News for hackers. Stuff that matters.

khrbtxyz

Re:TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8 on Sunday November 01, 2026 @08:28AM (#50325493)
Not according to the article, which says the vulnerable path runs "during the TCP handshake, ..."
Re:TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8 on Saturday October 31, 2026 @10:59PM (#50322347)
My $50 router has two cores.

  root@OpenWrt2:~# lscpu
  Architecture:        mips
  Byte Order:          Little Endian
  CPU(s):              4
  On-line CPU(s) list: 0-3
  Model name:          -
  Model:               MIPS 1004Kc V2.15
  Thread(s) per core:  2
  Core(s) per socket:  2
  Socket(s):           1
Re:TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8 on Saturday October 31, 2026 @10:22PM (#50322185)
I do see sockets listening on all interfaces, but those are blocked by the firewall.

  root@OpenWrt2:~# ss -Qlnt4 'src 0.0.0.0'
  State  Local Address:Port Peer Address:Port
  LISTEN       0.0.0.0:443       0.0.0.0:*   
  LISTEN       0.0.0.0:80        0.0.0.0:*   
  LISTEN       0.0.0.0:22        0.0.0.0:*
Re:Openwrt.org offline due to PHP CVEs on Wednesday October 21, 2026 @04:11PM (#50186951)
https://openwrt.org is online again
Re:SDCC – Small Device C Compiler on Saturday September 19, 2026 @01:26PM (#49768449)
There are probably several other projects. I remember coming across OpenOCD recently https://openocd.org/pages/repos.html
Re:A 32-Year-Old Bug Walks into a Telnet Server on Thursday September 17, 2026 @01:52AM (#49736884)
A surprisingly long article for a one-line fix the authors didn’t send.
It is required mainly for VMs that use virbr0 and NAT. Networking options like macvtap don't need it.
Re:How to Create an OS from Scratch on Monday September 29, 2025 @11:49PM (#45421712)
https://github.com/mariuz/linux-0.01 might give you some ideas.
Re:Path Isn't Real on Linux on Tuesday April 29, 2025 @09:32PM (#43840245)
Another bit of trivia about the shebang support in Linux is that is possible to build the kernel without it. https://github.com/torvalds/linux/blob/master/fs/Kconfig.bin...

  config BINFMT_SCRIPT
  tristate "Kernel support for scripts starting with #!"
  default y
  help
    Say Y here if you want to execute interpreted scripts starting with
    #! followed by the path to an interpreter.
I don't quite understand what --exec does. If I leave out --exec from example 3, is it supposed to prevent bash from executing other programs?

  $ landrun --log-level debug --ro /usr/bin,/lib,/lib64 /usr/bin/bash --norc
  [landrun] 2025/03/22 17:16:29 Sandbox config: {ReadOnlyPaths:[/usr/bin /lib /lib64] ReadWritePaths:[] AllowExec:false BindTCPPorts:[] ConnectTCPPorts:[] BestEffort:true}
  [landrun:debug] 2025/03/22 17:16:29 Adding read-only path: /usr/bin
  [landrun:debug] 2025/03/22 17:16:29 Adding read-only path: /lib
  [landrun:debug] 2025/03/22 17:16:29 Adding read-only path: /lib64
  [landrun:debug] 2025/03/22 17:16:29 Applying Landlock restrictions
  [landrun] 2025/03/22 17:16:29 Landlock restrictions applied successfully
  [landrun] 2025/03/22 17:16:29 Executing: [/usr/bin/bash --norc]
  bash-5.2$ 
  bash-5.2$ /usr/bin/uname -r
  6.13.7-200.fc41.aarch64
Large projects like the Linux kernel, which are mostly C, use the preprocessor in .S files quite heavily.

Linux has hardly any .s files.

