Censorship may be a cat-and-mouse game, but our teams are staying ahead. If you want to hear more about our ongoing fight for online freedom, join us for our State of the Onion event on November 12 at 17:00 UTC. 📺

https://www.youtube.com/watch?v=fTDtUoauU74

Them: Why not use Google Sheets or MS Excel as a Database?

Me: You are right. Go ahead and use it. Have a nice day.

x64 Linux Binary Exploitation series

Basic: https://valsamaras.medium.com/introduction-to-x64-linux-binary-exploitation-part-1-14ad4a27aeef

Return into lib: https://valsamaras.medium.com/introduction-to-x64-binary-exploitation-part-2-return-into-libc-c325017f465

RoP Chains: https://valsamaras.medium.com/introduction-to-x64-linux-binary-exploitation-part-3-rop-chains-3cdcf17e8826

Stack Canaries: https://valsamaras.medium.com/introduction-to-x64-linux-binary-exploitation-part-4-stack-canaries-e9b6dd2c3127

ASLR: https://valsamaras.medium.com/introduction-to-x64-linux-binary-exploitation-part-5-aslr-394d0dc8e4fb

#exploit #infosec

Cats Of Mastodon! We are the algorithm. If you see a cat, boost a cat!

#cats #cat #CatsOfMastodon #FediCats #FediFelines #algorithm #boost #CatNews

I guess the takeaway from the xz backdoor situation is:

If you’re an open-source project maintainer, and somebody starts getting on your case for not doing enough free work for them, you reply “big Jia Tan energy there” and then block them forever.

I accidentally found a security issue while benchmarking postgres changes.

If you run debian testing, unstable or some other more "bleeding edge" distribution, I strongly recommend upgrading ASAP.

https://www.openwall.com/lists/oss-security/2024/03/29/4

🤯 The level of sophistication of the XZ attack is very impressive! I tried to make sense of the analysis in a single page (which was quite complicated)!

I hope it helps to make sense of the information out there. Please treat the information "as is" while the analysis progresses! 🧐 #infosec #xz