/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 outflux.net
codeblog
| | blog.rfox.eu
Programmer's critique of missing structure of operating systems
20.2 parsecs away

Travel
| | Patterns and structures of current operating systems and some thoughts about how that could be improved, with lessons learnt from Self, Smalltalk and other &quote;structured&quote; systems.
| | blog.lexfo.fr
Lexfo's security blog - CVE-2017-11176: A step-by-step Linux Kernel exploitation (part 1/4)
16.3 parsecs away

Travel
| | The first article covers an in-depth CVE/bug analysis, designs an attack scenario and starts implementing a PoC in ring-0 with SystemTap. The core concept section focuses on file/socket related data structures, netlink and refcounters.
| | www.trailofbits.com
Trail of Bits Blog
17.8 parsecs away

Travel
| | [AI summary] The text discusses various cryptographic constructions and their vulnerabilities. It highlights the importance of using established cryptographic primitives like HMAC, KMAC, and modern password-based key derivation functions (PBKDFs) instead of ad-hoc solutions. Key points include the risks of ambiguous encoding in MAC and hash functions, length-extension attacks, and the need for memory-hard KDFs to resist brute-force attacks. The text also touches on the broader implications of cryptographic design, emphasizing the necessity of rigorous standards and avoiding simplistic approaches that can lead to significant security weaknesses.
| | hoelz.ro
Tracking Slowdowns in Creating Child Processes - Part One
32.9 parsecs away

Travel
| When I use Perl 5, I do a lot of shelling out to external commands; after all, that's what Perl is good at! So it should come as no surprise that I do the same with Perl 6, which means a lot of the time and effort I spend helping with Perl 6 is improving the interaction with external commands.