Tech News
← Home  ·  All topics

Handshake

5 GoKawiil briefs on this topic

Data brokers pitch companies cash for internal emails and files to train AI

Intermediaries such as Handshake and firms pitching to media and startup founders are offering companies and individuals payments—reportedly ranging from roughly $1,000 to as much as $2 million—for archives of internal documents, emails, Slack messages, call transcripts and work records. The buyers say the material is destined for AI labs like Anthropic and OpenAI, which want proprietary 'knowledge work' data to train models now that public web data is largely exhausted.

Critical Linux TCP Flaw CVE-2026-98432 Gets Root Exploit PoC via Claude AI

A use-after-free bug in Linux's IPv4 TCP handshake, present since kernel 4.4, has been patched upstream with fixed releases spanning 5.10 through 7.3, but Ubuntu and RHEL have not yet shipped fixes as of October 31. Anthropic says its Claude model produced a working proof-of-concept that gains root access with no credentials on servers running multipath TCP listeners, and Go's security team notes Go programs enable such listeners by default.

Go 1.27 speeds up HTTP/1 connection reuse by up to 5x

Go's net/http maintainers Nicholas Husin and Damien Neil report that Go 1.27 significantly improves how the standard library reuses HTTP/1 connections. In their benchmark, making 100 sequential requests to index.golang.org dropped from roughly 710 milliseconds on Go 1.26 to about 150 milliseconds on Go 1.27 when forcing HTTP/1.1 via GODEBUG=http2client=0.

56k.rip recreates full 1996 dial-up internet experience in the browser

56k.rip is a browser-based simulation of using the internet in 1996, including the dial-up handshake sound, a choice of 14.4, 28.8 or 56k connection speeds, and a recreated period web of pages like classifieds, a webring and a weather report. Page load times genuinely vary by the chosen connection speed, with images rendering line by line and downloads often failing, mimicking real dial-up behavior. The experience runs entirely client-side with no accounts or stored data, using synthesized sound effects and procedurally generated web-safe-palette graphics, aside from a recorded real modem handshake credited on the site.

Developer demonstrates binding mTLS client keys to a TPM to block key theft

A developer working on remote attestation for confidential VMs describes a technique for signing TLS handshake data using a private key generated and held inside a Trusted Platform Module, rather than storing it as a plain file on disk. The approach targets mutual TLS client authentication, where a stolen private key normally lets an attacker impersonate the machine anywhere that certificate is trusted.