security

Using LLM-based Verification to Eliminate Bugs in Linux's Network Stack https://lobste.rs/s/locapv #linux #security #vibecoding
https://www.basis.ai/blog/verified-nftables/

Not a Security Issue https://lobste.rs/s/61vchb #security #vibecoding
https://nesbitt.io/2026/05/12/not-a-security-issue.html

MAD Bugs: Even "cat readme.txt" is not safe https://lobste.rs/s/lhcktd #security
https://blog.calif.io/p/mad-bugs-even-cat-readmetxt-is-not

A 27-Year-Old Authentication Bypass in OpenBSD's PPP Stack https://lobste.rs/s/suaa0r #openbsd #security #vibecoding
https://blog.argus-systems.ai/blog/openbsd-pap-27-year-auth-bypass.html

Oops, you had your screen reader, an essential tool to access your device enabled while opening the details of an item in your password manager? Ah, screw that, let's just freeze the entire password manager and force you to restart the app even after disabling the screen reader. Oh and the 2FA code of that item? Yeah, not for you if you're blind.
#accessibility #blind #security #bitwarden

LLM Reviews in cargo-crev https://lobste.rs/s/vpdpkq #ai #rust #security
https://dpc.pw/posts/llm-reviews-in-cargo-crev/

File Notification Attacks: Side-Channel Leakage from the File-Notification System on Linux, Android, Windows, and macOS by @vmcall https://lobste.rs/s/x6yjrc #security
https://inoti.fyi/

Researcher says Microsoft secretly built a backdoor into BitLocker https://lobste.rs/s/ynxkj6 #programming #security #windows
https://www.techspot.com/news/112410-security-researcher-microsoft-secretly-built-backdoor-bitlocker-releases.html

Anthropic Claude Code Leak Reveals Critical Command Injection Vulnerabilities https://lobste.rs/s/nxfvyw #ai #security
https://beyondmachines.net/event_details/anthropic-claude-code-leak-reveals-critical-command-injection-vulnerabilities-e-6-c-1-k/gD2P6Ple2L

Zeroization, part 1: Wiping can make things worse https://lobste.rs/s/4hxxad #compilers #security
https://00f.net/2026/10/06/zeroization-1/

Copy Fail 2: Electric Boogaloo https://lobste.rs/s/n4fmkx #security
https://github.com/0xdeadbeefnetwork/Copy_Fail2-Electric_Boogaloo

ChiPass Release 2026.09.0 https://lobste.rs/s/mcioou #release #security
https://codeberg.org/ChiPass/ChiPass/releases/tag/v2026.09.0

Some secret management belongs in your HTTP proxy https://lobste.rs/s/nbt8uq #security #vibecoding
https://blog.exe.dev/http-proxy-secrets

OpenAI agents carried out an undisclosed attack on RubyGems https://lobste.rs/s/wajtsa #ai #ruby #security
https://www.rubyhack.ai/

Linux Zoom Client Proactively Reads X11 Clipboard https://lobste.rs/s/8t1ddm #linux #security
https://hachyderm.io/@simontatham/117201594980991062

Rare Not Random Using Token Efficiency for Secrets Scanning https://lobste.rs/s/dkd8ph #security
https://lookingatcomputer.substack.com/p/rare-not-random

Signal is developing a standalone desktop app without requiring a smartphone for setup or use, based on recent open-source code changes. 🖥️
The update adds more desktop controls while keeping end-to-end encryption, improving device independence with a privacy-first design. 🔐

@signalapp

🔗 https://aboutsignal.com/news/signal-desktop-without-a-mobile-phone-standalone-version-in-development/

#TechNews #Signal #Messaging #Privacy #E2EE #Encryption #EndToEndEncryption #OpenSource #FOSS #Cybersecurity #Security #Data #Internet #Freedom #Software #Tech #Communication

