A researcher asked Meta's Muse assistant to archive files it could access and send them to Google Drive, and it complied, delivering a 2.7GB compressed (6.8GB unpacked) package. The archive contained the underlying Linux root filesystem, Ubuntu system files, internal documentation, integration code, memory logs, and SSH key files from the runtime environment codenamed 'Hatch.' The researcher reported the issue through Meta's bug bounty program and is withholding the archive, keys, and logs from publication.
mouse.dev
· 2026-09-22
Sigabrt.dev is a new cronjob monitoring service that lets users check endpoint status, schedules and recent events directly through an SSH-based terminal UI rather than a web dashboard. Users add their SSH public key in settings and connect via 'ssh sigabrt.dev' to view their monitored jobs. The product is described as an early, read-only work in progress, with the developer soliciting feedback on future features.
sigabrt.dev
· 2026-09-19
Syq is a new command-line utility for copying, reorganizing, and deleting files between machines, positioned as an alternative to rsync. It supports resuming interrupted transfers, running remote commands from a server without needing SSH access on the client machine, and scripting via a JSON API or Python SDK.
greaber.github.io
· 2026-09-10
Attackers are combining two newly disclosed MikroTik RouterOS vulnerabilities, an SSH authentication bypass (CVE-2026-67276) and a privilege escalation bug (CVE-2026-86060), to seize full control of routers with SSH exposed to the internet. Poland's CERT, which found the flaws with AI assistance, calls the combined exploit 'MikroTrick' and confirms it is being used in real-world attacks. MikroTik patched the issues in RouterOS versions released September 3, alongside a related bandwidth-test flaw that can leak memory or crash devices.
bleepingcomputer.com
· 2026-09-07
MikroTik simultaneously released RouterOS 7.23.4, 7.24.2 and 6.49.21 on September 3, 2026, each flagging an unspecified 'important security update' without disclosing details. A security researcher reverse-engineered the binary diffs across versions and identified two exploitable flaws: a low-exponent RSA signature forgery leading to an mtget buffer overflow, and an SSH authentication bug where a username value of -2 grants a read-only session elevated privileges, enabling full command execution on the router.
npratley.net
· 2026-09-05
Programmer John Carmack raised a question about whether children who start coding early with tools like Scratch go on to have fulfilling technical careers. He described his own approach with his child, using a Unix-like emulated system as a gatekeeper, requiring the child to complete challenges to unlock rewards such as a favorite music video. Carmack mentioned using a Raspberry Pi-based keyboard computer connected to his TV with low latency and his own SSH keys as part of this setup.
twitter.com
· 2026-08-31
A developer released a desktop tool built with Rust and Tauri that lets users administer Linux servers directly over SSH, avoiding the need to install or maintain any agent software on the remote machines. Login credentials are stored in an encrypted local vault rather than on a remote service, and the tool is designed to work across multiple Linux distributions including Debian, Ubuntu, Fedora, RHEL, openSUSE, Arch and Alpine.
serverbox.stupidlabs.lol
· 2026-08-31
GoKawiil