Sean McClintock

Strategy, messaging & open tech pro@IBM - posts are mine. Enjoy adventure outdoors, shooting great pics, breaking things by tinkering, whisk(e)y & tasty dishes.

[Chris AR Blauvelt @arblauvelt]

Who is this guy? 🔥

[Sean McClintock @iam_seanmcc]

@LMDiddy14 Everyone should want fair play. Except for those who are expecting that unfair outcomes will benefit them. This game was a great example of how bad or compromised refereeing undermines the game.

[The Hacker News @TheHackersNews]

⚠️ A new #Linux flaw mirrors Dirty Pipe—but adds cross-container impact.

“Copy Fail” (CVE-2026-31431) lets any local user overwrite cached system files and run them as root. No race condition.

Works across major Linux distros since 2017.

🔗 Read → https://t.co/HW10RL1A0o

[Give A Shit About Nature @giveashitnature]

The county just mowed the roadside in June, and an entire generation of monarch caterpillars went with it.

In a lot of America, the strip of grass and wildflowers along rural roads is the last place milkweed still grows.

Farm fields got sprayed. Suburbs got paved. The roadside ditch is where ground-nesting bobolinks, meadowlarks, pheasants, and bumblebee queens raise their young because almost nothing else is left.

June and early July are peak nesting season. They are also when most counties run their mowers.

A pheasant nest in early July still has eggs in it 21% of the time. A monarch caterpillar in June is 11 days from becoming a butterfly. The mower doesn't know. The mower keeps going.

But there's a fix.

Counties that delay roadside mowing until after July 15, mow at higher cutting heights (8–12 inches), use flushing bars on equipment, and target only the visibility-critical edges instead of the entire shoulder have seen big results.

Iowa, Minnesota, and Washington have programs along these lines. Most states don't.

If you live in a county that mows everything in June, call your county supervisor. Ask for a mowing delay until late summer. Most rural counties have never heard the request and would consider it.

The roadside isn't a lawn. It's the last refuge for a lot of species we keep wondering why we don't see anymore.

[International Cyber Digest @IntCyberDigest]

‼️🚨 BREAKING: An AI found a Linux kernel zero-day that roots every distribution since 2017. The exploit fits in 732 bytes of Python. Patch your kernel ASAP.

The vulnerability is CVE-2026-31431, nicknamed "Copy Fail," disclosed today by Theori. It has been sitting quietly in the Linux kernel for nine years.

Most Linux privilege-escalation bugs are picky. They need a precise timing window (a "race"), or specific kernel addresses leaked from somewhere, or careful tuning per distribution. Copy Fail needs none of that. It is a straight-line logic mistake that works on the first try, every time, on every mainstream Linux box.

The attacker just needs a normal user account on the machine. From there, the script asks the kernel to do some encryption work, abuses how that work is wired up, and ends up writing 4 bytes into a memory area called the "page cache" (Linux's high-speed copy of files in RAM). Those 4 bytes can be aimed at any program the system trusts, like /usr/bin/su, the shortcut to becoming root.

Result: the next time anyone runs that program, it lets the attacker in as root.

What should worry most: the corruption never touches the file on disk. It only exists in Linux's in-memory copy of that file. If you imaged the hard drive afterwards, the on-disk file would match the official package hash exactly. Reboot the machine, or just put it under memory pressure (any normal system load that needs the RAM), and the cached copy reloads fresh from disk.

Containers do not help either. The page cache is shared across the whole host, so a process inside a container can use this bug to compromise the underlying server and reach into other tenants.

The original sin was a 2017 "in-place optimization" in a kernel crypto module called algif_aead. It was meant to make encryption slightly faster. The change broke a critical safety assumption, and nobody noticed for nine years. That bug then rode every kernel update from 2017 to today.

This vulnerability affects the following:
🔴 Shared servers (dev boxes, jump hosts, build servers): any user becomes root
🔴 Kubernetes and container clusters: one compromised pod escapes to the host
🔴 CI runners (GitHub Actions, GitLab, Jenkins): a malicious pull request becomes root on the runner
🔴 Cloud platforms running user code (notebooks, agent sandboxes, serverless functions): a tenant becomes host root

Timeline:
🔴 March 23, 2026: reported to the Linux kernel security team
🔴 April 1: patch committed to mainline (commit a664bf3d603d)
🔴 April 22: CVE assigned
🔴 April 29: public disclosure

Mitigation: update your kernel to a build that includes mainline commit a664bf3d603d. If you cannot patch immediately, turn off the vulnerable module:

echo "install algif_aead /bin/false" > /etc/modprobe.d/disable-algif.conf
rmmod algif_aead 2>/dev/null || true

For environments that run untrusted code (containers, sandboxes, CI runners), block access to the kernel's AF_ALG crypto interface entirely, even after patching. Almost nothing legitimate needs it, and blocking it shuts the door on this whole class of bug...

