turbert

7 ms·

1. 1.▲
   by turbert 1mo ago

   when the GPU capex overshadows everything else your idle hardware is burning enormous amounts of money
2. 2.▲
   by turbert 2mo ago

   > I argue the opposite: there’s no better fix for this The better fix would be to not have the username pass through a parser looking for cli flags in the first place.
3. 3.▲
   by turbert 2mo ago

   A correct implementation would be to just call glibc directly, this seems like a hasty fix to get the patch out the door. The history of vulns from bad shell escaping is as old as bash, whenever possible you probably shouldn't be mixin
4. 4.▲
   by turbert 7mo ago

   likely intended more as a lint than a security feature, it's not unusual to want to exclude commonly misused features from your code and any libraries you use. Knowing the mess that is the php standard library, I imagine many applicati
5. 5.▲
   by turbert 7mo ago

   from a quick skim, it looks like the underlying bug is just not handling object resurrection[1] at all (FreeMe adds a reference to $array while its destructor is called). I'm not really familiar with PHP but this seems like a surprisin
6. 6.▲
   by turbert 11mo ago

   Its been a while since I've touched this stuff but my recollection is the ELF interpreter (ldso, not the kernel) is responsible for everything after mapping the initial ELF's segments. iirc execve maps pt_load segments from the pr