A threat actor going by the name irleak is selling a massive database containing over 107 million personal records from more than 20 Iranian travel agencies. The post appeared on a dark web forum yesterday, June 17.

The compromised data is highly sensitive. It includes complete customer profiles with national IDs, passport numbers, and contact details, as well as extensive travel itineraries covering flights, trains, buses, and hotel accommodations.

Some of the most impacted agencies include Haftorang with 47.7 million records and Tikban with 23.6 million. The asking price for this immense trove of data is $60,000 in Bitcoin.

i was reading the CPython source and found that the bytecode interpreter usually does not dispatch opcodes with a giant switch statement

instead it uses computed goto, a GCC extension outside the C standard

the dispatch table stores addresses of labels and jumps directly between them

the only reason it exists is performance

CPython developers measured it and found it faster than the traditional switch based interpreter

excellent !
Pope Leo and Pangram

"By supplying an admin username with an arbitrary API key the request was processed with admin privileges."

"If exploited, this would have allowed an attacker to modify Python release and file metadata that affects what URLs users are offered when visiting python.org/downloads. While it would not enable existing release files to be modified in-place, it would enable an attacker to modify the URLs that are provided on python.org for each release file, including verification material URLs. There is no evidence this vulnerability was exploited after auditing logs and database backups. This scenario is even more unlikely to have happened unnoticed due to the many redistributors requiring Python Sigstore and PGP materials be verified prior to builds."