I Could've Rickrolled the Entire FIFA World Cup. All I Needed Was My ID via @fs111 https://lobste.rs/s/z5wfi9 #security
https://bobdahacker.com/blog/fifa-hack

A list of digital service providers outside the jurisdiction of the United States of America. 😉

https://codeberg.org/Linux-Is-Best/Outside_Us_Jurisdiction

My list was getting bigger than a Fedi post could hold, so it is now hosted on Codeberg, an alternative to GitHub or GitLab, but based out of Germany. 👍

#CodeBerg #GitHub #GitLab #WebHosting #Vpn #Dns #Cdn #PasswordManager #Email #Privacy #Security #Project2025 #Fascism #UnitedStates #RuleOfLaw #Justice

Angenommen es gäbe nur diese beiden Messenger, welchen würdet ihr bevorzugen?

#messenger #signal #threema #sicherheit #security

#introduction (updated for 2026)

I'm a writer. I write science fiction and fantasy stories. I also have a blog where I write about all the things that interest me: #money, #fitness and #exercise, the #environment, #freedom, #security, #Esperanto, #HEMA, #walking my #dog, etc.

For eleven years I was a Senior Writer at wisebread.com, writing about personal finance and frugality. Before that I worked as a software engineer for 25 years, first secure Unix then Bluetooth.

The gpg.fail aftermath: On responsible disclosure, GPG, and the state of security in 2026 [32:37] https://lobste.rs/s/fcttpk #video #cryptography #security
https://media.ccc.de/v/2026-728-the-gpg-fail-aftermath-on-responsible-disclosure-gpg-and-the-state-of-security-in-2026

Colleagues have implemented TOTP as a second authentication factor on the virtual machines in the data center! 👏

But they were almost recommending that people use the Google Authenticator app... 😶‍🌫️

🇧🇷🇵🇹 Os colegas implantaram TOTP como segundo fator de autenticação nas máquinas virtuais do centro de dados! 👏

Mas estavam quase recomendando que a galera usasse o aplicativo Google Authenticator... ⛈️

#InfoSec #TOTP #security #segurança #BigTech #cloud #nuvem

A startup is putting military-style drones in high school ceilings. Ceiling-mounted. Charging. Waiting. And when something happens, a pilot in Austin, Texas, decides whether to deploy pepper gel on your kid's school. I'm not saying the problem isn't real. It absolutely is. But read that back.... in schools. We've taken a Ukrainian battlefield tactic against Russian soldiers and ported it to Deltona High School in Florida. The co-founder literally said the idea came from watching drone videos of the war in Ukraine. The chief pilot described it as "cheating in a video game after you die." These are children.

Here's what's not in the headline:

🔒 The drones use an encrypted connection — but the article notes they're potentially vulnerable to cyberattack. A compromised drone in a crowded hallway isn't a security tool; it's a weapon pointed in the wrong direction.

⚖️ Mithril reserves the right to act independently during an attack, without waiting for law enforcement. A private company operating remotely is making use-of-force decisions at a school.

💰 Florida and Georgia approved $500K+ each for this. A group of Texas parents raised $200K more. That's real money going to ceiling drones instead of mental health services, counselors, or de-escalation programs.

The ACLU said it plainly: when force becomes a zero-risk remote action, it gets overused. Axon tried a Taser drone for schools in 2022, and its own ethics board killed it. Mithril is picking up where that got dropped.

I teach cybersecurity. I've spent years in boardrooms helping organizations think through risk. And the risk calculus here isn't just about whether the drone works. It's about what we're normalizing when we turn schools into drone-monitored combat zones and call it progress.

"This is the future," said the sheriff's captain.

I hope not.

https://www.wsj.com/business/a-startup-is-supplying-drones-to-high-schools-to-stop-mass-shootings-a7800ade

#SchoolSafety #Cybersecurity #Leadership #security #privacy #cloud #infosec

KeePassχ - a KeePassXC fork https://lobste.rs/s/ak5mgm #security
https://codeberg.org/keepasschi