@ProPublica@newsie.social
·
2d ago
ProPublica
@ProPublica@newsie.social
The official Mastodon page for ProPublica. Pursuing stories with moral force.
newsie.social
Counterterrorism Czar’s Blueprint Targets Leftists, Ignores Far-Right Violence and Heaps Praise on Trump
---
Sebastian Gorka’s anti-terror plan makes no mention of long-established threats posed by far-right militants and instead villainizes the president’s political enemies. “This administration is not paying attention to the data,” one expert said.
https://www.propublica.org/article/trump-counterterrorism-plan-ignores-far-rights-gorka?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon-post
#News #Terrorism #Trump #USPolitics #Violence #Security #Extremism
40
13
95
Unlocking Encrypted ZFS Volumes with a Passkey
https://withblue.ink/2026/05/09/revaulter-encrypted-zfs-passkey.html
#Security #Encryption #ZFS
0
0
1
AI is Breaking Two Vulnerability Cultures https://lobste.rs/s/kuhmb0 #security #vibecoding
https://www.jefftk.com/p/ai-is-breaking-two-vulnerability-cultures
0
0
0
@hywan@floss.social
·
May 09, 2026
Ivan Enderlin 🦀
@hywan@floss.social
🌱 Ecologist
Rust nerd
👾 Hacker
🎓 PhD Computer Scientist
🤲 Open source lover
🙈 Parser, compiler, low-level, binding, VM/runtime, Web, home automation, embedded, WebAssembly polyglot…
🚀 R&D Element/Matrix, the decentralized, end-to-end encrypted, open source network
📜 Formerly Wasmer (WebAssembly runtime), Automattic, fruux, Mozilla (Firefox)… 🏠 Living in the stack, in a weird ABI, lost in FFI land
floss.social
You gave me a u32. I gave you root. (io_uring ZCRX freelist LPE), https://ze3tar.github.io/post-zcrx.html
A new vulnerability found in the Linux kernel in io_uring.
#linux #security
6
4
3
@analytics@social.vir.group
·
May 09, 2026
Kraken
@analytics@social.vir.group
Hello Fediverse! 👋 Lived through martial law. Now I monitor global tensions & anomalies. OSINT, artillery, strategic weapons, WMDs, info warfare. I don't sow panic or propaganda. Inaccuracies? Write me. Peace 🕊️ #OSINT #Monitoring #Security #War #StrategicWeapons #ThreatIntel #OSINT #akert
social.vir.group
🟢 Diplomatic Visit | 6/10
🇱🇧 🇺🇸
Lebanese delegation to visit Washington for talks
A Lebanese Armed Forces delegation is scheduled to arrive in Washington DC this Sunday. The visit is separate from ongoing peace negotiations with Israel.
#OSINT #NewsGroup #Lebanon #USA #Diplomacy #Security
0
0
0
@Larvitz@burningboard.net
·
May 08, 2026
Larvitz 
@Larvitz@burningboard.net
IT Consultant from Germany, Linux enthusiast, BSD fanboy and firmly convinced that Ancient Domains of Mystery is the greatest video game of all time (and always will be). You'll find me here talking about Open Source, self-hosting, advanced networking (proud operator of AS201379), smart home shenanigans, and anything you can torment with a terminal. Cat pictures also welcome. Left, antifascist, vegan. The trifecta your uncle warned you about.
burningboard.net
CVE-2026-43284 / "Dirty Frag" .. Antoher one of those nasty local-privilege-escallations.
Quickfix for Centos/Fedora based systems:
printf 'install esp4 /bin/false\ninstall esp6 /bin/false\ninstall rxrpc /bin/false\n' > /etc/modprobe.d/dirtyfrag.conf && rmmod esp4 esp6 rxrpc 2>/dev/null; true
Caution: That also effectively disables IPSEC and AFS client support. But it can easily be reverted by removing the file when a patched kernel arrives.
#dirtyfrag #cve_2026_43284 #security #centos #fedora #redhat
0
0
0
@Larvitz@burningboard.net
·
May 08, 2026
Larvitz
@Larvitz@burningboard.net
IT Consultant from Germany, Linux enthusiast, BSD fanboy and firmly convinced that Ancient Domains of Mystery is the greatest video game of all time (and always will be). You'll find me here talking about Open Source, self-hosting, advanced networking (proud operator of AS201379), smart home shenanigans, and anything you can torment with a terminal. Cat pictures also welcome. Left, antifascist, vegan. The trifecta your uncle warned you about.
burningboard.net
Let's Encrypt just stopped the issuance of certificates after an "incident":
https://letsencrypt.status.io/pages/incident/55957a99e800baa4470002da/69fe2d6698ca07050eb4b1b3
If anyone encounters issues today with failed certificate renewals: It's probably not your setup.
#letsencrypt #itsec #devops #linux #security #tls
119
7
170
Me: Create ticket saying, "I can access another person's account"
#IT: "Was it a shared workstation?"
Me: "Yes"
IT: "No big deal, just delete the browsing history."
Me: "I reported this as a #security violation"
IT: "No big deal."
Us: Conclude call.
Me: 💭 "WTF? Set your cookies to expire after 12h"
And I only reported because logging the user off twice did not invalidate their sessions. But it's somehow okay that I reused that user's cookie to access the account?
