NETGEAR社製ルーターにおける認証不要の任意コード実行の技術的解説(PSV-2022-0044) - GMO Flatt Security Blog
※本記事は先立って公開された英語版記事を翻訳し、日本語圏の読者向けに一部改変したものです。 画像出典: https://www.netgear.com/business/wifi/access-points/wac124/ はじめに こんにちは、株式会社Flatt Securityのstypr(@stereotype32)です。 一昨年、日本のOSS製品で発見された0day脆弱性に関する技術解説をブログに書きました。 それ以来、私は様々な製品に多くの脆弱性を発見してきました。残念ながら私が見つけたバグのほとんどはすぐに修正されなかったので、今日まで私が見つけた、技術的に興味深い脆弱性の情報を共有する機会がありませんでした。 本記事では、NETGEAR社のWAC124(AC2000)ルーターにおいて、様々な脆弱性を発見し、いくつかの脆弱性を連鎖させて、前提条件なしに未認証ユーザーの立場からコ
The first Asahi Linux Alpha Release is here! - Asahi Linux
It’s been a long while since we updated the blog! Truth be told, we wanted to write a couple more progress reports, but there was always “one more thing”… So, instead, we decided to take the plunge and publish the first public alpha release of the Asahi Linux reference distribution! We’re really excited to finally take this step and start bringing Linux on Apple Silicon to everyone. This is only t
I've found that one of the best ways to understand a new concept is to start from the very beginning. Start from a place where it doesn't exist yet and recreate it yourself, learning in the process not just how it works, but why it was designed the way it was. This isn't a practical guide to async, but hopefully some of the background knowledge it covers will help you think about asynchronous prob
A Git story: Not so fun this time | Brachiosoft Blog
Linus Torvalds once wrote in a book that he created Linux just for fun, but it ended up sparking a revolution. Git, his second major creation, was also an accidental revolution. It’s now a standard tool for software engineers, but its origin story wasn’t so much fun this time, at least for Linus. Linus doesn’t scale 1998 was a big year for Linux. Major companies like Sun, IBM, and Oracle started g
Competitiveness is a vice of mine. When I heard that a friend got Linux to boot off of NFS, I had to one-up her. I had to prove that I could create something harder, something better, faster, stronger. Like all good projects, this began with an Idea. My mind reached out and grabbed wispy tendrils from the æther, forcing the disparate concepts to coalesce. The Mass gained weight in my hands, and a
Amazon Linux 2023のリポジトリバージョンが追加されていた こんにちは、のんピ(@non____97)です。 皆さんはAmazon Linux 2023のパッケージのアップデート方法が気になったことはありますか? 私はあります。 ふと、Amazon Linux 2023のリリースノートを見ると、2023/3/15のGA後に2回アップデートがあったようです。 Amazon Linux 2023 release notes update 2023-03-29 - Amazon Linux 2023 Amazon Linux 2023 release notes update 2023-03-22 - Amazon Linux 2023 Amazon Linux 2023のパッケージのアップデートは以下記事で紹介している通り、単純にdnf upgradeするだけではなく、リポジトリ
Did you know that, at GitHub, we host all of our own source code on github.com? We do this because we’re our own biggest customer—testing out changes internally before they go to users. However, there’s one downside: If github.com were ever to go down, we wouldn’t be able to access our own source code. This is what you’d call a very simple circular dependency: to deploy GitHub, we needed GitHub. I
ly
The Ly display manager Note: the above animation can be found here! Ly is a lightweight TUI (ncurses-like) display manager for Linux and BSD, designed with portability in mind and doesn't require systemd to run. Join us on Matrix over at #ly-dm:matrix.org! Note Development happens on Codeberg with a mirror on GitHub. Dependencies Compile-time: zig 0.15.x libc pam xcb (optional, required by default
Why not ZFS
ZFS is a hybrid filesystem and volume manager system that is quite popular recently but has some important and unexpected problems. It has many good features, which are probably why it is used: snapshots (with send/receive suppport), checksumming, RAID of some kind (with scrubbing support), deduplication, compression, and encryption. But ZFS also has a lot of downsides. It is not the only way to a
The Philosophy of Software Design – with John Ousterhout
Stream the Latest EpisodeListen and watch now on YouTube, Spotify, and Apple. See the episode transcript at the top of this page, and a summary at the bottom. Brought to You ByCodeRabbit — Cut code review time and bugs in half. Use the code PRAGMATIC to get one month free. Modal — The cloud platform for building AI applications. — In This EpisodeHow will AI tools change software engineering? To
Large Text Compression Benchmark Matt Mahoney Last update: Mar. 25, 2026. history This competition ranks lossless data compression programs by the compressed size (including the size of the decompression program) of the first 109 bytes of the XML text dump of the English version of Wikipedia on Mar. 3, 2006. About the test data. The goal of this benchmark is not to find the best overall compress
linux-kernel.vger.kernel.org archive mirror help / color / mirror / Atom feedFrom: ojeda@kernel.org To: Linus Torvalds <torvalds@linux-foundation.org>, Greg Kroah-Hartman <gregkh@linuxfoundation.org> Cc: rust-for-linux@vger.kernel.org, linux-kbuild@vger.kernel.org, linux-doc@vger.kernel.org, linux-kernel@vger.kernel.org, Miguel Ojeda <ojeda@kernel.org> Subject: [PATCH 00/17] Rust support Date: Sun
