Searching We Love Privacy Club

Twts matching #23:
Sort by: Newest, Oldest, Most Relevant

The code that wasn’t there: Reading memory on an Android device by accident
CVE-2022-25664, a vulnerability in the Qualcomm Adreno GPU, can be used to leak large amounts of information to a malicious Android application. Learn more about how the vulnerability can be used to leak information in both the user space and kernel space level of pages, and how the GitHub Security Lab used the kernel space information leak to construct a KASLR bypass. ⌘ Read more

⤋ Read More

My motivation to work on GoBlog isn’t always the same. Sometimes I don’t feel like programming in my free time, so the most I do is some bug fixing when I find broken things. Sometimes I just have no time to work on new features or improvements. But since yesterday evening I feel a new push and have completely rewritten the plugin system to make it much more flexible (and I like flexibility). I had to break compatibility with existing plugins, but given the small user base and the limited scope of what plugins could … ⌘ Read more

⤋ Read More

Pwning the all Google phone with a non-Google bug
It turns out that the first “all Google” phone includes a non-Google bug. Learn about the details of CVE-2022-38181, a vulnerability in the Arm Mali GPU. Join me on my journey through reporting the vulnerability to the Android security team, and the exploit that used this vulnerability to gain arbitrary kernel code execution and root on a Pixel 6 from an Android app. ⌘ Read more

⤋ Read More

L’Éducation nationale empile les réformes comme les mauvaises grippes
La réforme des lycées donne déjà ses fruits et pas de doute, ils sont mûrs, ils sont juteux et plein de vitamines ! Mise progressivement en place depuis 2018, cette réforme a ainsi aboutit depuis l’année dernière à se passer complètement de mathématiques dans son tronc commun à partir des classes de première, ne laissant cette […] ⌘ Read more

⤋ Read More

ProcessOne: ejabberd 23.01

Image

Almost three months after the previous release, ejabberd 23.01 includes many bug fixes, several improvements and some new features.

A new module, mod_mqtt_bridge, can be used to replicate changes to MQTT topics between local and remote servers.

A more detailed explanation of those topics and other features:

Erlang/OTP 19.3 discouraged

Remember that support for Erlang/OTP 19.3 is discouraged, and will b … ⌘ Read more

⤋ Read More

ProcessOne: ejabberd 23.01

Image

Two months after the previous release, ejabberd 23.01 includes many bug fixes, several improvements and some new features.

A new module, mod_mqtt_bridge, can be used to replicate changes to MQTT topics between local and remote servers.

A more detailed explanation of those topics and other features:

Erlang/OTP 19.3 discouraged

Remember that support for Erlang/OTP 19.3 is discouraged, and will be removed … ⌘ Read more

⤋ Read More

ProcessOne: ejabberd 23.01

Image

Two months after the previous release, ejabberd 23.01 includes many bug fixes, several improvements and some new features.

A new module, mod_mqtt_bridge, can be used to replicate changes to MQTT topics between local and remote servers.

A more detailed explanation of those topics and other features:

Erlang/OTP 19.3 discouraged

Remember that support for Erlang/OTP 19.3 is discouraged, and will be removed … ⌘ Read more

⤋ Read More

I reworked the current ActivityPub implementation of GoBlog, fixed ActivityPub replies to posts and also added support for reply updates and deletions. Under the hood it’s using the comment system. 🥳 Using the go-ap/activitypub library, working with ActivityPub is much easier (but still more complicated than I wish it would be). ⌘ Read more

⤋ Read More

Dérives sectaires : n’oubliez pas la plus grandes des sectes
La stupéfaction est totale : on apprenait il y a quelques jours que la France, pourtant pays du miel et du lait, serait le terreau fertile à l’apparition de certaines sectes et autres groupuscules louches à “caractère sectaire”. C’est en tout cas ce que s’est époumoné à dire la mission interministérielle dédiée, la Miviludes, dans un […] ⌘ Read more

⤋ Read More

Protecting Internal Web Resources

TL;DR: This blog post is a write-up of the process I went through to setup a set of internal web resources and apps for a small company I am running in my spare time ( providing a Single-Sign-On / SSO experience for internal users with web applications protected by flexible access policies including single and multi-factor authentication / two-factor authentication or 2FA).

Background

As I mentioned in the TL;DR above, I run a small software/technology com … ⌘ Read more

⤋ Read More

Meet the GitHub Campus Experts selected for the fall 2022 MLH Fellowship Cohort, powered by GitHub
Three new Campus Experts are joining the fall 2022 batch of the MLH Fellowship to work with open source maintainers and get real-world experience. ⌘ Read more

⤋ Read More

Élisabeth Borne lance un nouveau (rantan)plan vélo !
Le temps passe vite mais pas assez pour tout oublier. C’est ainsi qu’on se souvient d’il y a un peu plus d’un an, une certaine Elisabeth Borne lançait avec brio un premier plan vélo qui permettait enfin à chaque Français d’entrer – en pédalant – dans le XXIème siècle. Pour parfaire les résultats déjà flamboyants […] ⌘ Read more

⤋ Read More