Opening files in Vim with special modeline can result in arbitrary code execution
https://vulners.com/debian/DSA-3722
https://vulners.com/debian/DSA-3722
Vulners
vim -- security update
Florian Larysch and Bram Moolenaar discovered that vim, an enhanced vi editor, does not properly validate values for the the filetype, syntax and keymap options, which may result in the execution of arbitrary code if a file with a specially crafted modeline…
https://arxiv.org/pdf/1611.04558v1.pdf
Zero-shot translation with Google's NMT system
Zero-shot translation with Google's NMT system
> Susan Landau has an excellent essay on why it's more important than ever to have backdoor-free encryption on our computer and communications systems.
https://www.schneier.com/blog/archives/2016/11/securing_commun.html
https://www.schneier.com/blog/archives/2016/11/securing_commun.html
On practical quines %)
http://manishearth.github.io/blog/2016/12/02/reflections-on-rusting-trust/#fn:2
http://manishearth.github.io/blog/2016/12/02/reflections-on-rusting-trust/#fn:2
manishearth.github.io
Reflections on Rusting Trust
The Rust compiler is written in Rust. This is overall a pretty common practice in compiler
development. This usually means that the process of building the compiler involves downloading a
(typically …
development. This usually means that the process of building the compiler involves downloading a
(typically …
knowledge accumulation and knowledge decay
http://www.bennorthrop.com/Essays/2016/reflections-of-an-old-programmer.php
http://www.bennorthrop.com/Essays/2016/reflections-of-an-old-programmer.php
opensource projects unite! aka interoperability is important
http://iguaz.io/2016/12/02/did-amazon-just-kill-open-source/
http://iguaz.io/2016/12/02/did-amazon-just-kill-open-source/
Mixing JWT with TCP handshake for zero-cost TCP authentication
http://blog.kubernetes.io/2016/12/from-network-policies-to-security-policies.html
http://blog.kubernetes.io/2016/12/from-network-policies-to-security-policies.html
blog.kubernetes.io
From Network Policies to Security Policies
Editor's note: Today’s post is by Bernard Van De Walle, Kubernetes Lead Engineer, at Aporeto, showing how they took a new approach to the Ku...
Applied Prisoner Dilemma: Ransomware meets MLM
https://www.schneier.com/blog/archives/2016/12/ransomware_meet.html
https://www.schneier.com/blog/archives/2016/12/ransomware_meet.html
internal combustion strikes back!
http://www.nextbigfuture.com/2016/12/darpa-funds-30-kw-x4-liquid-piston.html
http://www.nextbigfuture.com/2016/12/darpa-funds-30-kw-x4-liquid-piston.html
NextBigFuture.com
DARPA funds 30 KW X4 liquid piston engine that is 90 times lighter than a conventional 2700 lb military 30 KW diesel generator…
DARPA has awarded LiquidPiston Inc. $2.5 million to continue development of a new, patented, high-efficiency, lighter-weight rotary engine. LiquidPiston, a
Longread on company culture. Sections can be read independently.
https://zachholman.com/talk/move-fast-break-nothing/
https://zachholman.com/talk/move-fast-break-nothing/
Zachholman
Move Fast and Break Nothing
Things Zach Holman said.