The people who are crashing their 600HP Linux systems are, unfortunately, not the ones who are reading CVE listings in their spare time. Canonical and other distros are probably going to have to patch that default…
Likely no good reason. But he seemed to have identified many many systems that were, inexplicably, exposing port 631 to the internet. There is some reason people are doing it and, given the number of target systems, it…
This is the worry. It seems like a really unnecessary privilege escalation.
I guess the important question is whether or not these things are blocked by default or require user intervention to disable cups? Sure, many of us block all ports by default and either route everything behind a reverse…
I don't know if I would say it's a nothing burger, but i don't see how it affects important servers. It might impact a number of linux desktops and, if they are linked to important servers, provide a backdoor access…
This is entertaining reading. Although I don't know how pervasive this issue is, from the chunk i have read so far I can see why he was concerned that it was relatively trivial to have a target system accept anything…
How does an attacker exploit this vulnerability? - An attacker can exploit this vulnerability if it can connect to the host via UDP port 631, which is by default bound to INADDR_ANY, in which case the attack can be…
https://gist.github.com/stong/c8847ef27910ae344a7b5408d9840e... Original report Affected Vendor: - OpenPrinting Affected Product - Several components of the CUPS printing system: cups-browsed, libppd, libcupsfilters and…
From an eating-popcorn perspective, I would find it truly entertaining that a printer package could somehow result in a 9.9 security vulnerability that is somehow worse than heartbleed. How many linux systems actually…
Ukraine is (and will continue to be for decades) a fascinating case study for multiple reasons, but most impressively regarding NATO support. Although headlines detail billions upon billions in spending, the vast…
Indeed, although because I heavily utilized Docker I also ended up using UFW-Docker. It was fairly straightforward to incorporate into my startup scripts. https://github.com/chaifeng/ufw-docker
I was brand new to managing an Ubuntu Hetzner server and the moment I saw how many port 22 scans the server received i decided to try changing the port number, followed by key-only passwordless logins. My logs…
You're a legend, thanks for posting that.
Just opened the Play store and there are numerous Harmony apps. Could you provide a link, please?
Judging by the declaration of war against Ukraine by Russia, it appears an underappreciated aspect of the equation is equal measures of senility and insanity.
This kind of reminds me of when the Concorde first started flying and technically could cancel IFR flight and proceed under visual flight rules over the atlantic because it was above 60,000 feet. An interesting legal…
In many ways its no different than electronic musicians building songs based on short samples of older songs. I have no doubt there will be rulings supporting the sort of creativity you're discussing at some point in…
Some people obviously prefer the old days when security problems were hidden within proprietary code so the only people who knew about them were the ones who found the exploit.
If water was priced appropriately it would incentivize hydroponics that captures and recirculates waste water to minimize usage.
As a simple example, Threading in Python works good for i/o-bound operations like scraping a website, whereas Multiprocessing works best for CPU-bound operations like result hashing/transforming the data you just…
I understand everyone wants concurrency because that's the way everything else in programming works these days, but SQlite in memory or on an SSD (in WAL mode) writes so fast that it makes infinitely more sense to…
I think Musks turning point was when he randomly accused the Thai boyscout guide of being a pedophile. Since then his image has been continuously circling the toilet.
I don't know if it's wise to place such a challenge in front of all of us.
I can't imagine .io would ever be removed. if anything, it'll be categorized like .org or .com if it loses its geographic justification.
What is it then?
The people who are crashing their 600HP Linux systems are, unfortunately, not the ones who are reading CVE listings in their spare time. Canonical and other distros are probably going to have to patch that default…
Likely no good reason. But he seemed to have identified many many systems that were, inexplicably, exposing port 631 to the internet. There is some reason people are doing it and, given the number of target systems, it…
This is the worry. It seems like a really unnecessary privilege escalation.
I guess the important question is whether or not these things are blocked by default or require user intervention to disable cups? Sure, many of us block all ports by default and either route everything behind a reverse…
I don't know if I would say it's a nothing burger, but i don't see how it affects important servers. It might impact a number of linux desktops and, if they are linked to important servers, provide a backdoor access…
This is entertaining reading. Although I don't know how pervasive this issue is, from the chunk i have read so far I can see why he was concerned that it was relatively trivial to have a target system accept anything…
How does an attacker exploit this vulnerability? - An attacker can exploit this vulnerability if it can connect to the host via UDP port 631, which is by default bound to INADDR_ANY, in which case the attack can be…
https://gist.github.com/stong/c8847ef27910ae344a7b5408d9840e... Original report Affected Vendor: - OpenPrinting Affected Product - Several components of the CUPS printing system: cups-browsed, libppd, libcupsfilters and…
From an eating-popcorn perspective, I would find it truly entertaining that a printer package could somehow result in a 9.9 security vulnerability that is somehow worse than heartbleed. How many linux systems actually…
Ukraine is (and will continue to be for decades) a fascinating case study for multiple reasons, but most impressively regarding NATO support. Although headlines detail billions upon billions in spending, the vast…
Indeed, although because I heavily utilized Docker I also ended up using UFW-Docker. It was fairly straightforward to incorporate into my startup scripts. https://github.com/chaifeng/ufw-docker
I was brand new to managing an Ubuntu Hetzner server and the moment I saw how many port 22 scans the server received i decided to try changing the port number, followed by key-only passwordless logins. My logs…
You're a legend, thanks for posting that.
Just opened the Play store and there are numerous Harmony apps. Could you provide a link, please?
Judging by the declaration of war against Ukraine by Russia, it appears an underappreciated aspect of the equation is equal measures of senility and insanity.
This kind of reminds me of when the Concorde first started flying and technically could cancel IFR flight and proceed under visual flight rules over the atlantic because it was above 60,000 feet. An interesting legal…
In many ways its no different than electronic musicians building songs based on short samples of older songs. I have no doubt there will be rulings supporting the sort of creativity you're discussing at some point in…
Some people obviously prefer the old days when security problems were hidden within proprietary code so the only people who knew about them were the ones who found the exploit.
If water was priced appropriately it would incentivize hydroponics that captures and recirculates waste water to minimize usage.
As a simple example, Threading in Python works good for i/o-bound operations like scraping a website, whereas Multiprocessing works best for CPU-bound operations like result hashing/transforming the data you just…
I understand everyone wants concurrency because that's the way everything else in programming works these days, but SQlite in memory or on an SSD (in WAL mode) writes so fast that it makes infinitely more sense to…
I think Musks turning point was when he randomly accused the Thai boyscout guide of being a pedophile. Since then his image has been continuously circling the toilet.
I don't know if it's wise to place such a challenge in front of all of us.
I can't imagine .io would ever be removed. if anything, it'll be categorized like .org or .com if it loses its geographic justification.
What is it then?