Boudhayan Gupta (he/him)
@sudo.foo
Aging nerd, anti-Stuxnet guy at Siemens. Free software, open-source tech, pro-EU, anti-surveillence, all the good stuff. And lots of travel. #SlavaUkraini
Reposted by Boudhayan Gupta (he/him)
Reposted by Boudhayan Gupta (he/him)
Mozilla’s response to the ToS change. I’ve been in enough meetings with lawyers on GDPR, policy etc to believe them
March 1, 2025 at 2:04 PM
Mozilla’s response to the ToS change. I’ve been in enough meetings with lawyers on GDPR, policy etc to believe them
Reposted by Boudhayan Gupta (he/him)
Reposted by Boudhayan Gupta (he/him)
Reposted by Boudhayan Gupta (he/him)
(explaining bluesky to incoming folks) YOU RELEASE THE UNHINGED THOUGHT INTO THE TEXTBOX AND PRESS POST
November 11, 2024 at 3:08 AM
(explaining bluesky to incoming folks) YOU RELEASE THE UNHINGED THOUGHT INTO THE TEXTBOX AND PRESS POST
Reposted by Boudhayan Gupta (he/him)
bro: you let your dog sleep in your bed?
me: bro, i’d let my dog borrow my car if he needed it
me: bro, i’d let my dog borrow my car if he needed it
November 11, 2024 at 4:22 AM
bro: you let your dog sleep in your bed?
me: bro, i’d let my dog borrow my car if he needed it
me: bro, i’d let my dog borrow my car if he needed it
Reposted by Boudhayan Gupta (he/him)
Very reasonable
October 19, 2024 at 5:23 PM
Very reasonable
Reposted by Boudhayan Gupta (he/him)
Photography: The Final Days of the Dinosaur, 65m BC (colorized)
October 18, 2024 at 1:14 AM
Photography: The Final Days of the Dinosaur, 65m BC (colorized)
Reposted by Boudhayan Gupta (he/him)
Reposted by Boudhayan Gupta (he/him)
I'm watching some folks reverse engineer the xz backdoor, sharing some *preliminary* analysis with permission.
The hooked RSA_public_decrypt verifies a signature on the server's host key by a fixed Ed448 key, and then passes a payload to system().
It's RCE, not auth bypass, and gated/unreplayable.
The hooked RSA_public_decrypt verifies a signature on the server's host key by a fixed Ed448 key, and then passes a payload to system().
It's RCE, not auth bypass, and gated/unreplayable.
This might be the best executed supply chain attack we've seen described in the open, and it's a nightmare scenario: malicious, competent, authorized upstream in a widely used library.
Looks like this got caught by chance. Wonder how long it would have taken otherwise.
Looks like this got caught by chance. Wonder how long it would have taken otherwise.
Woah. Backdoor in liblzma targeting ssh servers.
www.openwall.com/lists/oss-se...
It has everything: malicious upstream, masterful obfuscation, detection due to performance degradation, inclusion in OpenSSH via distro patches for systemd support…
Now I’m curious what it does in RSA_public_decrypt
www.openwall.com/lists/oss-se...
It has everything: malicious upstream, masterful obfuscation, detection due to performance degradation, inclusion in OpenSSH via distro patches for systemd support…
Now I’m curious what it does in RSA_public_decrypt
March 30, 2024 at 5:13 PM
I'm watching some folks reverse engineer the xz backdoor, sharing some *preliminary* analysis with permission.
The hooked RSA_public_decrypt verifies a signature on the server's host key by a fixed Ed448 key, and then passes a payload to system().
It's RCE, not auth bypass, and gated/unreplayable.
The hooked RSA_public_decrypt verifies a signature on the server's host key by a fixed Ed448 key, and then passes a payload to system().
It's RCE, not auth bypass, and gated/unreplayable.
Reposted by Boudhayan Gupta (he/him)
if you want to survive on here you have to establish yourself. you gotta look around, find the biggest, wokest account you can, walk right up to them and scold them for insufficient intersectionality
February 6, 2024 at 6:16 PM
if you want to survive on here you have to establish yourself. you gotta look around, find the biggest, wokest account you can, walk right up to them and scold them for insufficient intersectionality
Reposted by Boudhayan Gupta (he/him)
Today’s bake for brother’s 40th. I believe I have outdone myself.
January 28, 2024 at 12:34 PM
Today’s bake for brother’s 40th. I believe I have outdone myself.
Reposted by Boudhayan Gupta (he/him)
the punishment is a bit medieval but i appreciate the enthusiasm
January 17, 2024 at 2:11 PM
the punishment is a bit medieval but i appreciate the enthusiasm
Reposted by Boudhayan Gupta (he/him)
Reposted by Boudhayan Gupta (he/him)
homosexuals always say “be gay do crimes” until someone like george santos actually tries to live that life
October 16, 2023 at 10:34 PM
homosexuals always say “be gay do crimes” until someone like george santos actually tries to live that life
Reposted by Boudhayan Gupta (he/him)
Typical Seating Chart xkcd.com/2862
December 2, 2023 at 12:42 AM
Typical Seating Chart xkcd.com/2862
After some 3 years of waiting for everyone to have enough time, I finally got around to watching The VelociPastor, and boy what a movie it is! 15/10 recommended watch, can't wait for the sequel!
Like seriously, the movie is almost too good to be a trash movie.
Like seriously, the movie is almost too good to be a trash movie.
December 1, 2023 at 10:53 AM
After some 3 years of waiting for everyone to have enough time, I finally got around to watching The VelociPastor, and boy what a movie it is! 15/10 recommended watch, can't wait for the sequel!
Like seriously, the movie is almost too good to be a trash movie.
Like seriously, the movie is almost too good to be a trash movie.
Reposted by Boudhayan Gupta (he/him)
This really is the greatest correction of all time.
November 24, 2023 at 3:03 AM
This really is the greatest correction of all time.
Reposted by Boudhayan Gupta (he/him)
Reposted by Boudhayan Gupta (he/him)
November 21, 2023 at 4:23 PM
Can you still use this app on a day the sky is not blue?
November 20, 2023 at 10:25 AM
Can you still use this app on a day the sky is not blue?
Wait what? We'd been hearing for years that Jimmy Carter was gonna die in the next 10 mins and now he's outlived his wife?
Breaking news: Rosalynn Carter, a close political and policy adviser to her husband, President Jimmy Carter, died Nov. 19 at her home in Plains, Ga. She was 96.
Rosalynn Carter, first lady who championed mental health, dies at 96
She sat in on Cabinet meetings of her husband, Jimmy Carter, advised on policy issues and pushed Congress to pass mental health legislation.
www.washingtonpost.com
November 19, 2023 at 10:11 PM
Wait what? We'd been hearing for years that Jimmy Carter was gonna die in the next 10 mins and now he's outlived his wife?