Recent submissions

Comment · 8 days ago
Not according to the article, which says the vulnerable path runs "during the TCP handshake, ..."
Comment · 8 days ago
My $50 router has two cores.

  root@OpenWrt2:~# lscpu
  Architecture:        mips
  Byte Order:          Little Endian
  CPU(s):              4
  On-line CPU(s) list: 0-3
  Model name:          -
  Model:               MIPS 1004Kc V2.15
  Thread(s) per core:  2
  Core(s) per socket:  2
  Socket(s):           1
Comment · 8 days ago
I do see sockets listening on all interfaces, but those are blocked by the firewall.

  root@OpenWrt2:~# ss -Qlnt4 'src 0.0.0.0'
  State  Local Address:Port Peer Address:Port
  LISTEN       0.0.0.0:443       0.0.0.0:*   
  LISTEN       0.0.0.0:80        0.0.0.0:*   
  LISTEN       0.0.0.0:22        0.0.0.0:*
Comment · 19 days ago
https://openwrt.org is online again
Comment · 1 month ago
Comment · 1 month ago
A surprisingly long article for a one-line fix the authors didn’t send.
Comment · 4 months ago
It is required mainly for VMs that use virbr0 and NAT. Networking options like macvtap don't need it.
Comment · 1 year ago
https://github.com/mariuz/linux-0.01 might give you some ideas.
Comment · 1 year ago
Comment · 1 year ago
Another bit of trivia about the shebang support in Linux is that is possible to build the kernel without it. https://github.com/torvalds/linux/blob/master/fs/Kconfig.bin...

  config BINFMT_SCRIPT
  tristate "Kernel support for scripts starting with #!"
  default y
  help
    Say Y here if you want to execute interpreted scripts starting with
    #! followed by the path to an interpreter.
Comment · 1 year ago
I don't quite understand what --exec does. If I leave out --exec from example 3, is it supposed to prevent bash from executing other programs?

  $ landrun --log-level debug --ro /usr/bin,/lib,/lib64 /usr/bin/bash --norc
  [landrun] 2025/03/22 17:16:29 Sandbox config: {ReadOnlyPaths:[/usr/bin /lib /lib64] ReadWritePaths:[] AllowExec:false BindTCPPorts:[] ConnectTCPPorts:[] BestEffort:true}
  [landrun:debug] 2025/03/22 17:16:29 Adding read-only path: /usr/bin
  [landrun:debug] 2025/03/22 17:16:29 Adding read-only path: /lib
  [landrun:debug] 2025/03/22 17:16:29 Adding read-only path: /lib64
  [landrun:debug] 2025/03/22 17:16:29 Applying Landlock restrictions
  [landrun] 2025/03/22 17:16:29 Landlock restrictions applied successfully
  [landrun] 2025/03/22 17:16:29 Executing: [/usr/bin/bash --norc]
  bash-5.2$ 
  bash-5.2$ /usr/bin/uname -r
  6.13.7-200.fc41.aarch64
Comment · 1 year ago
Large projects like the Linux kernel, which are mostly C, use the preprocessor in .S files quite heavily.

Linux has hardly any .s files.

  ~/linux$ find . -name '*.s'
  ./arch/x86/kernel/asm-offsets.s
  ./kernel/bounds.s
  ./scripts/mod/devicetable-offsets.s
But there are plenty of .S files with #includes

  ~/linux$ $ find . -name '*.S' | xargs grep -l '#include' | wc -l
  1217
Edit: simplify command as suggested
Comment · 2 years ago
Comment · 2 years ago
Nested virtualization needs at least an M3

https://developer.apple.com/documentation/virtualization/vzg...

This is the sad situation on my M2 MacBook Pro :(

  $ swift repl
  Welcome to Apple Swift version 6.0.2 (swiftlang-6.0.2.1.2 clang-1600.0.26.4).
  Type :help for assistance.
    1> import Virtualization
    2> VZGenericPlatformConfiguration.isNestedVirtualizationSupported
  $R0: Bool = false
Comment · 2 years ago
This is form-over-function, classic Apple. They don't want to give even the slightest impression that they are selling a wired mouse.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton