/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 kevingimbel.de
What we should learn from the xz backdoor | kevingimbel.de
| | www.techradar.com
Worrying Framelink MCP security flaw could let hackers execute code remotely - here's how to stay safe | TechRadar
4.5 parsecs away

Travel
| | A command injection flaw was recently found in an npm package
| | vlad.website
The Philosophy of the Open Source Pledge
2.4 parsecs away

Travel
| | Today, we launched the Open Source Pledge. Virtually all companies use Open Source software 1, making the Open Source ecosystem crucial to virtually all of the technology we use. That Open Source software is created and supported by maintainers. But the companies that use Open Source software almost never pay the maintainers anything. This means that the maintainers end up doing a huge amount of work for free, often as a second shift after their dayjob so that they can pay the bills, leaving them burned out and overworked, and leaving the projects they maintain at risk of serious security issues.
| | hardenedvault.net
xz/liblzma Backdoor: Open Source Nuke? Maybe Not That Bad!
2.0 parsecs away

Travel
| | Open source platform security
| | www.cyberkendra.com
Curl Fix Heap Buffer Overflow Vulnerability Could Lead to Remote Code Execution - Cyber Kendra
12.1 parsecs away

Travel
| SOCKS5 heap buffer overflow vulnerability in Curl lead to arbitrary remote code execution.