jakobdabo

> the attacker chained in a second exploit: a Linux kernel vulnerability in the XFRM ESP-in-TCP subsystem

Linux seems to have a huge attack surface that doesn't necessarily need to be there for every user/server.

E.g. this came out today: CVE-2026-98432: Linux TCP Use-After-Free Risk and Patch Validation [1].

I just disabled mptcp on my systems since I don't use it. Why was it enabled by default?

Can I disable this XFRM thing too?

[1] https://www.penligent.ai/hackinglabs/cve-2026-98432/

> Did you buy your phone through the carrier?

No.

I wonder which field is responsible for disabling the Personal Hotspot feature? About a year ago mine suddenly got disabled in the phone's UI. Since then, the only time it got enabled was when I was traveling and using a travel eSIM.

It's sad that phone companies allow carriers such anti-user things.

IMHO, for fairness, upvotes should be the vouches countering the flags. I think unless the amount of flags is really significant, they shouldn't have priority over the 117 upvoters (and counting) who are clearly interested to have this discussion here.

My thinking could be naïve, as the algorithms were probably created with the backing of some data and experience, but anyway, I felt like sharing my opinion.

> I believe secrets are still encrypted at this stage similar to cold boot.

Does this mean that the Signal desktop application doesn't lock/unlock its (presumably encrypted) database with a secret when locking/unlocking the laptop?

Can anyone please provide directions/links to tools that can be run locally, and that take an audio recording of a voice as an input, and produce an output with the same voice saying the same thing with the same intonations, but with a fixed/changed accent?

This is needed for processing an indie game's voice recordings, where the voice actors weren't native speakers and had some accent.

This is a good article: https://insinuator.net/2025/12/bluetooth-headphone-jacking-f...

I see what you've done there!

        int randomNumber = getRandomNumber(1, 808);
        if (randomNumber == 808)
                printGlimmeringText(text, nerdFontText, lastRowColor);

Nice project!

I found two versions at https://archive.org, there's a PDF manual too.

That's great, thanks!

> It's also not required on the Bluesky service any longer, in most cases.

That's also nice to hear - when last time I tried to register an account (shortly after the free registration launch) the phone number field in the registration form was marked as required, if I am not mistaken.

Congratulations on the release! If I may ask a question - is it possible to register an account without a phone number on a 3-rd party server?

You can also use DNSCloak, which can act as a VPN, and proxy all DNS requests to a trusted DoH server, like AdGuard.

I think wearing such a massive thing on your head is a dead end. It may become a niche product for professionals (as the price and "Pro" in the name suggest), but it's not practical for everyday casual use.

Is it still out of the reach from the current state of art in technology for a thin client, not much heaver than sunglasses - just the visual component and some simple circuit to receive the signal from an iPhone?

Well then they should use AI to differentiate AI-generated and original abstracts.