cups local privilege escalation (libcupsfilters 2-2.2.1)
---
You can exploit the interaction between cups-browsed, libcupsfilters, and ghostscript (-i [include path]) to obtain code execution as root via a privileged printing service.
The poc abuses remotely advertised printer auto discovery + user-supplied attributes, which are passed to ghostscript without proper validation.
poc: https://t.co/4Tobj2Dm9A
./cowcups.sh ls ./mooshell
#hack #vulnerability #exploit
OpenAI's AI agents figured out how to secretly communicate between isolated virtual machines using CPU cache timing.
No internet. No network connections. No shared files.
Imagine two prisoners in solitary confinement discovering they can communicate by tapping on a shared wall.
Except the wall was a CPU cache.
Not only is the harpsichord fire
That dress is amazballs. (Except the flowers, I don't do flowers, but I'd totally wear it in two different solid colors)
Macron just banned all non-union protests and authorities in Lyon, Nice, and Toulon have imposed a total protest ban.
These rulers know nothing about their own people. Telling the French they can’t protest will backfire spectacularly.
Expect a massive turnout this weekend. Vive la revolution!
i’m sorry that your warrantless surveillance regime was built on the assumption that people would never discover every single backdoor you put into their applications
90% of the pushback or harsh comments against Olivia Chow is because she’s an Asian woman in power.
Rob Ford smoked fucking crack with known criminals and got less pushback than Chow at this point when he was campaigning in 2014.
Not a Chow supporter but this is so obvious.
I agree. The allegations are so numerous and so specific, and the denials so broad, that they are startling to read.
If even a fraction of the allegations have a significant factual basis, this will be a scandal for the ages.
Ronan Farrow reported in 2023 that the Pentagon signed a SpaceX contract to keep Musk from being able to cut off Ukraine’s battlefield connectivity at will. Colin Kahl described it as a way to lock in service so Musk couldn’t just flip the switch.
WSJ now reports U.S. officials say Musk ordered the Oct. 14 Starshield slowdown anyway, after speaking with Trump.
If that reporting holds, the guardrail didn’t hold.