Последние посты
Kali Linux
21 сент., 18:37
“There is, simply, no way, to ignore privacy. Because a citizenry’s freedoms are interdependent, to surrender your own privacy is really to surrender everyone’s. You might choose to give it up out of convenience, or under the popular pretext that privacy is only required by those who have something to hide. But saying that you don’t need or want privacy because you have nothing to hide is to assume that no one should have, or could have to hide anything – including their immigration status, unemployment history, financial history, and health records. You’re assuming that no one, including yourself, might object to revealing to anyone information about their religious beliefs, political affiliations and sexual activities, as casually as some choose to reveal their movie and music tastes and reading preferences. Ultimately, saying that you don’t care about privacy because you have nothingKali Linux
14 сент., 21:27
> be Alyssa Rosenzweig > look at Apple's M1 GPU and see a black box > Apple provides almost no public hardware documentation > decide to figure out how the GPU works anyway > start reverse-engineering Apple's GPU interfaces in 2021 > use macOS itself as the closest thing to documentation > get a triangle rendering on the M1 within weeks > realize the impossible-looking problem might actually be solvable > join forces with the Asahi Linux community > build an open-source graphics stack from scratch > keep reverse-engineering hardware Apple never documented publicly > eventually reach conformant OpenGL 4.6 and Vulkan 1.4 > make Apple's M1 and M2 GPUs work properly under Linux > turn a completely closed GPU into an open platform > prove that undocumented hardware can still be understood > become one of the leading voices in open-source graphics@Kalilinux
Kali Linux
6 сент., 11:36
Attackers are exploiting MikroTik routers with their Secure Shell (SSH) remote-access service, which is reachable from the internet! Update RouterOS immediately, then check for unknown users and scripts, CERT Polska advises.Source @KalilinuxKali Linux
2 сент., 01:44
In summary, a company which does ID verification for in-person interactions (hotels, car rentals, ID verification for alcohol or marijuana, etc) has somehow exposed over 153,000,000 drivers licenses of people in the United States and Canada.“It is a catastrophic data breach, probably one of the worse I've ever seen” Vx-underground said. If you're in the United States and have traveled, gotten a hotel, purchased marijuana or alcohol, there is a high probability you're in this.Unlike other breaches, this includes a photo of the person (from the license), making the identification of the person significantly easier.This poses a significant threat to celebrities (musicians, YouTubers, streamers, adult entertainers, actors, etc), politicians, lawyers, wealthy people (CEOs, investors, people of public interest), Law Enforcement Officers, etc.Krebs himself, and several other securityKrebs on SecurityFBI Probes Service Selling 153M+ Drivers Licenses – Krebs on SecurityA new identity theft service launched on the dark web this week is selling digital scans of more than 153 million drivers licenses from people in the United States and Canada. Based on interviews with individuals whose licenses are available for purchase…Kali Linux
2 сент., 00:22изменён
GrapheneOS has advised against buying the Google Pixel 11 device due to removed ARM MTE support, crucial for security. They plan to focus on the Motorola partnership instead, and may skip the Pixel 11 series entirely.Source @KalilinuxUpdate: they later mentioned in their mastodon account that there might be a workaround. The situation is complicated!AlternativeToGrapheneOS might skip the Pixel 11 series over the lack of MTE hardware security supportGrapheneOS has advised against buying the Google Pixel 11 device due to removed ARM MTE support, crucial for security. They plan to focus on the Motorola partnership instead, and may skip the Pixel 11 series entirely.Kali Linux
1 сент., 19:09
Thunderbolt is finally coming to Linux on Apple Silicon thanks to volunteers who reverse-engineered it, without any help from Apple whatsoever.Asahi's Sven Peter posted the first USB4/Thunderbolt driver for M1, M2 and M3 to the kernel list yesterday, after years of reverse-engineering.Source @Kalilinux
Kali Linux
27 авг., 09:13изменён
Compromising Signal's contact discovery enclavehttps://v12.sh/blog/signal@KalilinuxV12Compromising Signal's Contact Discovery EnclaveV12 found two critical object-lifetime vulnerabilities that allow the untrusted host server to break the enclave boundary.Kali Linux
27 авг., 09:05
New GPUThor Rowhammer Defeats ECC on NVIDIA RTX A6000 to Gain Host Root Accesshttps://thehackernews.com/2026/08/gputhor-rowhammer-defeats-ecc-on-nvidia.html@Kalilinux2,890Открыть в TelegramKali Linux
23 авг., 00:32
AliExpress has a nearly invisible way of identifying you. How? By using the audio from your PC.1. You open the website → the music on your phone cuts out. There's no <audio> or <video>. Muting the tab doesn't help. So what's going on?2. They're generating a sound with JavaScript: You don't hear anything: the volume goes to 0. But it does get sent to the speakers.The PC thinks there's audio. The headphones get stuck and don't switch to the phone.They use that sound to identify you. Every CPU and browser processes the audio just a tiny bit differently.And that, along with canvas, WebGL, and more, is your fingerprint.Firefox already makes the audio part almost useless. The Bluetooth trick… still works.
