Planet GNU – Build User Takeover Vulnerability

Oct 222024
 

A security issue has been identified in
guix-daemon
which allows for a local user to gain the privileges of any of the build users
and subsequently use this to manipulate the output of any build. Your
are strongly advised to upgrade your daemon now (see instructions
below), especially on multi-user systems.This exploit requires the ability to start a derivation build and the ability to
run arbitrary code with access to the store in the root PID namespace on the
machine the build occurs on. As such, this represents an increased risk
primarily to multi-user systems and systems using dedicated privilege-separation
users for various daemons: without special sandboxing measures, any process of
theirs can take advantage of this vulnerability.VulnerabilityFor a very long time, guix-daemon has helpfully made…

External feed Read More at the Source: https://guix.gnu.org/blog/2024/build-user-takeover-vulnerability//

 2024-10-22  No Responses »

Internet Archive Blogs – Internet Archive Services Update: 2024-10-21

Oct 212024
 

In recovering from recent cyberattacks on October 8, the Internet Archive has resumed the Wayback Machine (starting October 13) and Archive-It (October 17), and as of today (October 21), has begun offering provisional availability of archive.org in a read-only manner. Features like uploading, borrowing, reviewing items, interlibrary loan, and other services are not yet available.  Please note that these services will have limited availability as we continue maintenance.  Hackers disclosed archive.org email and encrypted passwords to a transparency website, and also sent emails to patrons by exploiting a 3rd party helpdesk system. The safety and integrity of the Internet Archive’s data and patrons remain our top priorities. As the security incident is analyzed and contained by…

External feed Read More at the Source: https://blog.archive.org/2024/10/21/internet-archive-services-update-2024-10-21/

 2024-10-21  No Responses »

Ars Technica – How the Malleus Maleficarum fueled the witch trial craze

Oct 212024
 

Between 1400 and 1775, a significant upsurge in witch trials swept across early modern Europe, resulting in the execution of an estimated 40,000–60,000 accused witches. Historians and social scientists have long studied this period in hopes of learning more about how large-scale social changes occur. Some have pointed to the invention of the printing press and the publication of witch-hunting manuals—most notably the highly influential Malleus Maleficarum—as a major factor, making it easier for the witch-hunting hysteria to spread across the continent.
The abrupt emergence of the craze and its rapid spread, resulting in a pronounced shift in social behaviors—namely, the often brutal persecution of suspected witches—is consistent with a theory of social change dubbed “ideational diffusion,”…

External feed Read More at the Source: https://arstechnica.com/science/2024/10/how-the-malleus-maleficarum-fueled-the-witch-trial-craze/

 2024-10-21  No Responses »

Internet Archive Blogs – Internet Archive Services Update: 2024-10-17

Oct 182024
 

Last week, along with a DDOS attack and exposure of patron email addresses and encrypted passwords, the Internet Archive’s website javascript was defaced, leading us to bring the site down to access and improve our security.  The stored data of the Internet Archive is safe and we are working on resuming services safely. This new reality requires heightened attention to cyber security and we are responding. We apologize for the impact of these library services being unavailable. The Wayback Machine, Archive-It, scanning, and national library crawls have resumed, as well as email, blog, helpdesk, and social media communications.  Our team is working around the clock across time zones to bring other services back online. In coming…

External feed Read More at the Source: https://blog.archive.org/2024/10/18/internet-archive-services-update-2024-10-17/

 2024-10-18  No Responses »

INDY Week – Candidate Questionnaire: Joshua Bradley, Raleigh City Council At-Large

Oct 172024
 

Name as it appears on the ballot: Joshua Bradley Age: 50 Party affiliation: NC Green Party & Socialist Party USA Campaign website: https://bradleyforraleighworkers.com Occupation & employer: Hotel Accountant-Summit Hospitality Group Years lived in Raleigh: 32 1. Given the direction of Raleigh government, would you say things are on the right course? If not, what specific changes will you advocate for if elected? No. 1. Gentrification is still accelerating. I would work to ensure that housing for the workers, the poor, and the unhoused is the number 1 priority of the city. 2. There have been at least 5 unarmed people killed by police in the last few years. I will work to get the alternative crisis response unit fully funded, as people in…

External feed Read More at the Source: https://indyweek.com/news/elections-news/candidate-questionnaire-joshua-bradley-raleigh-city-council-at-large-2/

 2024-10-17  No Responses »

Ballot Access News – Jill Stein Ohio Vote-Counting Hearing Set for Tuesday, October 22

Oct 172024
 

A U.S. District Court will hear Stein v LaRose, s.d., 2:24cv-04042, on Tuesday, October 22. This is the case over whether Jill Stein’s votes should be counted. She is on the ballot in Ohio, but after the ballots were printed, the Secretary of State said he would not count her votes, because he perceived that her vice-presidential candidate had withdrawn, even though the vice-presidential candidate had not withdrawn.

Some evidence was taken on Wednesday, October 16, at the status conference.

