schmonz.com is a Fediverse instance that uses the ActivityPub protocol. In other words, users at this host can communicate with people that use software like Mastodon, Pleroma, Friendica, etc. all around the world.
This server runs the snac software and there is no automatic sign-up process.
So you read about #CopyFail, and are like… owww, shit. But then you see that it was responsibly disclosed after being fixed in main, we had releases since, they went stable in #Gentoo (over other #security fixes), so we should be good, right?
Except that it turns out that after it has been fixed in mainline, nobody bothered actually backporting the fix to all the LTS branches. And it doesn't apply cleanly (https://social.treehouse.systems/@thesamesam/116490971618284574). What a shitshow!
(And we've been only talking how 5.x don't get vulnerability fixes in time — but it turns out that anything but the latest is insecure to use!)
The exploit includes cpu-specific shell code (ELF). I have the toolchain working to build working shell code and the exploit binary on both Linux/86 and Linux/ARM, but the exploit doesn't work out of the box on ARM.
Anyone got further details if this vulnerability is only valid for x86?
Holy. Fucking. Fuckballs.
This exploit is... insane.
> An unprivileged local user can write 4 controlled bytes into the page cache of any readable file on a Linux system, and use that to gain root
Linux kernel 7.0.2: 29,893,067 SLOC, according to cloc (kernel-only)
9front 11554: 2,031,330 SLOC, according to cloc (*entire* OS)
Hmmm...
deets (output converted to CSV to make it fit in a toot):
rld@prometheus:tmp$ cloc linux-7.0.2
92975 text files.
81091 unique files.
11888 files ignored.
github.com/AlDanial/cloc v 2.08 T=183.93 s (440.9 files/s, 215422.3 lines/s)
Language,files,blank,comment,code
C,36544,3753694,2871484,19348231
C/C++ Header,26366,780389,1558883,8141105
JSON,788,3,0,537120
reStructuredText,3931,194961,81174,532329
YAML,5460,100824,24940,494050
Assembly,1359,48384,100209,233628
Bourne Shell,1252,38984,25907,151802
Text,1001,20085,0,91662
Rust,345,11439,35504,90604
Python,362,17822,15550,78292
make,3179,12697,13285,59148
SVG,87,98,1311,56094
Perl,67,6754,4529,34486
XML,31,1469,1685,21064
yacc,10,722,447,4841
PO File,7,1106,1269,4336
Bourne Again Shell,63,614,407,2458
lex,10,366,355,2218
C++ 9,356,143,1917
awk,16,374,480,1722
CSV,11,126,0,1389
Jinja Template,102,69,98,794
NAnt script,2,167,0,609
XML (Qt/GTK),1,50,0,486
Markdown,6,151,3,467
XSD,1,46,9,349
Logos,2,53,0,230
CSS,3,59,76,193
Cucumber,1,37,97,188
TeX,1,6,73,155
TNSDL,2,33,0,140
Windows Module Definition,2,20,0,137
Snakemake,5,14,13,130
Linker Script,5,25,11,126
m4,1,15,1,95
Clojure,33,1,0,87
XSLT,5,13,26,61
BitBake,5,65,178,58
Umka,2,18,0,46
MATLAB,1,17,37,35
INI,3,6,0,34
sed,2,23,52,31
TOML,3,7,12,28
vim script,1,3,12,27
HTML,2,4,5,25
Ruby,1,4,0,25
Velocity Template Language,1,0,0,15
SUM:,81091,4992173,4738265,29893067
rld@prometheus:9front$ doas mount 9front-11554.amd64.iso /mnt
doas (rld@prometheus) password:
mount: /mnt: WARNING: source write-protected, mounted read-only.
rld@prometheus:9front$ cd /mnt/sys/src
rld@prometheus:src$ cloc .
8545 text files.
7103 unique files.
1519 files ignored.
github.com/AlDanial/cloc v 2.08 T=18.94 s (374.9 files/s, 134541.3 lines/s)
Language,files,blank,comment,code
C,4980,208394,167453,1618860
C/C++ Header,1401,31197,60111,196230
HTML,50,29751,715,139357
Assembly,351,4565,5449,23791
yacc,34,1345,722,18197
Bourne Shell,44,1165,1466,7507
R,18,324,126,6970
Text,10,671,0,3120
C++,4,404,347,2888
XML,2,6,0,2873
lex,18,238,520,2822
Windows Resource File,58,477,141,2660
make,17,233,211,1019
Pawn,3,21,13,650
DOS Batch,54,164,49,614
Lisp,1,182,114,405
ReasonML,1,0,0,403
JavaScript,3,60,1,356
Nemerle,1,31,72,356
m4,1,44,62,322
WebAssembly,2,32,0,239
Perl,2,57,77,214
Smalltalk,5,9,0,211
Clojure,2,0,0,210
awk,7,19,85,197
SAS,2,38,89,168
Protocol Buffers,10,3,0,166
diff,6,2,120,135
F#,1,5,0,123
Windows Module Definition,10,0,5,87
MATLAB,2,0,0,77
CSS,1,15,5,60
TNSDL,1,9,0,29
Mathematica,1,0,0,14
SUM:,7103,279461,237953,2031330
jcd - jump change directory cli tool https://lobste.rs/s/oahqui #linux #mac #rust
https://github.com/microsoft/Sysinternals-jcd
Right, question for Linux users - I'm getting some surprise money and I'm thinking I'll invest in a colour printer so that I can make my own art prints at home.
I had an Epson Eco-Tank in South Africa but was having a hell of a time calibrating the colours.