  ~/linux$ find . -name '*.s'
  ./arch/x86/kernel/asm-offsets.s
  ./kernel/bounds.s
  ./scripts/mod/devicetable-offsets.s
But there are plenty of .S files with #includes

  ~/linux$ $ find . -name '*.S' | xargs grep '#include' | sed 's,:.*,,' | sort -u | wc -l
  1217
Re:C Gibberish to English on Thursday November 14, 2024 @10:18AM (#42136997)
Function typedefs make this less confusing by removing awkward parentheses. e.g.

  typedef int read_block_fn(void *context, u8 *buf, unsigned int block, size_t len);
https://github.com/torvalds/linux/blob/0a9b9d17f3a781dea03ba...
Re:M4 MacBook Pro on Wednesday October 30, 2024 @10:08PM (#42002734)
Nested virtualization needs at least an M3

https://developer.apple.com/documentation/virtualization/vzg...

This is the sad situation on my M2 MacBook Pro :(

  $ swift repl
  Welcome to Apple Swift version 6.0.2 (swiftlang-6.0.2.1.2 clang-1600.0.26.4).
  Type :help for assistance.
    1> import Virtualization
    2> VZGenericPlatformConfiguration.isNestedVirtualizationSupported
  $R0: Bool = false
Re:New iMac with M4 on Monday October 28, 2024 @01:36PM (#41973826)
This is form-over-function, classic Apple. They don't want to give even the slightest impression that they are selling a wired mouse.
Re:Exploring How Cache Memory Works on Thursday June 27, 2024 @03:38AM (#40808285)
From a Raspberry Pi 5: L2 cache line is 128

  Vendor ID:              ARM
  Model name:             Cortex-A76

  $ lscpu -C
  NAME ONE-SIZE ALL-SIZE WAYS TYPE        LEVEL SETS PHY-LINE COHERENCY-SIZE
  L1d       64K     256K    4 Data            1  256                      64
  L1i       64K     256K    4 Instruction     1  256                      64
  L2       512K       2M    4 Unified         2 1024                     128
  L3         2M       2M   16 Unified         3 2048                      64
There's a Python library that has been quite reliable for me for local control.

  $ python3
  Python 3.12.4 (main, Jun  6 2024, 18:26:44) [Clang 15.0.0 (clang-1500.3.9.4)] on darwin
  Type "help", "copyright", "credits" or "license" for more information.
  >>> import pywemo
  >>> d = pywemo.discover_devices()
  >>> d
  [<WeMo Switch "Guest">, <WeMo Switch "Fireplace">, <WeMo Switch "Bedroom Dresser">]
  >>> d[0].model
  'Belkin Plugin Socket 1.0'
  >>> d[0].toggle()
  >>>
Re:EasyOS: An Experimental Linux Distribution on Thursday June 20, 2024 @01:14AM (#40735146)
Yes, these commands have way too many options for anyone to remember. The commands are best wrapped up in a script. An ISO install is usually a manual process that can take time, but it is definitely easier.
Re:EasyOS: An Experimental Linux Distribution on Wednesday June 19, 2024 @07:41PM (#40733521)
Most Linux distributions ship ready-made VM images which are easier to turn into VMs. See https://news.ycombinator.com/item?id=40610332
Re:Hello world in C inline assembly (2020) on Monday June 17, 2024 @04:47AM (#40703587)
The exact same thing happens with GCC 12 with 32-bit MIPS.

  #include <asm/unistd.h>
   
  char msg[] = "hello, world!\n";
   
  int main(void)
  {
      register int syscall_no asm("v0") = __NR_write;
      register int arg1       asm("a0") = 1;
      register char *arg2     asm("a1") = msg;
      register int arg3       asm("a2") = sizeof(msg) - 1;
   
      asm("syscall");
   
      return 0;
  }

  root@OpenWrt:~# objdump --disassemble=main
  ...
  00400580 <main>:
    400580: 27bdfff8  addiu sp,sp,-8
    400584: afbe0004  sw s8,4(sp)
    400588: 03a0f025  move s8,sp
    40058c: 24020fa4  li v0,4004
    400590: 24040001  li a0,1
    400594: 3c020041  lui v0,0x41
    400598: 24450650  addiu a1,v0,1616
    40059c: 2406000e  li a2,14
    4005a0: 0000000c  syscall
Re:Understanding QEMU Devices (2018) on Friday June 07, 2024 @12:39PM (#40610332)
There's also virt-install, which is part of the Virt Manager package. https://github.com/virt-manager/virt-manager/blob/main/man/v...

