IIRC this is how those Elon musk crypto livestream hacks worked on YouTube back in the day, I think the bad actors got a hold of cached session tokens and gave themselves access to whatever account they were targeting. Linus Tech Tips had a good bit in a WAN show episode
kryllic
- 2 Posts
- 16 Comments
kryllic@programming.devto
Programmer Humor@programming.dev•When everyone became paranoid
1·2 years agoNo prob! I think Ars Technica had the best writeup imo: https://arstechnica.com/security/2024/04/what-we-know-about-the-xz-utils-backdoor-that-almost-infected-the-world/
kryllic@programming.devto
Programmer Humor@programming.dev•When everyone became paranoid
1·2 years agoIn a nutshell, a backdoor was intentionally planted by a malicious actor in xz Utils, an open-source data compression utility widely used in Linux and other Unix-like operating systems. This discovery was made by Andres Freund, a developer and engineer working on Microsoft’s PostgreSQL offerings. He was troubleshooting performance problems on a Debian system. Specifically, SSH logins were consuming excessive CPU cycles and generating errors with Valgrind, a memory debugging tool. Through sheer luck and Freund’s careful eye, he eventually discovered that these issues were the result of updates made to xz Utils. Upon closer inspection, he found that updates to xz Utils were the result of a maliciously inserted backdoor. The backdoor, present in xz Utils versions 5.6.0 and 5.6.1, manipulated the sshd executable, allowing anyone with a predetermined encryption key to upload and execute arbitrary code on affected devices.
Never heard of this, but it looks like a FOSS version of stellarium? Way cool, and the site gives nostalgic Web 1.0 vibes
kryllic@programming.devto
KDE@lemmy.kde.social•Exciting news! 🚀 #Kdenlive 24.02 is here with major upgrades, including Qt6 & KDE Frameworks 6. It's faster, sleeker, and sets the stage for the next decade.
3·2 years agoThis is exciting! Cant wait to try it out once that flatpak is released!
If you can’t beat 'em join 'em
Linux users having strong opinions? I’m shocked I tell you, SHOCKED!
Intel Arc is there for you: https://www.intel.com/content/www/us/en/products/details/discrete-gpus/arc.html
I must be living under a rock because this is the first I’ve heard of USB 4. Is it just a speed bump or does it affect the type of data that can be transferred? In my experience I’ve had issues using a usb 2.0 flash drive to use a live image of a Linux iso in a 3.1 port
kryllic@programming.devto
Programmer Humor@lemmy.ml•I've found the recent typescript 3x3 magic square checker entertaining. Anyway here is a arbitrary magic square checker using c++ type traits.
8·2 years agoProbably used something like CodeIMG: https://codeimg.io/
kryllic@programming.devto
Programmer Humor@lemmy.ml•OpenStreetMap's Overpass API can be used to find robbable banks
61·2 years agoAnd? This is like looking up hammers that don’t leave fingerprints on the grip so you can get away with murder. The tool itself isn’t the issue, the motive is, as well as the person responsible for using it.
kryllic@programming.devto
Programmer Humor@lemmy.ml•New browser arrived! - Pissandshittium
32·2 years agocan’t wait
Or better yet, that 1% can run in a VM
Found you, Rich Evans



Actionscript, my beloved