Suggestions for printers that work well on Linux (I know Brother are good), that are good for colour art prints?
BLUG, Bergen 2026-05-28: Social anarchic, mad, and misbehaving agents collaboratively solving tasks v/Bjarte Johansen
https://blug.linux.no/events/2026-05-agents/
Bergen (BSD and) Linux User Group er tilbake!
Latest 𝗩𝗮𝗹𝘂𝗮𝗯𝗹𝗲 𝗡𝗲𝘄𝘀 - 𝟮𝟬𝟮𝟲/𝟬𝟰/𝟮𝟳 (Valuable News - 2026/04/27) available.
https://vermaden.wordpress.com/2026/04/27/valuable-news-2026-04-27/
Past releases: https://vermaden.wordpress.com/news/
#verblog #vernews #news #bsd #freebsd #openbsd #netbsd #linux #unix #zfs #opnsense #ghostbsd #solaris #vermadenday
Latest 𝗩𝗮𝗹𝘂𝗮𝗯𝗹𝗲 𝗡𝗲𝘄𝘀 - 𝟮𝟬𝟮𝟲/𝟬𝟰/𝟮𝟳 (Valuable News - 2026/04/27) available.
https://vermaden.wordpress.com/2026/04/27/valuable-news-2026-04-27/
Past releases: https://vermaden.wordpress.com/news/
#verblog #vernews #news #bsd #freebsd #openbsd #netbsd #linux #unix #zfs #opnsense #ghostbsd #solaris #vermadenday
Épisode 3 : Défi Multi-arch ! 🐳
On notre projet sur Raspberry Pi 1. Objectif : build une image Docker/Podman Phoronix Test Suite compatible ARMv6, ARM64 et AMD64. 🛠️
Le vieux RPi 1 va-t-il tenir le choc ?
Direct ici : https://twitch.tv/ahp_nils
@TomAoki @tfb understood. And I’m not insensitive to the real deps here. As one who’s been “forced” to consider more minimal libs/deps (by virtue of choosing #OpenBSD on #PowerPC), I have appreciated adjusting my expectations. I expect that as more perfectly good tech / frameworks are deprecated, we’ll see people rethink these things — for the positive. (Like, will the #Linux #486 deprecation bring people to #NetBSD? ;) )
Where's the secret menu option to unlock extra hours in the day so I can actually try this?
Windows 9x Subsystem for Linux
https://codeberg.org/hails/wsl9x/src/branch/main#readme
🐧 WSL9x
Windows 9x Subsystem for Linux.
「 WSL9x runs a modern Linux kernel (6.19 at time of writing) cooperatively inside the Windows 9x kernel, enabling users to take advantage of the full suite of capabilities of both operating systems at the same time, including paging, memory protection, and pre-emptive scheduling. Run all your favourite applications side by side - no rebooting required! 」
A wee gift for my friends at @tuxjam :
[dwroulette]: a web scraper (written in #POSIX #shell) for #DistroWatch that gives you one of the top 100 #Linux distros completely at random. 😅
Built for a hostile internet: Canonical VP of Engineering on Ubuntu 26.04 LTS https://www.zdnet.com/article/built-for-a-hostile-internet-canonical-vp-of-engineering-on-ubuntu-26-04-lts/#ftag=COS-05-10aaa0j via @ZDNet & @sjvn
Everything you wanted to know about Ubuntu #Linux 26.04 from the Canonical executive in charge of building it.
#Linux Do you have a portable monitor you recommend between 13" and 15.6"? Ideally better than HD resolution. Flexible on price.
It is interesting that this is on the flavour of Windows, DOS+Windows, that was not even designed to have subsystems and personalities. That was Windows NT.
Amusingly, the screenshot is not using the correct terminal type. Yes, there is in fact a terminfo entry that should be correct for this, that has been there for 30 years, waiting.
https://invisible-island.net/ncurses/terminfo.ti.html#tic-nansi_sys
This #ThinkPad so far has been great. #OS and #firmware #updates are regularly available. Performance is snappy and smooth and it handled my long uptimes just fine.
Except I do have one peculiar issue when scrolling down on a webpage the action becomes stuck. ALL webpages just scroll on their own to the very bottom of the page. No key presses, combinations, or even the ESC key fixes or interrupts this. Clicking on a menu item like File causes the selected options to cycle infinitely. The *only* fix is to reboot the laptop.
I've never seen this on any other distro or laptop.
Has anyone else experienced this?
An #Inferno VM running in a Windows 2000 VM (software i686 emulation) running in a web browser on #Linux.
What a time to be alive. XD
https://copy.sh/v86/?profile=windows2000 (click on "Inferno OS GUI" icon on desktop)
Windows 9x Subsystem for Linux
You can find beauty in the oddest of places.
WSL9x runs a modern Linux kernel (6.19 at time of writing) cooperatively inside the Windows 9x kernel, enabling users to take advantage of the full suite of capabilities of both operating systems at the same time, including paging, memory protection, and pre-emptive scheduling. Run all your favourite applications side by side -
https://www.osnews.com/story/144819/windows-9x-subsystem-for-linux/
The government cannot be your child's parent. You cannot protect your children from the fact that bad things exist in the world.
You'll never be able to protect your children from Sex Drugs and Rock 'n Roll, by pretending they don't exist. (banning things just forces those things to fester in the dark… where you cannot police them… enter the dark web, which is easy as pie to access).
LINUX NERDS. ASSEMBLE.
I am at my inlaws.
My dadinlaw is trying linux mint and wants to change the cursor colour - is it possible? If so, how?