kuizu
Joined 12 years ago
Karma
246
Submissions
15
Member since
Apr 9
Recent submissions
Comment · 5 months ago
Comment · 6 months ago
A similar concept, but with multiple probes at the same time, was published in this blog series as open source hard- and software:
https://www.schutzwerk.com/en/blog/proboter-01/
They explain some of the use cases in this demo video https://youtu.be/TYEjZA-xbGo?is=osWXCrBkLOi4JHxO
Comment · 11 months ago
Something does not line up here. The description at NIST in the CVE is about a local privilege escalation.
It contains these two links
- https://packetstorm.news/files/id/189989
- https://gist.github.com/R-Security/1c707a08f9c7f9a91d9d84b50...
The first is also about the LPE, the second is apparently by the same author, names the same CVE-ID but is about a remote code execution?
Comment · 2 years ago
Also
* 10-part series explaining all relevant Linux container mechanisms ( https://www.schutzwerk.com/blog/linux-container-intro/ )
Comment · 3 years ago
At least on Android there is a nice app for the first point. It will track your calls and messages and remind you to contact people in certain intervals based on predefined contact group settings: https://play.google.com/store/apps/details?id=me.barta.stayi...
Comment · 5 years ago
A nice blog series explaining in detail each Linux kernel mechanism making up containers: https://www.schutzwerk.com/en/43/posts/linux_container_intro...
Comment · 5 years ago
The Gitlab licensing model was recently change and the lowest tier starter license was removed.
Anyone knows which of these new features a customer receives that is still on "starter" (which can be kept for up to one year after the change to the license model)?
Comment · 5 years ago
Part one was discussed here
https://news.ycombinator.com/item?id=25538820
Comment · 9 years ago
Public information is very thin on the exploitability of this. Are you able to elaborate a little bit where MSG_PEEK might be used?
Is it used in the kernel? Only in specific applications?
"where the user cannot directly access the data from the connected product or related service, the data holder must make the readily available data and necessary metadata accessible to the user without undue delay, in the same quality as available to the data holder, easily, securely, free of charge, in a structured, commonly used, machine-readable format, and continuously/in real time where relevant and technically feasible."
There is even special EU guidance for vehicle data for it: https://digital-strategy.ec.europa.eu/en/library/guidance-ve...