jakobdabo

> the attacker chained in a second exploit: a Linux kernel vulnerability in the XFRM ESP-in-TCP subsystem

Linux seems to have a huge attack surface that doesn't necessarily need to be there for every user/server.

E.g. this came out today: CVE-2026-98432: Linux TCP Use-After-Free Risk and Patch Validation [1].

I just disabled mptcp on my systems since I don't use it. Why was it enabled by default?

Can I disable this XFRM thing too?

[1] https://www.penligent.ai/hackinglabs/cve-2026-98432/

> Did you buy your phone through the carrier?

No.

I wonder which field is responsible for disabling the Personal Hotspot feature? About a year ago mine suddenly got disabled in the phone's UI. Since then, the only time it got enabled was when I was traveling and using a travel eSIM.

It's sad that phone companies allow carriers such anti-user things.

IMHO, for fairness, upvotes should be the vouches countering the flags. I think unless the amount of flags is really significant, they shouldn't have priority over the 117 upvoters (and counting) who are clearly interested to have this discussion here.

My thinking could be naïve, as the algorithms were probably created with the backing of some data and experience, but anyway, I felt like sharing my opinion.

> I believe secrets are still encrypted at this stage similar to cold boot.

Does this mean that the Signal desktop application doesn't lock/unlock its (presumably encrypted) database with a secret when locking/unlocking the laptop?

Can anyone please provide directions/links to tools that can be run locally, and that take an audio recording of a voice as an input, and produce an output with the same voice saying the same thing with the same intonations, but with a fixed/changed accent?

This is needed for processing an indie game's voice recordings, where the voice actors weren't native speakers and had some accent.

This is a good article: https://insinuator.net/2025/12/bluetooth-headphone-jacking-f...

I see what you've done there!

        int randomNumber = getRandomNumber(1, 808);
        if (randomNumber == 808)
                printGlimmeringText(text, nerdFontText, lastRowColor);

Nice project!

I found two versions at https://archive.org, there's a PDF manual too.

That's great, thanks!

> It's also not required on the Bluesky service any longer, in most cases.

That's also nice to hear - when last time I tried to register an account (shortly after the free registration launch) the phone number field in the registration form was marked as required, if I am not mistaken.

Congratulations on the release! If I may ask a question - is it possible to register an account without a phone number on a 3-rd party server?

You can also use DNSCloak, which can act as a VPN, and proxy all DNS requests to a trusted DoH server, like AdGuard.

I think wearing such a massive thing on your head is a dead end. It may become a niche product for professionals (as the price and "Pro" in the name suggest), but it's not practical for everyday casual use.

Is it still out of the reach from the current state of art in technology for a thin client, not much heaver than sunglasses - just the visual component and some simple circuit to receive the signal from an iPhone?

I happen to know a few German street photographers, like Siegfried Hansen[1], for example. Now, I wonder, how do they publish their works and organize exhibitions then? Is it possible that there are some exceptions in the law?

[1] https://en.wikipedia.org/wiki/Siegfried_Hansen_(photographer...

I think this kind of warrant canary doesn't bring much value. It takes only one warrant to make this document historical. And then what?

I wish every account had its own warrant canary.

I think this can be easily solved using process/app isolation, i.e. KeePassXC doesn't need network connectivity.

ETag (paired with If-None-Match header sent by the browsers) is another caching header to be aware of.

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/ET...

Films from all around the world. For the past couple of years, I enjoy watching 3-4 films a week in average.

Much like literature and art, quality cinema gradually makes you a better person, and has a profound effect on acquiring good taste, and having a love affair with beauty - you see something, and you immediately know if it's special.

If you don't know where to start, open Wikipedia pages for past film festivals (Cannes, Berlin, Venice, Toronto, etc.), and e.g. select randomly a decade, then a year, then a film from one of the winning positions. In time, you will develop your own taste and opinion about the filmmakers, and the actors, and the countries of origin, and the themes, and the genres, etc.

French, Italian, Swedish, Taiwanese, Japanese, American, or so many other places - there are great filmmakers nearly everywhere around the world, and you can enjoy it.

A good reason to own a Ricoh GR IIIx (or Ricoh GR III, which has a 28mm equiv. lense instead of 40mm on the "x" version). It looks very simple and non-professional, but the picture quality is comparable with the latest Fuji X100 series cameras.

I think there is no point arguing about the price - it's Leica, and it's got to be expensive.

The news is more about the statement - releasing a new film camera in 2022.

There is an increased demand[1] in film photography, and we can see that the market is answering. I hope other manufacturers follow suit.

[1] https://www.rochesterfirst.com/news/business/kodak-hiring-fi...

SHA-384 is a hash function from the SHA-2 family, and it has no relation to SHA-3.

Is it wrong to find the result aesthetically pleasing? In short, it's about the art of photography, those expired films are not for archival family photos, and surely it's not about saving $5.

If you like having fun while learning, I recommend getting into reverse engineering.

> I’m interested in any resources.

This is a nice list: "A curated list of Assembly Language / Reversing / Malware Analysis / Game Hacking-resources" - https://gist.github.com/muff-in/ff678b1fda17e6188aa0462a9962...

I was asking about mailing lists, but even so, people who are posting interesting newsletters are also very welcome.

BTW, thank you everyone who posted (or is going to post) an answer. There are many great suggestions!

I use WirePlumber (the systemd user service is started), and no DE (only a WM).

I hope somebody has a solution for a problem that I have and can't find anything online.

I have a simple Pipewire setup. When plugging a regular 3.5mm headphone (/w a mic) it always ends up in maximum capture settings, so if I forget to open `alsamixer` and decrease the mic capture and boost levels to a reasonable level, people behind the other end of Zoom calls suffer.

If I unplug it and plug again, it resets to 100% again. How to fix this?

Meta: I really don't like when media suggests how the reader should feel about an article by prefixing the title with "Anger as" or something like that. That's just a propaganda tool.

The information is sourced from the users' about page. People who don't want to be exposed tend to not put links to their websites in their public about page.

> its possible to encrypt with the private key and decrypt with the public key

Isn't it just signing/verifying? I.e. "encryption" with a private key is how RSA is being used to sign, and "decryption" with a public key - used to verify the signature.

You possibly miss quite the point of what art is about. Yes, technique is a part of it, and Michelangelo's works are great, no question, but don't diminish something just because you don't see the point.

See, you were "astonished" by Michelangelo's work, you felt something about it, the realism and the details of the carving aroused something in you, emotions.

People can also feel powerful emotions from other types of visual arts - there are more nuanced things, like colors, shapes, lines and things that you can't describe but only experience, partly subconsciously.

Go see a Rothko painting, for example. You can even naively tell me that it's just some colors and anybody could paint it, but no, stand there and try to experience what that raw visual data makes you feel, without trying to find some logic.