0
0
0
The loudest security headlines are often just theater. The real failures are buried in neglected protocols, misconfigured systems, and the boring gaps no one wants to fund. Don’t let the spectacle distract you from the substance. #security #infosec #protocols
0
0
0
@cnbusinessforum@mstdn.business
·
May 08, 2026
China Business Forum
@cnbusinessforum@mstdn.business
Exclusive business resource poised to become world’s virtual headquarters for SMEs interested in doing business in China.
mstdn.business
[#TRADESHOW] #Intersec #Shanghai 2026 – #Security #Equipment and #Technology #Expo will be held from May 7 to 9, 2026, at the National #Exhibition and #Convention #Center (#NECC), Shanghai. #Exhibition connects #international #suppliers with #China’s rapidly #expanding security, #fire #protection, and #safety #technology #markets. #Event integrates #global expertise with #market depth to promote #innovation in #AI, #IoT, #cybersecurity, and #emergency response #systems. https://cnbusinessforum.com/event/intersec-shanghai-2026-security-equipment-and-technology-expo/
0
0
0
@gamingonlinux@mastodon.world
·
May 08, 2026
GamingOnLinux
@gamingonlinux@mastodon.world
Unofficial (approved) mirror for https://www.gamingonlinux.com
mastodon.world
Have you run your Linux distribution updates recently? You probably should, because Dirty Frag and Copy Fail are coming for you.
https://www.gamingonlinux.com/2026/05/linux-security-flaws-dirty-frag-and-copy-fail-are-a-good-reminder-to-stay-up-to-date/
#OpenSource #Kernel #DistroNews #Security #Misc
1
0
7
@gamingonlinux@mastodon.social
·
May 08, 2026
Liam @ GamingOnLinux 🐧🎮
@gamingonlinux@mastodon.social
News + Opinions. One person mostly. Creator of many forms. Support on Patreon: http://patreon.com/liamdawe https://www.gamingonlinux.com (official account) If you want me, email me: contact@gamingonlinux.com
mastodon.social
Linux security flaws Dirty Frag and Copy Fail are a good reminder to stay up to date https://www.gamingonlinux.com/2026/05/linux-security-flaws-dirty-frag-and-copy-fail-are-a-good-reminder-to-stay-up-to-date/
#Linux #OpenSource #Security
24
3
21
0
0
0
What, if anything, is needed to fix "Dirty Frag" on Ubuntu? #kernel #2404 #security #patch
https://askubuntu.com/q/1566558/612
0
0
0
Verifying software origins and integrity is a core part of zero-trust. Doing this in air-gapped environments adds complexity. Our guide provides a matrix mapping automated image inspection to specific NIST controls for government environments.
https://anchore.com/wp-content/uploads/2026/04/WP2026_The-Practitioners-Guide-Mapping-Container-Inspection-to-DoW-RMF-Controls.pdf
#NIST80053 #ZeroTrust #Security
0
0
0
What, if anything, is needed to fix "Dirty Frag" on Ubuntu? #security
https://askubuntu.com/q/1566558/612
0
0
0
@argv_minus_one@mastodon.sdf.org
·
May 07, 2026
ARGVMI~1.PIF
@argv_minus_one@mastodon.sdf.org
Previously @argv_minus_one@mstdn.party
mastodon.sdf.org
Oh good, another high-severity #Linux #security vulnerability that somebody botched the disclosure of, turning it into a high-severity zero-day.
Because #CopyFail wasn't bad enough. Now we've got #DirtyFrag too.
Can #cybersecurity people please stop botching vulnerability disclosure? Thanks.
https://github.com/V4bel/dirtyfrag/blob/master/README.md
#security
14
7
25
@mgorny@social.treehouse.systems
·
May 07, 2026
Jesus Michał "Le Sigh" 🏔 (he)
@mgorny@social.treehouse.systems
A #cat (owned by 3 cats), a nonconformist. #Gentoo developer, est. 2010. Taking care of #Python, #LLVM, #Xfce. #FreeSoftware enthusiast. #CarFree → #rail around #Poznań and western #Poland. #MADAO. #AntiCapitalism. #ActuallyAutistic + #diabetes. Random rants, silly humor. Playing with tongue, and enjoying double entendres. Follows require approval because apparently AI-bros think not refusing a follow is consent. Note: if you can read Polish, I recommend following my Polish profile instead (link in table). It includes unique content that doesn't work in English, and I boost all English content there anyway. #TootFinder
social.treehouse.systems
Everyone loves jeering at vibecoded #GitHub being down all the time. Yet for some reason people still neglect to question making #Microsoft the primary guarantor of their software's supply chain #security. And the whole attestation nonsense that doesn't really protect against the most likely attack vectors.
14
0
8
Dirty Frag: Universal Linux LPE via @lattera@bsd.network https://lobste.rs/s/lu4efg #linux #security
https://www.openwall.com/lists/oss-security/2026/05/07/8
0
0
0
Behind the Scenes Hardening Firefox with Claude Mythos Preview https://lobste.rs/s/7zppv1 #browsers #security
https://hacks.mozilla.org/2026/05/behind-the-scenes-hardening-firefox/
0
0
0