“The two vulnerabilities are linked to the router firmware’s AiCloud feature”

Unsanitzed inputs is bad enough but come the fuck on. Who thought any part of this was a good idea?

I worked at a datacenter that wanted to change backup vendors, as we dug into the details we found out that the agent based backups needed an agent running on the machine to restore to and they didn’t have a linux agent. Despite this obvious problem mgmt chose this vendor. It didn’t take long before sysadmins were rebuilding linux boxes from scratch in the wee hours. I left shortly after.

So, the supply chain affected wasn’t wordpress source but git repos of other malicious tools used to attack stuff, like wordpress. They stole from people stealing stuff. The headline makes it seem like the wordpress source was compromised.

Here’s microsoft’s info: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-49071

MS says they mitigated it without user intervention. Allegedly someone with privileges for Windows Defender could access an index file and send file contents over a network. I couldn’t tell if the file contents were just the index itself or file contents from elsewhere on the machine but I think it’s the former.

Anyway, MS says it’s fixed and pay no attention to the man behind the curtain.

You’re right, the thing that would work is if governments held them accountable, but governments have sided with the CEOs instead. These CEOs should beg the government to hold them accountable so that they don’t have to fear the masses.

CEOs have faced zero consequences for their actions, the people they’ve harmed have exhausted all reasonable peaceful options. This incident alone will probably not change anything for the better but if those in power have no fear of the masses idk what else they expect to happen.

Security through minority is not a best practice. More support would also lead to hardened security even if it becomes a more lucrative target.

Because more market share means more fucks to give from companies that make stuff we use.

Also it looks like it requires the user to interact with a specially crafted archive file and can access memory within context of the user.

Hell yeah, haven’t made a donut in a while and I have some downtime. Gday mate!

Hard coded credentials? Really?

bloat

Nah, if you haven’t fought windows printer drivers then you’ve just been lucky. Meanwhile you can almost always convince CUPS to spit out a print.

I try to use dxf instead of dwg when I can, it’s got everything I need. I think the public sector should require open standards for submissions.

Vista because of license shenanigans. I tried to upgrade from XP and the license wouldn’t activate. Support told me my upgrade license wasn’t compatible with my XP license, like pro vs home or some crap. I was reinstalling Vista every 30 days for a while, I even got it down to like 15 minutes using a slipstreamed DVD with all the stuff I cared about being installed with the OS. It was manageable but annoying since I paid for the OS and the upgrade but couldn’t really use it. Then I took intro to unix and found out linux is free, I’d heard of linux but didn’t know it was free. I didn’t know what a distro was, I wasted a bunch of time trying to download linux from kernel.org and I couldn’t figure out how to get linux to work. Eventually I stumbled upon Ubuntu. Folks, you might not believe this but once upon a time Ubuntu used to be great for newbies. I can still hear the startup music (which was the style at the time) and the african drums. My printer just fucking worked. Firefox and libreoffice just worked, although I quickly learned to turn in deliverables as pdf exports. There were some learning pains but nothing that was any more difficult than random shit that pops up in windows, at least with linux I might get a useful error to point me in the right direction and there was always someone out there smarter than me that posted how to fix it. I haven’t looked back.

BSD (binge some dairy)

Well it’s open sauce now.

Some of ya’ll are overly terrified of scorpions and I just want you to know that some scorpions can swim and dive under water so have fun emptying that pool skimmer basket.