mTLS saves me every time.
‼️🚨 MAJOR IMPACT: AI just found an 18-year-old NGINX critical remote code execution vulnerability. It has been disclosed on GitHub including PoC code.
- Affects NGINX 0.6.27 through 1.30.0
- Triggered via the rewrite and set directives in config
- Update NGINX ASAP
- NGINX is a widely used HTTP web server, be sure to check its prevalence in other products
Readers added context they thought people might want to know
The exploit requires ASLR to be disabled, which is not default on practically all systems. This is seen in the exploit code. Source github.com/depthfirstdisc…
Just started #severance , but noticed something: Eagan is very close to the Unix/SysV error EAGAIN, meaning “Error try AGAIN”.
LA looks exactly like Luthadel from the Mistborn series currently xitter.cf/rawsalerts/status/1877…
Just as a start to get more optimistic on modern C/C++, I get slammed with the age old 'Our Library needs you to do threads only this way' issue. It is Boost/OpenMP all over again.
What was the fraud you ask? They said they would update their BIOS menu.
youtube.com/watch?v=QLSkyrea…
Have a C daemon/runtime in your BSP
✅Create IPC API so customer can interface with it
⚠️Create client IPC library for compound calls
🔥Create a custom build tool for generating the library
🪦Only document the C 'helloworld' case in detail
The amount of single byte reads I find in boomer embedded code makes me think this is not harsh enough.
The economics of cyber vuls are off:
- Researchers are incentivized to hype findings to get a higher impact score.
- Orgs are incentivized to use minimally trained staff and tools.
It all gets dumped on vendors to RE the tools and research, often showing nothingburgers.
CJ Leede already wrote it, just make Maeve Fly a movie
Lionsgate is looking to do a modern remake of ‘AMERICAN PSYCHO’.
(Source: theinsneider.com/p/jurassic-…)