Kali Linux
22 авг., 02:25
"This may be the single biggest Linux ecosystem announcement I’ve seen in several years." The Lunduke Journal mentioned, Adding:The Omarchy Linux Foundation (Omacom) has just launched with $8 Million in funding. “This nonprofit foundation will hold the trademarks, fund the infrastructure, promote the work, and support the open-source projects and developers Omarchy depends on.” $8 Million. That’s a good amount of cash. But that’s not what makes this announcement so utterly wild. The really crazy part is that the funding comes from 8 people, each chipping in $1 Million bucks. And they are some seriously big names in the world of computing. - tobi, CEO of Shopify patrickc, CEO of Stripe MichaelDell, CEO of DELL jack Dorsey, founder of Twitter Matthew Prince, CEO of Cloudflare Brendan Irvine, Cofounder of Oculus jasonfried, CEO of 37signals DHH, creator of Ruby on RailsThis new “Omacom”
Kali Linux
1 авг., 22:23
Go and donate to dnsmasq to tor to openwrt to wikipedia to vlc..Some of them you might've already heard of, and some of them you might not even know. But these are the very infrastructure of our world. Have you ever used Wikipedia? probably yes. Have you ever donated them? probably not.If you ever used Youtube, if you ever watched a video on whatever the device you have, you've certainly been involved with ffmpeg. If you ever connected to a router a modem or whatever alike, you have certainly used dnsmasq and there's a high chance you've used openwrt somewhere in the process. So they are already serving you. Why not donating them? by doing so, you're encouraging transparency, and encouraging those who are respecting your privacy, those who are already serving you without even asking for anything in return. So don't throw your money at Adobe subscription, discord nitro telegramKali Linux
28 июл., 12:30
No, AI isn’t making you “forget” how to codesource @KalilinuxKali Linux
21 июл., 14:40
The Insider, together with Der Spiegel, and Le Monde, has obtained a cache of documents containing previously undisclosed details about the growing military cooperation between Russia and China.Secret documents from a series of clandestine Russian-Chinese military forums reveal a joint plan to defeat Elon Musk’s Starlink and a weapons development partnership far deeper than either country will admit. From air- and missile-defense systems to AI-enhanced drone capabilities, cooperation between Moscow and Beijing is allowing Russian forces to keep pace with Ukrainian innovations while China gains the opportunity to test its wares under combat conditions.The Guangzhou documents include a presentation devoted entirely to countering Starlink. It involves anything from joint legal and diplomatic pressure, to a joint electromagnetic-jamming architecture (“power suppression and adaptiveYouTubeExclusive! What Secret Military Documents Reveal About China, Russia, and StarlinkSecret military documents obtained and verified by The Insider shed light on China's support for Russia’s war in Ukraine and preparations for a potential conflict with the West. Evidence shows that Beijing is offering Moscow a contingency plan to counter—and…Kali Linux
19 июл., 21:17
переслано из @thehackernews
🛑 WARNING - A new critical NGINX vulnerability that has existed for 15-years lets unauthenticated attackers crash worker processes with crafted HTTP requests.CVE-2026-42533 affects specific regex map configurations.F5 says it may also allow pre-auth RCE if ASLR is disabled or bypassed.Read how the bug works: https://thehackernews.com/2026/07/critical-nginx-vulnerability-can-crash.html
Kali Linux
17 июл., 02:27
