After-Free https://lobste.rs/s/fxksjw #security
https://modzero.com/en/blog/please-do-not-hack-me/
What's new in pip 26.1 - lockfiles and dependency cooldowns https://lobste.rs/s/w2oiaq #python #release #security
https://ichard26.github.io/blog/2026/04/whats-new-in-pip-26.1/
The woes of sanitizing SVGs https://lobste.rs/s/foxx1z #security #web
https://muffin.ink/blog/scratch-svg-sanitization/
GitHub RCE Vulnerability: CVE-2026-3854 Breakdown https://lobste.rs/s/8fxgx7 #security #vibecoding
https://www.wiz.io/blog/github-rce-vulnerability-cve-2026-3854
Carrot disclosure: Forgejo https://lobste.rs/s/swbkcl #security
https://dustri.org/b/carrot-disclosure-forgejo.html
In which I think out loud about Password Managers and take a closer look at 1Password and Bitwarden: https://www.tbray.org/ongoing/When/202x/2026/04/09/Password-Manager-Angst
Protecting Cookies with Device Bound Session Credentials https://lobste.rs/s/nyorr5 #browsers #security #web
https://security.googleblog.com/2026/04/protecting-cookies-with-device-bound.html
Total.js RCE gadgets all around https://lobste.rs/s/fi28gj #javascript #security #web
https://criticalthinkingpodcast.github.io/research/totaljs-rce-gadgets
Capsicum vs seccomp: Process Sandboxing via @RunxiYu https://lobste.rs/s/hbirya #freebsd #linux #security
https://vivianvoss.net/blog/capsicum-vs-seccomp
You shouldn't trust Trusted Publishing by @yossarian https://lobste.rs/s/8d9pgd #python #security
https://blog.yossarian.net/2026/07/07/You-shouldnt-trust-trusted-publishing
Put your SSH keys in your TPM chip https://lobste.rs/s/ggum7f #linux #security
https://raymii.org/s/tutorials/Put_your_SSH_keys_in_your_TPM_chip.html
