Storing metadata in ELF binaries with SQLite
Someone embedded a SQLite database directly into a Linux executable. The binary still runs, the database still queries, and the toolchain does not care.
Read the note 1 min read
From the notebook
linux.
6 notes on this topic.
Someone built a 100 Gbps packet generator in Go
A network engineer pushed Go to saturate a 100 Gbps link using AF_XDP. The surprising bit is not the speed, it is that Go got there at all.
Read the note 1 min read
1,500 poisoned packages in the Arch User Repository
The Arch Linux team spent the weekend cleaning up more than 1,500 malware-laden packages from the AUR. The scale is what surprised me.
Read the note 1 min read
400 AUR packages compromised, or why I stopped trusting build scripts
The Arch User Repository just had 400 packages backdoored. The attack vector was not clever. It was obvious, predictable, and it worked anyway.
Read the note 1 min read
Three Linux kernel exploits, same root cause: trusting packet reassembly
Dirty Frag, Copy Fail, Fragnesia. Three distinct kernel exploits in eighteen months, all exploiting how Linux reassembles fragmented network packets.
Read the note 1 min read
AI bug hunters are spamming the Linux security list into chaos
Linus Torvalds says automated vulnerability scanners have turned the kernel security mailing list into noise. The tools work, the signal-to-noise ratio does not.
Read the note 1 min read