  curl --output-dir $HOME/.local/share/libvirt/images/ -LO https://cloud.debian.org/images/cloud/bookworm/20240507-1740/debian-12-genericcloud-arm64-20240507-1740.qcow2
  virt-install --import --osinfo debian12 --disk size=20,backing_store=$HOME/.local/share/libvirt/images/debian-12-genericcloud-arm64-20240507-1740.qcow2 --controller type=scsi,model=virtio-scsi --cloud-init
Re:Show HN: A Short IPv6 Guide for Home IPv4 Admins on Thursday June 06, 2024 @09:32PM (#40604448)
Returning both the ULA and global addresses should be okay. This is what my OpenWRT router does without any special setup. wk1 is one of my local machines.

  $ dig +short wk1 AAAA @192.168.1.1
  2601:646:...
  fd7c:b0fd:fd6a:1::ba5
Re:Ask HN: What are your favourite programming shortcuts on Saturday March 30, 2024 @03:46AM (#39872733)
Found it in the readline manual

https://tiswww.cwru.edu/php/chet/readline/readline.html#inde...

insert-comment (M-#) Without a numeric argument, the value of the comment-begin variable is inserted at the beginning of the current line.

Re:Ask HN: What are your favourite programming shortcuts on Saturday March 30, 2024 @12:06AM (#39871746)
Is this something special you have set up on your Mac?

I keep getting screenshots when I hit command-shift-3. https://support.apple.com/en-us/102646

Re:Pure Bash Web Server on Friday February 16, 2024 @10:22AM (#39398219)
Shebang scripts are supported directly by the kernel via the exec family of system calls, so ld.so shouldn't be involved.

https://github.com/torvalds/linux/blob/master/fs/Kconfig.bin...

  config BINFMT_SCRIPT
 tristate "Kernel support for scripts starting with #!"
 default y
 help
   Say Y here if you want to execute interpreted scripts starting with
   #! followed by the path to an interpreter.
Re:Hello IPv6: a minimal tutorial for IPv4 users on Saturday January 27, 2024 @07:49PM (#39161415)
I happen to see hostnames for several of my devices at home.

  root@OpenWrt:~# ubus call dhcp ipv6leases | jq -r '.device["br-lan"].leases[].hostname'
   
  cp1
  syn
  wk1
  furnace
  cp1
   
   
  5c
  4b8
   
   
  5a
   
   
  5b
   
  5a
  cp3
  4b8
   
   
   
   
  cp2
  4b
  wk2
  5c
  5b
  wk3
Re:The bash book to rule them all on Wednesday November 08, 2023 @03:17AM (#38187916)
I’m on Ventura 13.6.1. Looks like your which is a shell built-in as well. Try

  ls /usr/bin/cd
Re:The bash book to rule them all on Wednesday November 08, 2023 @02:51AM (#38187782)

  $ uname
  Darwin
  $ which cd
  /usr/bin/cd
Re:UTM – Virtual Machines for iOS and macOS on Friday September 01, 2023 @01:32PM (#37353853)
The FreeBSD qcow2 can be used directly without running an install. The one that I used was FreeBSD-13.2-RELEASE-arm64-aarch64.qcow2

For OpenBSD, the installer works after adjusting the devices in the guest.

https://cdn.openbsd.org/pub/OpenBSD/7.3/arm64/install73.img

  - UTM / Create New Virtual Machine / Virtualize / Other
  - Select 'Skip ISO boot' / Continue
  - Hardware / (adjust as needed) Continue
  - Storage / (adjust as needed) Continue
  - Shared Directory / Continue
  - Select 'Open VM Settings' / Save
  - Right-click on Devices/Display and select Remove
  - Devices / New / Serial
  - Drive / New / Import and select install73.img
  - Edit the VM again and move the second VirtIO Drive to the first position by right-clicking on it and selecting 'Move Up'
If you feel inclined, hop on to the UTM Discord and the folks there (me included) should be able to help out.

Older »