News for hackers. Stuff that matters.
Re:Linux Kernel Exploitation: CVE-2025-21756 by mperham on Wednesday April 30, 2025 @05:25PM (#43850861)
"We’ve Got a Panic!"

Looks like we've got an encoding issue too.

Re:Linux Kernel Exploitation: CVE-2025-21756 by nyanpasu64 on Wednesday April 30, 2025 @06:34PM (#43851460)
I'm confused. The page has a HTML5 doctype, and https://developer.mozilla.org/en-US/docs/Web/HTML/Reference/... says that UTF-8 is the only valid encoding for HTML5 documents, yet Firefox interprets the page as Windows-1252 or such until I "Repair Text Encoding". https://webhint.io/docs/user-guide/hints/hint-meta-charset-u... says you're supposed to include a <meta charset="utf-8"> or optionally Content-Type header.
Re:Linux Kernel Exploitation: CVE-2025-21756 by shakna on Wednesday April 30, 2025 @06:52PM (#43851598)
If you don't have a charset set, then you'll get the fallback for IE compatibility.

You should pretty much always use one.

Re:Linux Kernel Exploitation: CVE-2025-21756 by aaronmdjones on Wednesday April 30, 2025 @07:06PM (#43851703)
The server is responding with

    Content-Type: text/html
i.e. no charset field.

The document itself also lacks a declared character set.

Re:Linux Kernel Exploitation: CVE-2025-21756 by drougge on Thursday May 01, 2025 @04:36AM (#43855050)
One thing that really annoys me about the HTTP standards is that some older version used to say that text/* without a declared charset was definitely latin-1 (don't remember which version exactly). Then a later version said no, text/* without a declared charset is definitely utf-8. In practice I feel this means they said "not declaring a charset is definitely not ok", but in a way that no one will understand.

Possibly a newer version that I haven't read fixed how they said that. As long as I don't check I can hope.

Re:Linux Kernel Exploitation: CVE-2025-21756 by klysm on Wednesday April 30, 2025 @05:44PM (#43851035)
I thought this was a joke at corrupting the data intentionally
Re:Linux Kernel Exploitation: CVE-2025-21756 by bombcar on Wednesday April 30, 2025 @05:33PM (#43850939)
I kind of want to trademark †so that ’ is not just mojibake.
Re:Linux Kernel Exploitation: CVE-2025-21756 by jdironman on Wednesday April 30, 2025 @07:19PM (#43851811)
Not sure Musk would let you trademark his kids name. /s
Re:Linux Kernel Exploitation: CVE-2025-21756 by hehbot on Thursday May 01, 2025 @02:07AM (#43854194)
this is a panic-corrupted buffer joke