[Sean McClintock @iam_seanmcc]

@theXSSrat hi

Sounds like a moonshot deal. Thanks for all that you share!

[The XSS Rat - Proud XSS N00b :-) @theXSSrat]

GIVEAWAY TIMEEEE - You do NOT want to miss this
I am giving away 1x copy of my endless bundle!
https://t.co/chu7ufxUMT

- Leave a comment saying "hi"
- Like the post
- Share the post

This endless bundle contains ALL my courses, certs and lives but it is more than this - it is an ecosystem of ethical hackers just like you. This is my inner circle.

I will pick 1 winner within 72 hours

[Sean McClintock @iam_seanmcc]

Critical behaviors to ensure the wellbeing of all wildlife. When I camp, when I camp with my daughter, and throughout the many years of scouting, we always practice two principles:
1. Leave no trace
2. Leave the site better than you receive it.

[Give A Shit About Nature @giveashitnature]

The banana peel you tossed on the trail is going to get a bear killed.

Every single apple core and orange peel left on a trail teaches a nearby bear that human hiking trails are a food source.

In bears, it is almost always fatal.

Wildlife managers have a phrase for it: "A fed bear is a dead bear."

Once a bear associates humans with food it keeps coming back. It gets bolder. It approaches campsites. It gets too close to people.

At that point there is no rehabilitation, no relocation that reliably works. The bear gets euthanized.

The bear didn't do anything wrong. It learned exactly what we taught it.

Leave no trace means leave no trace.

Pack it in. Pack it out. Every time.

[Gandalv @Microinteracti1]

Let me explain something to the MAGA crowd, because clearly someone needs to.

They seem to think NATO is cosmic room service. You pick up the phone, say “hello, we’re having a bit of a war here,” and thirty-one countries march to your rescue. A continental Uber for military adventures.

That is not how it works.
Article 5 is a mutual defense clause. The clue is in the word mutual. And it has been triggered exactly once in NATO’s entire history. After September 11. When America was attacked. Not Europe. America.

Every NATO member showed up. They went to Afghanistan. They fought. They bled. They died. In America’s war. On America’s behalf.

Now imagine they hadn’t.
Over 1,100 allied soldiers died in Afghanistan. British, Canadian, German, Danish, Polish. And yes, even Ukrainian soldiers, who had no NATO obligation whatsoever. Gone. Without them, those are American names on those graves. Sons from Ohio. Fathers from Georgia. Kids from Nebraska who never came home.

Then there is the money. NATO allies spent over 100 billion dollars on a war that started on American soil. Without that, Washington pays every cent. On top of the 2 to 3 trillion the war already cost.

And without allied bases across Europe and Central Asia, American supply lines collapse entirely. Without British forces in Helmand and Canadians in Kandahar, the Taliban reconstitutes in three years instead of ten. The gaps get filled one way. More American deployments. More American coffins arriving at Dover.

Afghanistan was bloody. But NATO took the hit. Without them, every single one of those casualties would have had an American name.

Trump called allies like these losers. Suckers.

If you are a certain kind of broken person, that probably makes sense to you. But for the rest of us, what those soldiers did has a different name. Honor. The bond between men who have been in the same dirt, under the same fire. Between Brits and Americans, Frenchmen and Norwegians, Canadians and Danes. Not a diplomatic relationship. A blood bond. Brotherhood forged in places most people will never see and cannot imagine.

In that culture, you do not mock a fallen ally. You do not sneer at the dead. It is the lowest thing a human being can do. Trump did it to a standing ovation.

If you are a MAGA supporter travelling to NATO countries, understand this. There are no friendly pats on the back waiting for you. No one will buy you a beer. The governments who share your worldview sit in Minsk, Moscow and Pyongyang. Brutal dictatorships where journalists disappear, elections are theatre and dissent is a medical condition treated in basements. Not London. Not Paris. Not Rome, Stockholm, Copenhagen, Berlin or Ottawa.

