What a nice little blog!
On May 7, 2026, Hyunwoo Kim ( @v4bel ) publicly disclosed a new Linux kernel vulnerability class dubbed Dirty Frag . The disclosure chains two CVEs, CVE-2026-43284 (xfrm-ESP Page-Cache Write) and CVE-2026-43500 (RxRPC Page-Cache Write), to achieve universal local privilege escalation across every major distribution. The embargo was broken by external factors before patches existed, and the…
This is a zine repost. https://ghspace.fr/zine/old/732_bytes_to_pwn_linux_kernel.txt |=-----------------------------------------------------------------------=| |=----------------=[ 732-bytes to pwn linux kernel ]=--------------------=| |=-----------------------------------------------------------------------=| |=----------------------------=[ Beemo ]=--------------------------------=|…
Not Kidding, but also a cool ref from childhood. Dumb pipe , the rust one, is a 200-line wrapper around the iroh rust crate . It punches through NATs, using on-the-fly node identifiers and keeps your machines connected as network conditions change. You can use it as a unix pipe between two computers Install Get dumbpipe with a single command on two computers, connect them & pipe data from one…
RSA (Rivest-Shamir-Adleman) is the first and still one of the most common asymmetric encryption scheme. While being used almost everywhere by almost everyone, not many seems to really understand what RSA stands really for. Obviously, it would be difficult for me to explain every bits in a one page article. So let me give you a thing or two, just enough to, I wish, motivate you to dig deeper. About…
I recently discovered the excellent work of Giuseppe Persiano, Duong Hieu Phan and Moti Yung about Anamorphic cryptography. IRL, Anamorphosis is a concept where an image changes depending on the viewer's perspective or POV. Meaning that, in cryptography, we can create ciphertexts that reveal different messages depending on the recipients, even though they use the same encrypted data. The Idea In a…
Un peu de cryptographie ça fait pas de mal à son homme. En français cette fois, parceque j'avais envie ;) Jusque dans les années 70, le seul moyen d'établir un canal privé chiffré entre deux entitée était d'abord de se mettre d'accord sur un secret avec lequel vous alliez communiquer. Pendant la guerre froide par exemple, certains mots de passes et autre codes secrets étaient communiqués par…
3.14159265358979323846264338327950288419716939937510582097494459230781640628620899862803482534211706798214808651328230664709384460955058223172535940812848111745028410270193852110555964462294895493038196442881097566593344612847564823378678316527120190914564856692346034861045432664821339360726024914127372458700660631558817488152092096282925409171536436789259036001133053054882046652138414695194151160…
Depuis plusieurs années, nous assistons à une dérive sécuritaire dans de nombreux pays, où les gouvernements justifient des atteintes aux libertés individuelles par des discours alarmistes sur la criminalité, le terrorisme et d'autres menaces. En France, cette tendance s'est intensifiée sous le gouvernement actuel, avec, en plus des réduction de droits sociaux, et des passages en forces, des lois…
Server-Sent Events (SSE) offer a straightforward way to push real-time updates from a server to a client. Unlike WebSockets, SSE is designed one-way ony, from the server to the client which makes it an excellent choice for applications that need to send notifications, updates, or messages to clients without full-duplex connections. In this post, we'll try and implement SSE using Python. Hope…
For many years, I've been loyal to Vim. I hoped that with enough practice, I'd become a keyboard ninja, jjjjkkkklmmmm -ing through code. But it turns out that, while I'm definitely efficient with it, I keep making dumb mistakes, getting stuck in modes, trying to memorize all those shortcuts. Vim is powerful, no doubt about it. But for someone with attention issues, it hasn't been a good…