denhamparry

7 ms·

1.
by denhamparry 11mo ago
It is unlikely to have the bug as it sees more use, but it is worth checking. There have been previous CVEs with Pythons tar module.
2.
by denhamparry 11mo ago
It is possible to exploit this bug by crafting a file that has tar contents without a header, thus making it hard to detect even with recursive archives.
3.
by denhamparry 11mo ago
Thanks for the question! Someone could release a malicious package that looks okay to a scanner tool, but when installed using uv can behave differently, allowing attackers to masquerade executable code. In addition, for OCI images, it is p
4.
by denhamparry 11mo ago
I'm from Edera. If you have any questions please send them our way
5.
Tarmageddon: RCE vulnerability highlights challenges of open source abandonware(edera.dev)
25 points by denhamparry 11mo ago|1 comments
6.
by denhamparry 1y ago
Its a great blog post and loved the interactive elements around it
7.
Nscale raises the largest Series B in European history, at $1.1B(nscale.com)
3 points by denhamparry 1y ago|0 comments
8.
by denhamparry 1y ago
Edera developer here. I agree! But there are instances we need to run with additional capabilities, and we’re also dependent on people knowing how to do the right thing. We’re trying to improve this by setting this by default, but also impr
9.
by denhamparry 1y ago
Edera developer here! Thank you for sharing and any feedback you have would be great! Edera Protect is written in Rust too, and our focus is also performance as well as isolation.
10.
by denhamparry 1y ago
Edera developer here. Edera Protect is being developed to manage access to the GPU hardware on a Node with the containers running your workloads. We talk a lot about isolation between containers, but we're also focused on adding this i
11.
by denhamparry 1y ago
Edera developer here. gVisor is restrictive, but its at a cost of performance. Personally, I'd say Edera Protect is one level deeper. We create Edera Protect Zones to provide isolation, so we create a Zone that is isolated from the OS
12.
by denhamparry 1y ago
Edera developer here, we use Styrolite to run containers with Edera Protect. Edera Protect creates Zones to isolate processes from other Zones so that if someone were to break out of a container, they'd only see the zone processes. Not
13.
by denhamparry 3y ago
I'm thankful that the important stuff is covered , there is helpful documentation over here btw https://edu.chainguard.dev/open-source/wolfi/overview/
14.
by denhamparry 7y ago
Had the same feeling reading the article. I hadn't thought what happens when the airpod batteries fail. Will look for something more sustainable going forward.
15.
by denhamparry 8y ago
I’m in my 30’s now and found out that I suffer from depression. It was a lightbulb moment realising that the feeling I’d become accustomed to for the previous 15 years was actually something. For me, I never fitted in with anyone at Univer