#security

Hi infosec.exchange 👋 Computer scientist with a soft spot for self-hosting and security. Always happy to chat about Linux, privacy, and running your own services. #Introduction #Linux #Privacy #Security #SelfHosting #HomeLab #OpenSource #InfoSec

Finding a vulnerability in Star Wars Episode I: Racer via @hugoarnal@mastodon.social https://lobste.rs/s/rfacq5 #c #security https://synacktiv.com/en/publications/star-wars-episode-i-racer

NEW: A Natural Gas Project Off Alaska’s Coast May Be a Russian Ploy for Intel on the Arctic --- American contractors have been gathering data in the frigid Beaufort Sea for a natural gas project off Alaska’s coast. But the CEO of the firm resigned, claiming it’s all a Russian ploy. https://www.propublica.org/article/alaska-prudhoe-lng-polar-novatek?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon-post #News #Alaska #Russia #Politics #Gas #Data #Security

I deleted all my SSH keys via @lobsters@mastodon.social https://lobste.rs/s/sdtcvv #hardware #security https://blog.infected.systems/posts/2026-11-03-i-deleted-all-my-ssh-keys/

The race to secure record-like information for domains by @robalex@indieweb.social https://lobste.rs/s/vqtg9b #networking #security https://alexsci.com/blog/the-race-to-secure-record-like-information-for-domains/

PyPI's redesigned project pages with clearer security signals are now live https://lobste.rs/s/s1tppi #python #security https://blog.pypi.org/posts/2026-11-06-ui-updates-complete/

Dus ik lees: "Kabinet wil dat NCSC scanplatform ontwikkelt voor vinden van kwetsbaarheden" (https://www.security.nl/posting/960765/Kabinet+wil+dat+NCSC+scanplatform+ontwikkelt+voor+vinden+van+kwetsbaarheden) Ondertussen is al enige tijd geleden OpenKat ontwikkeld door het Ministerie van VWS, dat precies dát doet. Sterker nog, het is verzelfstandigd in een stichting onder de naam LibreKat. (https://librekat.nl) Waar ondertussen ook drie andere heel waardevolle initatieven op veiligheidsgebied uit zijn gekomen. Dus, kabinet, als je die club nou eens een paar centen toeschuift, in plaats van het wiel opnieuw uit te vinden.... Zomaar een idee hoor. Knuffel! #digitaleautonomie #security #vulnaribilityscanner #openkat #librekat p.s. misschien leuk voor een artikel door @MarloesdeKoning@nrc.social of aandacht door @marleenstikker@waag.social

Terminal2Shell: Critical flaw grants instant shell access on every major OS https://lobste.rs/s/vghqe8 #satire #security https://terminal2shell.com/

#ubuntu #security Canonical seems to be having epic struggles to release kernels with fixes for CVE-2026-98432, TCP remote 9.8 level kernel flaw. So far they only managed to fix it (at least purportedly) in the kernel for Ubuntu version 26.10. Their progress page lists kernel versions that were supposed to fix it, but were already totally confusingly released without this fix on closer inspection. Customers don't hear a word on it. It seems likely they are overwhelmed.

Let’s Talk About Why all This OT Stuff is Connected via @PolyWolf@social.treehouse.systems https://lobste.rs/s/jxigk6 #security https://tisiphone.net/2026/11/08/lets-talk-about-why-all-this-ot-stuff-is-connected/

unlocking any car from X brand in most of the world https://lobste.rs/s/kbrpx3 #reversing #security https://shubs.io/unlocking-any-car-from-x-brand-in-most-of-the-world/

Nvidia Board Probes Reports CEO Was Targeted by Spy https://www.cnet.com/news/nvidia-board-probes-reports-ceo-was-targeted-by-spy/ #Technology #Security #News

Unattended reboots with encrypted disks by @jmmv@mastodon.online https://lobste.rs/s/urg4yu #freebsd #security https://jmmv.dev/2026/11/zkeys-intro.html

PHP2Shell — Deep Dive https://lobste.rs/s/d8dgav #programming #security https://djad04.github.io/php2shell-deep-dive/

Catching prompt injections hidden in PDFs by @tclancy@social.tomclancy.info https://lobste.rs/s/hreu0b #pdf #a11y #ai #security https://tomclancy.info/joshua-judges-ruth.html

Dear Open Source Developers: It's OK not to embargo via @liberty@mathstodon.xyz https://lobste.rs/s/lhovnm #security https://opensourcesecurity.io/2026/10-embargo/

I’m not a fan of Deno’s security model (2024) https://lobste.rs/s/sh62d1 #security https://goldstein.lol/posts/deno-security/

*sshole, or when are we finally going to get rid of C? https://lobste.rs/s/owsnms #security https://sunshowers.io/posts/sshole/

Alpine Linux : openssh-server password authentication bypass https://lobste.rs/s/7dbarm #security https://www.alpinelinux.org/posts/2026-11-05-openssh-password-authentication-bypass/

GhostMap: The Android flaw that crashes your phone before you open the app https://lobste.rs/s/c99mdx #android #security https://www.bitdefender.com/en-us/blog/labs/ghostmap-android