Do It by Code

Why Do Python Lists Multiply Oddly? Exploring the CPython Source Code
Article, Comments

Codingconfessions

Why Do Python Lists Multiply Oddly? Exploring the CPython Source Code

A look at the internals of list implementation in CPython to understand this weird quirk about them

40 views06:29

Do It by Code

https://github.com/tukaani-project/xz/commit/e93e13c8b3bec925c56e0c0b675d8000a0f7f754

GitHub

Remove the backdoor found in 5.6.0 and 5.6.1 (CVE-2024-3094). · tukaani-project/xz@e93e13c

While the backdoor was inactive (and thus harmless) without inserting
a small trigger code into the build system when the source package was
created, it's good to remove this anyway:

- T...

40 views12:26

Do It by Code

Google has announced 'Chrome Enterprise' with two tiers available: Core and Premium.

It will allow administrators to control functionality of the browser and have enhanced security controls. See attached image for more details.

44 views12:29

Do It by Code

I ported THOUSANDS of apps to Windows 95
https://www.youtube.com/watch?v=CTUMNtKQLl8

Backport of .NET 2.0 - 3.5 to Windows 9x
GitHub Repo

YouTube

I ported THOUSANDS of apps to Windows 95

▶VOTE for my NEXT PROJECT: https://www.patreon.com/posts/march-2024-poll-101363953
▶dotnet9x on GitHub: https://github.com/itsmattkc/dotnet9x

▶FOLLOW on Twitter: https://twitter.com/itsmattkc
▶FOLLOW on Twitch: https://twitch.tv/mattkclive
▶FOLLOW on…

39 viewsedited 18:12

Do It by Code

XZ backdoor story – Initial analysis
Article, Comments

44 views02:25

Do It by Code

⚠ PuTTY CVE-2024-31497

📰Brief: attacker can gain access to private key with public key and some signed messages on hand via forged identification signature of legitimate user. Signed messages may be publicly visible due to storage in public Git.

🚩Possibilities: login into any servers key was used in, supply chain attacks software maintained git, etc.

📗Affected versions: 0.80 and prior.

📚Full description: https://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-p521-bias.html

19 views16:15

Do It by Code

Awhile back we heard rumors of a Telegram RCE 0day. We brushed it off as silly memes. Turns out the 0day was 100% real and you're all probably pwned.

It was unveiled on XSS. Nerds celebrated

(joking about pwned part... kind of)

More information: https://www.bleepingcomputer.com/news/security/telegram-fixes-windows-app-zero-day-used-to-launch-python-scripts/

BleepingComputer

Telegram fixes Windows app zero-day used to launch Python scripts

Telegram fixed a zero-day vulnerability in its Windows desktop application that could be used to bypass security warnings and automatically launch Python scripts.

26 views22:59

Do It by Code

Short Stack – World’s Smallest Nintendo Wii
Article, Comments

GitHub

GitHub - loopj/short-stack: World's Smallest Nintendo Wii, using a trimmed motherboard and custom stacked PCBs

World's Smallest Nintendo Wii, using a trimmed motherboard and custom stacked PCBs - loopj/short-stack

21 views05:30

Do It by Code

On 17th April, a group named 66slavs claimed to have breached the United States National Energy Research Scientific Computing Center (NERSC).

* We have not reviewed the data
* Yes, they watermarked a data breach

20 views05:41

Do It by Code

D/Invoke Process Hollowing

Implementation of process hollowing shellcode injection using DInvoke.

GitHub

GitHub - passthehashbrowns/DInvokeProcessHollowing

Contribute to passthehashbrowns/DInvokeProcessHollowing development by creating an account on GitHub.

22 views08:50

Do It by Code

Meta AI claims to have a child in a NYC public school
Article, Comments

23 views13:28

Do It by Code

Randar: A Minecraft exploit that uses LLL lattice reduction to crack server RNG
Article, Comments

GitHub

randar-explanation/README.md at master · spawnmason/randar-explanation

"Randar" is an exploit for Minecraft which uses LLL lattice reduction to crack the internal state of an incorrectly reused java.util.Random in the Minecraft server, then works bac...

21 views20:31

Do It by Code

13-year-old Marco Liberale has created a proof-of-concept PasteBin C2 botnet in Go. It is fully cross platform working on Windows, Linux, and Mac.

We are very happy to see such a young person contributing to this research space.

Check it out here: https://github.com/marco-liberale/PasteBomb

GitHub

GitHub - marco-liberale/PasteBomb: PasteBomb C2-less RAT

PasteBomb C2-less RAT. Contribute to marco-liberale/PasteBomb development by creating an account on GitHub.

30 viewsedited 20:46

Do It by Code

Ask HN: High quality Python scripts or small libraries to learn from
Article, Comments

https://www.dabeaz.com/tutorials.html
https://docs.astral.sh/ruff/
https://docs.astral.sh/ruff/rules/future-rewritable-type-annotation/#flake8-executable-exe
https://github.com/simonw/datasette
https://github.com/simonw/sqlite-utils

27 viewsedited 16:14

Do It by Code

The Microsoft Fabric community (?) forum is old and allows unchecked HTML on posts.

- Link attached, don't click the silly button
- Thanks to rari_teh for sharing this with us

Behold:
https://ideas.fabric.microsoft.com/ideas/idea/?ideaid=908a0c5d-95fe-ee11-a73c-000d3ae45d44

mklink link:
mklink /D UE_5.4 "C:\Program Files\Epic Games\Unreal\UE_5.4"

28 viewsedited 03:01

Do It by Code

GitHub comments abused to push malware via Microsoft repo URLs
Article, Comments

BleepingComputer

GitHub comments abused to push malware via Microsoft repo URLs

A GitHub flaw, or possibly a design decision, is being abused by threat actors to distribute malware using URLs associated with a Microsoft repository, making the files appear trustworthy.

24 views21:51

Do It by Code

Doom-htop: The classic DOOM game over htop
Article, Comments

GitHub

GitHub - 0x0mer/doom-htop: The classic DOOM game over htop, the text-based process viewer

The classic DOOM game over htop, the text-based process viewer - 0x0mer/doom-htop