A byte string library for Rust - Andrew Gallant's Blog
bstr is a byte string library for Rust and its 1.0 version has just been released! It provides string oriented operations on arbitrary sequences of bytes, but is most useful when those bytes are UTF-8. In other words, it provides a string type that is UTF-8 by convention, where as Rust’s built-in string types are guaranteed to be UTF-8. This blog will briefly describe the API, do a deep dive on th
Noble Numbat Release Notes Table of Contents Introduction New features in 24.04 LTS Known Issues Official flavours More information Introduction These release notes for Ubuntu 24.04 LTS (Noble Numbat) provide an overview of the release and document the known issues with Ubuntu and its flavours. For details of the changes applied since 24.04, please see the 24.04.2 change summary. Support lifespan
Deleted articles cannot be recovered. Draft of this article would be also deleted. Are you sure you want to delete this article? OpenWrtとは 無線LANにおけるアクセスポイント(以下AP)を中心とした機能に特化したファームウェア Linuxベースのディストリビューションで、OSSとして公開されている GitHub: https://github.com/openwrt 現在もアクティブにメンテされていることが分かる 初期の頃はCUIのみの提供だったが、現在はLuCIというLuaベースのWeb UIが整備されている パッケージマネージャとしてDebianのdpkgライクで軽量なipkgが提供されている VMware等の仮想環境でも動作させることも可能 Ope
GitHub - taishi-i/awesome-ChatGPT-repositories: A curated list of resources dedicated to open source GitHub repositories related to ChatGPT and OpenAI API
awesome-chatgpt-api - Curated list of apps and tools that not only use the new ChatGPT API, but also allow users to configure their own API keys, enabling free and on-demand usage of their own quota. awesome-chatgpt-prompts - This repo includes ChatGPT prompt curation to use ChatGPT better. awesome-chatgpt - Curated list of awesome tools, demos, docs for ChatGPT and GPT-3 awesome-totally-open-chat
Re: [GIT PULL] ntfs3: new NTFS driver for 5.15 - Linus Torvalds
linux-kernel.vger.kernel.org archive mirror help / color / mirror / Atom feedFrom: Linus Torvalds <torvalds@linux-foundation.org> To: Konstantin Komarov <almaz.alexandrovich@paragon-software.com> Cc: ntfs3@lists.linux.dev, linux-fsdevel <linux-fsdevel@vger.kernel.org>, Linux Kernel Mailing List <linux-kernel@vger.kernel.org> Subject: Re: [GIT PULL] ntfs3: new NTFS driver for 5.15 Date: Sat, 4 Sep
Manjusaka: A Chinese sibling of Sliver and Cobalt Strike
Cisco Talos recently discovered a new attack framework called "Manjusaka" being used in the wild that has the potential to become prevalent across the threat landscape. This framework is advertised as an imitation of the Cobalt Strike framework.The implants for the new malware family are written in the Rust language for Windows and Linux.A fully functional version of the command and control (C2),
Backdoor in upstream xz/liblzma leading to SSH server compromise | Hacker News
Very annoying - the apparent author of the backdoor was in communication with me over several weeks trying to get xz 5.6.x added to Fedora 40 & 41 because of it's "great new features". We even worked with him to fix the valgrind issue (which it turns out now was caused by the backdoor he had added). We had to race last night to fix the problem after an inadvertent break of the embargo.He has been
録画サーバー構築 Raspberry Pi 4b + USB boot Raspberry Pi OS 64bit (Docker-Mirakurun+Chinachu) ffmpeg H264_v4｜noyss
録画サーバー構築 Raspberry Pi 4b + USB boot Raspberry Pi OS 64bit (Docker-Mirakurun+Chinachu) ffmpeg H264_v4l2m2m HWエンコード 注意 2021年8月時点での録画サーバー構築覚書 内容を見てある程度分かる方向け 用意するもの Raspberry Pi 4b 電源とUSBケーブル（安定して5V/3Aを出せるもので） USBメモリ or USB SSD （転送速度の高速な物が良い） Plex PX-S1UD V2.0 SCM ICカードリーダー/ライター SCR3310/v2.0 B-CASカード その他 必要な方はアンテナ分配器やアンテナケーブルも。 Raspberry Pi 4b 2GB、Anker PowerPort+ 1、Amazon Basic USBケーブル（A to C ）、Tran
drobo-5n-unbrick.md 文鎮化したDrobo 5Nは復活できるか？→復活できた！ はじめに 2022年の大晦日、10年近くバックアップ先NASとして活躍してくれていた「Drobo 5N」のファームウェアを更新したところ、文鎮化してしまいました。しかし、どうにか復活させることができたので、復活に至った過程を共有します。Droboの文鎮化で困っている人は世界中に数多く存在し、文鎮化の原因はさまざまなようですが、こちらのケースと同じ状況であれば、この作業ログが何かの役に立ちましたら幸いです。 免責 Drobo 5N本体の分解を行うと、メーカー保証は失われます。筆者は、この記事の内容に関して生じたいかなる損害についても責任を負うものではありません。 手順の概要だけ確認したい方は、まとめへどうぞ。 状況 更新前 更新後 Drobo 5N firmware 3.5.11 4.2.1 D
Terraform v1.x Compatibility Promises | Terraform | HashiCorp Developer
The release of Terraform v1.0 represents an important milestone in the development of the Terraform language and workflow. Terraform v1.0 is a stable platform for describing and managing infrastructure. In this release we're defining a number of Terraform behaviors that we intend to remain compatible with throughout the 1.x releases: A large subset of Terraform language features.A more conservativ
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
Learning Async Rust With Entirely Too Many Web Servers
Booting Linux off of Google Drive
Amazon Linux 2023のパッケージをアップデートしてみた | DevelopersIO
How GitHub uses eBPF to improve deployment safety
Large Text Compression Benchmark
[PATCH 00/17] Rust support - ojeda
Ubuntu 24.04 LTS (Noble Numbat) Release Notes
OpenWrtをELECOM WRC-2533GST2に導入する - Qiita
文鎮化したDrobo 5Nは復活できるか？→復活できた！