External feed Read More at the Source: https://ballot-access.org/2024/10/16/jill-stein-ohio-vote-counting-hearing-set-for-tuesday-october-22/

 2024-10-17  No Responses »

jwz – Mosaic Netscape 0.9 was released 30 years ago today

Oct 132024
 

According to my notes, it went live shortly after midnight on Oct 13, 1994. We sat in the conference room in the dark and listened to different sound effects fired for each different platform that was downloaded. At some point late that night I wandered off and wrote the first version of the page that loaded when you pressed the “What’s Cool” button in the toolbar. (A couple days later, Jim Clark would go ballistic in a company-wide email because I had included a link to Bianca’s Smut Shack.) For those of you who are unaware of these finer details, 0.9 was the first release of the Netscape browser (which begat Firefox) available to the…

External feed Read More at the Source: https://www.jwz.org/blog/2024/10/mosaic-netscape-0-9-was-released-30-years-ago-today/

 2024-10-13  No Responses »

Internet Archive Blogs – Vanishing Culture: Keeping the Receipts

Oct 082024
 

The following guest post from editor and journalist Maria Bustillos is part of our Vanishing Culture series, highlighting the power and importance of preservation in our digital age. On August 13, 1961, the Sunday edition of The Honolulu Advertiser published its official Health Bureau Statistics (“Births, Marriages, Deaths”); on page B-6, in the leftmost column—just below the ads for luau supplies and Carnation Evaporated Milk—the twenty-second of twenty-five birth notices announced that on August 4, Mrs. Barack H. Obama of 6085 Kalanianaole Highway had given birth to a son. The Honolulu State Library subsequently copied that page, along with the rest of the newspaper, onto microfilm, as a routine addition to its archive. Decades later, as Donald Trump…

External feed Read More at the Source: https://blog.archive.org/2024/10/08/vanishing-culture-keeping-the-receipts/

 2024-10-08  No Responses »

LWN.net – [$] ClassicPress: WordPress without the block editor

Oct 082024
 

The recent WordPress
controversy is not the first time there’s been tension between the
WordPress community, the interests of Automattic as a business, and Matt
Mullenweg’s leadership as WordPress’s benevolent dictator for
life (BDFL). In particular, Mullenweg’s focus on pushing WordPress to use a new “editing experience” called Gutenberg caused significant
friction—and led to the ClassicPress fork. Users who
want to preserve the “classic” WordPress experience without straying
too far from the WordPress fold may want to look into ClassicPress.

External feed Read More at the Source: https://lwn.net/Articles/992219/

 2024-10-08  No Responses »

Pluralistic: Daily links from Cory Doctorow – Pluralistic: Prime’s enshittified advertising (03 Oct 2024)

Oct 032024
 

Today’s links

Prime’s enshittified advertising: Don’t touch that dial. No, seriously, DON’T.

Hey look at this: Delights to delectate.

This day in history: 2009, 2014, 2019, 2023

Upcoming appearances: Where to find me.

Recent appearances: Where I’ve been.

Latest books: You keep readin’ em, I’ll keep writin’ ’em.

Upcoming books: Like I said, I’ll keep writin’ ’em.

Colophon: All the rest.

Prime’s enshittified advertising (permalink)
Prime’s gonna add more ads. They brought in ads in January, and people didn’t cancel their Prime subscriptions, so Amazon figures that they can make Prime even worse and make more money:
https://arstechnica.com/gadgets/2024/10/amazon-prime-video-is-getting-more-ads-next-year/
The cruelty isn’t the point. Money is the point. Every ad that Amazon shows you shifts value away from you – your time, your attention – to the company’s shareholders.
That’s…

External feed Read More at the Source: https://pluralistic.net/2024/10/03/mother-may-i/

 2024-10-03  No Responses »

The Intercept – Facebook and Instagram Restrict the Use of the Red Triangle Emoji Over Hamas Association

Oct 022024
 

Meta is restricting the use of the upside-down red triangle emoji, a reference to Hamas combat operations that has become a broader symbol of Palestinian resistance, on its Facebook and Instagram, and WhatsApp platforms, according to internal content moderation materials reviewed by The Intercept. Since the beginning of the Israeli assault on Gaza, Hamas has regularly released footage of its successful strikes on Israeli military positions with red triangles superimposed above targeted soldiers and armor. Since last fall, use of the red triangle emoji has expanded online, becoming a widely used icon for people expressing pro-Palestinian or anti-Israeli sentiment. Social media users have included the shape in their posts, usernames, and profiles as a badge of…

External feed Read More at the Source: https://theintercept.com/2024/10/02/meta-facebook-instagram-red-triangle-emoji/

 2024-10-02  No Responses »

The Register – US govt hiding top hurricane forecast model sparks outrage after deadly Helene

Oct 022024
 

Taxpayer-funded data locked behind insurance firm’s paywall

The National Oceanic and Atmospheric Administration (NOAA) cannot reveal weather forecasts from a particularly accurate hurricane prediction model to the public that pays for the American government agency – because of a deal with a private insurance risk firm.…

External feed Read More at the Source: https://go.theregister.com/feed/www.theregister.com/2024/10/01/government_hurricane_forecast_secrecy/

 2024-10-02  No Responses »
 Newer Entries