Published on: 2025-04-27 04:56:31
By Tao Sauvage SAP setuid It's not every day you get a chance to one-up your CTO and co-founder of the company you work for. In 2020, Vincent Berg published a blog post describing a vulnerability he found affecting an SAP setuid binary while preparing for a client project. Combined with an insecure NFS configuration, he was able to compromise a dozen UNIX machines during that client engagement. Last year, I was assigned to a new SAP-related project for the same client. I made it a personal go
Keywords: archive file sap sar usr
Find related items on AmazonPublished on: 2025-05-11 13:09:38
Today – as my son requested – we will talk about Minecraft server … inside FreeBSD Jails container. This is kinda like Docker/Podman thing on Linux – but secure instead. Prepare First we will populate /jail path and also fetch needed FreeBSD Base System version. As for today – we will use 14.2-RELEASE version of FreeBSD UNIX. host # mkdir -p /jail/minecraft /jail/BASE host # VER=$( freebsd-version | awk -F '-' '{print $1 "-" $2}' ) host # fetch -o /jail/BASE/${VER}-base.txz https://download
Keywords: jail local minecraft server usr
Find related items on AmazonPublished on: 2025-05-30 01:58:37
Note: This article is part of a series on the security of the infrastructure of Linux distributions—don’t forget to read our introduction if you haven’t done it already! This is a guest blogpost by friend of Fenrisk, Thomas Chauchefoin. Why Pagure? As discussed in the meta-article, we picked Pagure from the Fedora Apps Directory and already had a technical approach in mind. A software forge is likely to be a good target for an argument injection: we can expect the backend to shell out e
Keywords: file git pagure user usr
Find related items on AmazonPublished on: 2025-06-09 21:55:17
Make Ubuntu packages 90% faster by rebuilding them You can take the same source code package that Ubuntu uses to build jq, compile it again, and realize 90% better performance. Setting I use jq for processing GeoJSON files and other open data offered in JSON format. Today I am working with a 500MB GeoJSON file that contains the Alameda County Assessor's parcel map. I want to run a query that prints the city for every parcel worth more than a threshold amount. The program is .features[] | sel
Keywords: geojson jq select tmp usr
Find related items on AmazonPublished on: 2025-06-11 02:59:50
Block YouTube Ads on AppleTV by Decrypting and Stripping Ads from Profobuf In a Nutshell I discovered that putting a man-in-the-middle proxy between my Apple TV and the world lets me decrypt HTTPS traffic. From there, I can read the Protocol Buffer data Google uses to populate YouTube with ads. It is too CPU-intensive to decode Protobuf on the fly, so instead, I found a flaw in the Protobuf format which allows me to reliably change one byte to obliterate ads. What follows is a reference guide f
Keywords: com mitmproxy pfsense usr youtube
Find related items on AmazonPublished on: 2025-06-12 03:59:50
Block YouTube Ads on AppleTV by Decrypting and Stripping Ads from Profobuf In a Nutshell I discovered that putting a man-in-the-middle proxy between my Apple TV and the world lets me decrypt HTTPS traffic. From there, I can read the Protocol Buffer data Google uses to populate YouTube with ads. It is too CPU-intensive to decode Protobuf on the fly, so instead, I found a flaw in the Protobuf format which allows me to reliably change one byte to obliterate ads. What follows is a reference guide f
Keywords: com mitmproxy pfsense usr youtube
Find related items on AmazonGo K’awiil is a project by nerdhub.co that curates technology news from a variety of trusted sources. We built this site because, although news aggregation is incredibly useful, many platforms are cluttered with intrusive ads and heavy JavaScript that can make mobile browsing a hassle. By hand-selecting our favorite tech news outlets, we’ve created a cleaner, more mobile-friendly experience.
Your privacy is important to us. Go K’awiil does not use analytics tools such as Facebook Pixel or Google Analytics. The only tracking occurs through affiliate links to amazon.com, which are tagged with our Amazon affiliate code, helping us earn a small commission.
We are not currently offering ad space. However, if you’re interested in advertising with us, please get in touch at [email protected] and we’ll be happy to review your submission.