You have abandoned the open societies, the free press, the rule of law, the places where people actually want to live. You traded the best of civilization for a very small, very dark room. Frankly, it serves you right.​​​​​​​​​​​​​​​​

Gandalv / @Microinteracti1

[Malcolm Nance @MalcolmNance]

CONSEQUENCES FOR DUMBASSES: You are an F'ing idiot. If we invade Greenland we go to war with 31 nations. NATO stays together but without us. Its HQ is in Brussels, not the Pentagon. Our global reach across the Atlantic will end with our closest refueling base in Israel or Egypt. 100,000 American soldiers will be forced to board civil airliners and sent home or be taken as POWs/Detainee sWITHOUT WEAPONS OR EQUIPMENT. Canada will close its airspace and sea space. US Ballistic Missile Defense at Pettufik and Fylingdales ENDS, which means we see nothing except what space sensors can see. US Intelligence is reduced to Fort Meade, Ft Gordon and Colorado Springs and Hawaii. CIA spies will be rolled up by their former friends in HOURS. NO ONE WILL SHARE ANYTHING WITH US. ALL GLOBAL SHIPPING WILL BE CLOSED TO US. Denmark operates the largest shipping company in the world. SIX OUT OF TEN global shipping companies are in Europe ... Worlds Biggest container ships? DENMARK!
Australia, NZ, Canada are Commonwealth so they will cut ties with us or be neutral too.

PS Denmark & locals tun all life support and generators at Pittufik and Canada resupplies it ... all 150 US Spece force personnel would become POWs to guys on sleds. FYI They have troops there now and 35,000 Caribou hunting rifles.
FYI France and UK have nukes. Hundreds of them so you cannot intimidate them with that.
Oh and they collapse the US economy by sanctioning us and selling off 2.3 Trillion in US treasuries simultaneously. Also no Botox, Ozempic or insulin. Its made in Denmark.
Ya fucking dope.

[The XSS Rat - Proud XSS N00b :-) @theXSSrat]

BROOOO you are in LUCK!!!!

I have 1 coaching session to give away and 1 bundle!! Thanks to one of my rats who paid it forward, the education of 2 amazing hackers will be expedited <3

I am going to double it so 2! coaching spots and bundles to give

Just let me know in the comments, share and like <3

48h

Who wants it?
https://t.co/DG6esbnN0H

https://t.co/wew2YNoOrQ

[Sean McClintock @iam_seanmcc]

@theXSSrat I'd love to get access to the bundle.

[Sean McClintock @iam_seanmcc]

Thanks for articulating this, @QasimRashid. I'm stunned at our persistent misogyny &amp; the resulting losses for equality. For yrs we've accused other countries instead of looking inward. For the sake of my wife &amp; daughter, nieces, and all women, we must fight for something better.

[Qasim Rashid, Esq. @QasimRashid]

It's Women's History Month, and as guy, I wrote this for my fellow men. Because women already know this stuff.

Men - hope you take a moment to read and share.

https://t.co/rDh3vXiXCW

[Sean McClintock @iam_seanmcc]

@Delta I get cargo is how U make flying profitable, but UR delayed cargo ops &amp; lack of partner comms almost lost us our connection, delayed a LATAM flight, and caused a chase across GRU. Good crew &amp; pilots, crap ops. Get your act together! Thank your partner 4 being on top of it

[Sean McClintock @iam_seanmcc]

@FactFinderAI The facade of your account &amp; the language you use is designed to illicit the perception of impartiality; however, you provide no transparency into your processes or policies, no organizational info for accountability. Who are you &amp; why should anyone trust you? #readerbeware

[Internet Archive @internetarchive]

📚 Attention Readers &amp; Researchers 📚

More than 500,000 books have been removed from our lending library due to the publishers' lawsuit. Have you been affected? Share your story with us and help us fight to restore access. #LetReadersRead

👉 https://t.co/vKaRSR5Tmu

[Sean McClintock @iam_seanmcc]

I find little value in the remnants of Twitter, and social media is rarely a forum for reasoned, civil discourse; however, @RBReich makes a clear and thoughtful call for reforms of our #crookedsupremecourt that should already be in place. Let's push for change that works for all.

[Robert Reich @RBReich]

Justice Alito's latest ethics scandal is yet another reminder that the Supreme Court is totally off the rails and unaccountable to the public.

It's time to reform the court. Here's how.

[Sean McClintock @iam_seanmcc]

https://t.co/Eu4Pmdzj5l codifies the allowance identified in https://t.co/0F2d6ZQGvP

[Sean McClintock @iam_seanmcc]

@AskTSA @TSA https://t.co/VDDqm83dMJ lists small, compressed gas cartridges as allowed in checked bags up to 4x50ml or 28g. The airline site doesn't address this item specifically, and https://t.co/wov8sEwfQQ contradicts the FAA guidance directly. Which is correct and why?