Tweet
- Tweet
- Tweet dan balasan
Ouch: “due to a bug in the configuration settings for the zone, all instances were shut down when the maintenance started”—Google GCE email
Look forward to trying out AWS' new Zocalo doc collaboration. Esp. interested in the data-at-rest security details. https://aws.amazon.com/blogs/aws/zocalo-doc-storage-sharing/ …
Builder's dilemma: sometimes when creative people are focused, working hardest & at peak productivity, they're least likely to give updates.
#the martha blog has amazing photos of my farm taken by a drone! We love the possibilities and opportunities drones offer. Do you?
“there's still a couple trillion dollars in gear sitting around doing computing inside companies” Google Kubernetes http://mobile.nytimes.com/blogs/bits/2014/07/10/cloud-computing-giants-add-to-open-source-credentials-with-kubernetes/ …
In which an IT contractor proposes maintenance labor to a client for “free” [pirated] software. In production. As a follow-up to his email.
Today I learned the Postgres rc.d initdb script on Cent, RH & Amazon Linux hard-codes/ignores all parameters. That was 4 hours well spent...
.@Ethan_Heilman the TrueCrypt audit project has received no orders by any gov't or court.
https://twitter.com/tomrittervg/status/456175154326814721 …
https://twitter.com/tomrittervg/status/456176800352063488 …
Google: “we are also aware of [other bogus SSL certs] and can only conclude that the scope of the breach is unknown” http://googleonlinesecurity.blogspot.com/2014/07/maintaining-digital-certificate-security.html?m=1 …
.@bcrypt best technical summary I've seen: http://www.felixcloutier.com/x86/SYSRET.html
“OS…*must* ensure that SYSRET is not invoked w/ the user stack” /em added
Hello ladies. Look at your bug: http://www.openwall.com/lists/oss-security/2014/07/08/16 … Now back to me: http://www.vupen.com/blog/20120904.Advanced_Exploitation_of_Xen_Sysret_VM_Escape_CVE-2012-0217.php … Now, back to your bug: http://xenbits.xen.org/gitweb/?p=xen.git;a=history;f=xen/arch/x86/x86_64/entry.S;h=a3ed216b390c2e87a21ff377850ee34ee7f2bc74;hb=HEAD …
Judge issues warrant ordering creation of child pornography http://www.washingtonpost.com/blogs/local/wp/2014/07/09/in-sexting-case-manassas-city-police-want-to-photograph-teen-in-sexually-explicit-manner-lawyers-say/ …
OH daughters (5 & 9): Why did she say she's fat? I don't know. Maybe she's just right for her age. … Me: Who? Coco. … Me: Who's she? A pony.
@ClausHoumann @kennwhite @thegrugq setting %rsp to arbitrary values we can overwrite kernel structs (e.g. IDT) --> r00t :)
.@ClausHoumann @vnik5287 @thegrugq 5+ yrs in Linux, so RH/Cent/Oracle, Debian/Ubuntu, OpenVZ…
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-4699 …
http://seclists.org/oss-sec/2014/q3/90 …
“fastpath does not correctly restore even all regular registers, much less any segment registers or reflags values” https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/arch/x86/include/asm/ptrace.h?id=b9cd18de4db3c9ffa7e17b0dc0ca99ed5aa4d43a …
“kernel's general_protection handler will actually execute from a user-controlled stack” http://www.openwall.com/lists/oss-security/2014/07/08/16 … More https://www.kernel.org/doc/Documentation/x86/x86_64/kernel-stacks …
Twitter mungkin melebihi kapasiti atau mengalami gangguan seketika.
Lawati Status Twitter untuk maklumat lanjut.