Ooooh, nice:

https://xint.io/blog/copy-fail-linux-distributions

CVE-2026-31431: Local privilege escalation to root using a trivial 732 byte python script for pretty much every Linux distribution since 2017.

#CopyFail

"Indie bookstores are proving to be an antidote for the time we’re living in." 100% this

"A.I. disrupted online search results and flooded Amazon with poorly written copycat books...making it harder for books written by humans to stand out from the slop." YEP

https://archive.is/IMqNo (no paywall)
#bookstodon

Fourteen years ago, I wrote the proof-of-concept. This month, Chrome shipped the fix.

Back in 2012, I built several PoC browser extensions to demonstrate the real-world risks of cookie session theft and two-factor authentication bypass. The threat was already obvious then - anyone with code execution in the browser context could lift a session cookie and replay it from anywhere.

This April, Chrome 146 rolled out Device Bound Session Credentials (DBSC) on Windows, with macOS to follow. DBSC cryptographically binds authentication sessions to the device's hardware - TPM on Windows, Secure Enclave on macOS - so an exfiltrated cookie is useless on any other machine.
It doesn't kill infostealer-driven session hijacking outright, but it raises the cost.

Progress is progress.

Notable hacks where infostealer and session cookie stealing was involved:
EA games hack, 2021
CircleCI, 2022

Article from 2012:
https://www.infoworld.com/article/2279527/researcher-to-demonstrate-feature-rich-malware-that-works-as-a-browser-extension-2.html

Google on DBSC:
https://security.googleblog.com/2026/04/protecting-cookies-with-device-bound.html

Slides:
https://www.slideshare.net/slideshow/eng-zombie-browsers-spiced-with-rootkit-extensions-hacktivity-2012/14714610

Code:
https://github.com/Z6543/ZombieBrowserPack

#Chrome #Google #Firefox #hacktheplanet

Well the news is universally horrendous this morning. But you know what never disappoints?...... Comedy Wildlife Photography Awards! Hooray for animals!

18 silly finalists from the Comedy Wildlife People's Choice Awards

https://www.popsci.com/environment/comedy-wildlife-peoples-choice-awards-winner-finalists/

Ever wanted to start developing for the #Commodore #Amiga but had no idea where to start?

amiga-bootcamp, a git repo with all the knowledge about the Amiga's inner workings has you covered!

https://github.com/alfishe/amiga-bootcamp

#retrocomputing #development #programming #documentation

📣 Please take note ...

#AI #noAI #author #art #writing #creativity #joannamaciejewska #technology #laundry #dishes