Linus Torvalds told Linux kernel developers this week that Linux is not one of those anti-AI projects and that AI is now a clearly useful tool.He says AI's usefulness was still arguable a year ago but no longer is, and that the doubters simply haven't used the tools. Nobody is forced to use AI, but he will ignore anyone trying to stop others from using it. Anyone who wants an anti-AI project, he says, can fork the code or walk away.@kalilinuxlore.kernel.org/all/CAHk-%3Dwi4zC%2BZe8e%2Bp3tMv8TtG_80KzsZ1syL9anBtmEh5Z40vg@mail.gmail.com
Kali Linux
11 июл., 10:16изменён
Weeks after the exploit code dropped, Redmond has finally shipped a fix for the Defender zero-dayMicrosoft has quietly fixed the “RoguePlanet” zero-day in Microsoft Defender, closing the latest hole exposed by security researcher Nightmare Eclipse after months of public sparring over the company's handling of vulnerability reports.According to Nightmare Eclipse, RoguePlanet affects fully patched Windows 10 and Windows 11 devices, allowing attackers to spawn a command prompt with SYSTEM privileges via a Microsoft Defender race condition."Microsoft has released an update to the Microsoft Malware Protection Engine that addresses the vulnerability identified by CVE-2026-50656. Please see the FAQ for more information on how to check if the new version has been installed," Microsoft noted.Source @kalilinuxBleepingComputerMicrosoft patches RoguePlanet Defender zero-day vulnerabilityMicrosoft has released a security patch to address a Defender zero-day vulnerability known as "RoguePlanet," disclosed after the June 2026 Patch Tuesday.Kali Linux
9 июл., 09:14изменён
AI Hacking and the Critical Shift in Privacy:They now have sophisticated AIs that find bugs in very hardened code bases like the Linux kernel and our other vital infrastructures that are the backbone of our society. They find the bugs in an hour now, they'll soon find them in a minute. And if they couldn't find the 0-day bug, they'll elevate on already known bugs to chain them in a way that was never thought of. They will penetrate and you ain't got no escape! they can ruin your service, make your costumers mad etc. but privacy-wise the question is what you have to offer when they're in?These vicious intruders mainly render the struggle to write safe code, mostly ineffective, it will be just a filtering mechanism to make them burn more juice, not a prevention mechanism which safeguards your code. Consequently, the struggle will shift more and more toward writing optimized code withKali Linux
29 июн., 03:42
A new Linux kernel exploit (CVE-2026-46331) gets root without modifying a single file on disk.It poisons the cached copy of /bin/su in memory. The binary on disk stays untouched. File-integrity checks come back clean.The root shell is already open! thehackernews.com/2026/06/new-linux-pedit-cow-exploit-enables.html@kalilinuxKali Linux
19 июн., 00:02изменён
Here goes nginx-quicburst (CVE-2026-42530), a new RCE in Nginx discovered by Nebula Security's security agent VEGA and demonstrated by them. This is only the third NGINX vulnerability since 2014 to receive NGINX’s “major” severity rating. If you use NginxKali Linux
18 июн., 23:57
Here goes nginx-quicburst (CVE-2026-42530), a new RCE in Nginx discovered by Nebula Security's security agent VEGA and demonstrated by them.This is only the third NGINX vulnerability since 2014 to receive NGINX’s “major” severity rating. If you use Nginx 1.31 with QUIC enabled, they recommend upgrading to the latest version.This bug has been patched in the latest Nginx release. They will publish the technical writeup, including the ASLR bypass, on July 18 together with the previous nginx-poolslip writeup.source @kalilinux
