CVE-2025-21756
Linux Kernel Exploitation: Vsock-related attack
CWE-416: Use After Free
- blog
- PoC
- nvd
- main patch
#cve #kernel
Linux Kernel Exploitation: Vsock-related attack
A flaw was found in the Linux kernel's VMware network driver, where an improperly timed socket unbinding could result in a use-after-free issue. This flaw allows an attacker who can create and destroy arbitrary connections on virtual connections to read or modify system memory, potentially leading to an escalation of privileges or the compromise of sensitive data.
CWE-416: Use After Free
- blog
- PoC
- nvd
- main patch
#cve #kernel
A cool-looking puzzle adventure, made with Godot Engine:
- Steam
- YouTube trailer
- Reddit post
#godot
- Steam
- YouTube trailer
- Reddit post
#godot
Do It by Code
Introducing Claude 4 https://www.anthropic.com/news/claude-4
Claude 4 has the ability to....uh
apparently detect "suspicious activity" and report you???
apparently detect "suspicious activity" and report you???
D2L-en
- https://d2l.ai
- d2l-ai/d2l-en
#book #ml
Interactive deep learning book with multi-framework code, math, and discussions. Adopted at 500 universities from 70 countries including Stanford, MIT, Harvard, and Cambridge.
- https://d2l.ai
- d2l-ai/d2l-en
#book #ml
This media is not supported in your browser
VIEW IN TELEGRAM
Looks like there is an open-source model for a Vortex drone, and it's being copied by some people
Source
Update: these dudes straight up patented my open source design.
Like, no attempt at hiding it whatsoever: https://patents.google.com/patent/US20240391613A1/en
Quoting Nicholas Rehm (@Nicholas_Rehm)
This is their “test prototype” they are showing off. It seems like they ripped my design files directly from here: https://hackaday.io/project/186410-the-cyclone-rotor-ufo-drone
And I’m 90% sure they’re using my software to fly this thing too. It flies with all the same little quirks I’d expect from my code.
Source
Show HN: GetStack.dev – Track GitHub open-source trends
Explore the most popular technologies and repositories, refreshed every week from GitHub
Explore the most popular technologies and repositories, refreshed every week from GitHub
LocalStack
http://github.com/localstack/localstack
A fully functional local AWS cloud stack. Develop and test your cloud & Serverless apps offline
http://github.com/localstack/localstack
Visual Studio Code: Text Buffer Reimplementation (2018)
#vscode
The Visual Studio Code team redesigned the text buffer implementation to improve performance and memory usage, replacing the old line array representation with a piece table data structure and a red-black tree for efficient line lookups. The new implementation, called the "piece tree," significantly reduces memory usage and provides faster line lookups, although it has some limitations
#vscode
The Big List of Naughty Strings
https://github.com/minimaxir/big-list-of-naughty-strings
This is a list of strings which have a high probability of causing issues when used as user-input data.
https://github.com/minimaxir/big-list-of-naughty-strings
python's is_integer
Returns True if the float instance is finite with integral value, and False otherwise.
example:
Returns True if the float instance is finite with integral value, and False otherwise.
example:
>>> 1.5.is_integer()
False
>>> 1.0.is_integer()
True
>>> 1.4142135623730951.is_integer()
False
A Self-Mutating x86_64 C Program (2013)
A self-mutating C program that changes its code at runtime by modifying the text segment of its memory space using the mprotect() function and changing the permissions of a page to be writeable. The program then replaces a single byte in the foo() function with a new value to change the behavior of the function, and later replaces the entire foo() function with a shellcode
Envoy
- Official documentation
- What is Envoy?
- GitHub repo
- hot restart
- stats architecture
- sandboxes docs
- Lyft's Envoy dashboards
Envoy is an open source edge and service proxy, designed for cloud-native applications, high-performance edge/middle/service proxy (written in C++).
Envoy is an L7 proxy and communication bus designed for large modern service oriented architectures. The project was born out of the belief that:
The network should be transparent to applications. When network and application problems do occur it should be easy to determine the source of the problem.
In practice, achieving the previously stated goal is incredibly difficult.
- Official documentation
- What is Envoy?
- GitHub repo
- hot restart
- stats architecture
- sandboxes docs
- Lyft's Envoy dashboards
SteamOS can be installed on some devices now (using recovery image)
https://store.steampowered.com/steamos
installation instructions using recovery image
SteamOS is Valve’s Linux-based operating system. It features a seamless user experience optimized for gaming, while retaining access to the power and flexibility of a PC, and plays tens of thousands of games on Steam. SteamOS officially ships on Steam Deck, and will soon ship with certain Legion Go S models.
https://store.steampowered.com/steamos
installation instructions using recovery image