Теодор Златанов / Ted Zlatanov

@tzz@infosec.exchange
73 Followers
200 Following
979 Posts
@zachweinersmith.bsky.social 💬 "C'est simplement la sélection naturelle, parbleu!"
Probably my favorite hidden feature in 80’s and 90’s PC games was a “boss” key you’d press to pause the game and bring up a fake spreadsheet. Because of course you would play them at work, not at home. https://en.wikipedia.org/wiki/Boss_key
Boss key - Wikipedia

Season one of #murderbot was amazing
max (of okcupid, keybase, sparknotes) is doing it again, he's wild for this one https://blog.foks.pub/posts/introducing/
Announcing FOKS, the Federated Open Key Service | The FOKS Blog

The Four Horsemen of The Naming Soup Apocalypse are now complete.

(Spoiler: the fourth one is real - see thread)

*Edit: forgot an important Fifth Horseman, mentioned in the comments:

https://infosec.exchange/@cjust/114820379745453988

This is all very efficient to secure services, but it's also a bit opaque: since it's the daemon you sandbox, and your admin tools are outside of that sandbox it's sometimes hard to analyze how the daemon sees things.

No more. With v258 there's a new verb "unit-shell" in systemd-analyze. You specify a service name, and it opens you a shell inside that specified services' sandbox (which must be running for this). You can look around and check if everything is like you expected it to be.

Literally every criticism of systemd I hear is just a variation on "I had to learn a new way of doing a thing that's different from how I've been doing it since the 70s, therefore Lennart is the Antichrist."

https://mastodonapp.uk/users/ljs/statuses/114822977834580322

"Arbitrary File Read via file:// Protocol in cURL"

Well, you see... 🤦‍♂️

“Perfect Days” (2023) — a beautiful movie — is now playing on Hulu in the U.S.

Day 2, again lots of great OSDI talks. My favorite was a systematic analysis of sequential performance optimization in practice.

https://www.usenix.org/conference/osdi25/presentation/park-sujin https://github.com/sslab-gatech/SysGPT

#usenix #osdi25

Principles and Methodologies for Serial Performance Optimization | USENIX

×
No es entonces simplemente un mercado?