Security Headlines with Johnny Xmas
Security Headlines with Johnny Xmas

shark vs the universe
dirt enthusiast
YOU ARE THE REASON

roma★

blake kathryn
let's talk about Bridgerton tea, my ask is open
we're not kids anymore.
Stranger Things
h
Three Goblin Art

★
"I'm Dorothy Gale from Kansas"

Cosmic Funnies
Jules of Nature

Product Placement

oozey mess
he wasn't even looking at me and he found me
$LAYYYTER
ojovivo

seen from United States
seen from United States

seen from Hungary
seen from T1
seen from Türkiye
seen from United States

seen from Malaysia
seen from Canada
seen from United States
seen from Singapore

seen from Türkiye

seen from United States

seen from United States

seen from United Kingdom

seen from United States
seen from United States

seen from United Kingdom
seen from United States

seen from United States
seen from United States
@firosolutions
Security Headlines with Johnny Xmas
Security Headlines with Johnny Xmas

Anya is live and ready to show you everything. Watch her strip, dance, and perform exclusive shows just for you. Interact in real-time and make your fantasies come true.
Free to watch • No registration required • HD streaming
Deep dive special with Security Headlines
Security Headlines with Mischa Peters
OpenBSD Amsterdam podcast
FreeNas Podcast special
In modern stacks, a large chunk of applications run in container environments such as docker and systemd-nspawn. However, these applications are not built for security. The security community has proven it again and again that privilege escalation attacks are very serious with attacks such as Dirty Cow and CVE-2016-3135. A way to tackle the problems of running applications with a low privilege user without that application being able to interact with other running applications is to use *user namespaces*. Using user namespaces you can hide process id's to the applications and provide a more sandboxed environment. Alex wanted to the distribution of multiplatform applications easy which led him to sandboxing and namespaces, today he maintains the "chroot on steroids" project *bubblewrap* which is a sandbox platform for running sandboxed applications in different namespaces. Alex is also a long time user of Linux, with 20 years working for Redhat. He started to code on the commodore 64 and has been a developer ever since. In school he got introduced to Solaris and jumped deeper and deeper into Linux rabbit hole. Working on Linux allows Alex to work from home in the suburbs of Stockholm and work on programs that get used by a global user base. In this episode, we talk about how it has been to work on sandboxed desktop applications and how flatpak has grown. So far there a has been a handful of different CVE's for bubblewrap that we talk about. Flatpak has gotten bigger and bigger and "flathub" has come to see the light , flathub is a place where all Linux users can get sandboxed desktop applications. Flathub is running on a stable Rust backend, Alex picked Rust to be the backend as one of his first larger Rust projects. We of course talk about how Rust is becoming more part of our daily lives as more and more applications are being ported to it, like librsvg journey from being written in C to now being a rust code base, as well as libraries being written in Rust. If you are maintaining an application with a graphical user interface and you target an audience that is running Linux on the desktop, we recommend that you get your application on flathub. Here is a guide on how you can do that: https://github.com/flathub/flathub/wiki/App-Submission This podcast was made possible with running zoom with flatpak: $ flatpak remote-add --if-not-exists flathub https://dl.flathub.org/repo/flathub.flatpakrepo $ flatpak install flathub us.zoom.Zoom $ flatpak run us.zoom.Zoom External links: https://github.com/containers/bubblewrap https://flathub.org/home https://en.wikipedia.org/wiki/Slirp https://github.com/rootless-containers/slirp4netns https://podman.io/ https://github.com/GNOME/librsvg https://blogs.gnome.org/alexl/ https://twitter.com/gnomealex https://lkml.org/lkml/2016/3/9/555 https://lwn.net/Articles/657744/ https://blog.firosolutions.com/

Anya is live and ready to show you everything. Watch her strip, dance, and perform exclusive shows just for you. Interact in real-time and make your fantasies come true.
Free to watch • No registration required • HD streaming
Security headlines Tarsnap Special with Colin Percival
tarsnap security podcast
Security Headlines dpaste Podcast special
Check out our latest episode when we talk about dpaste!
Vulnerability Management is new field in the cyber security space. But what is it? and how does it work…
What is Vulnerability Management? and what do we really do? We made a short video explaining how we approach Vulnerability ManagementÂ
How can the coronavirus spread through the post system and how long is the lifespan of the coronavirus on various surfaces
Can the corona virus spread through the post system?
Hacking Node.js with buffer overflows
A security researcher has found several security holes in the core code of NodeJS

Anya is live and ready to show you everything. Watch her strip, dance, and perform exclusive shows just for you. Interact in real-time and make your fantasies come true.
Free to watch • No registration required • HD streaming
Klondike on Security Headlines Podcast
We have a new episode of security headlines available !
Fuzzing Rust with Shnatsel In this fresh episode of Security headlines we interview Shnatsel about rust fuzzing, we jump in the rabbit holes of Rust and fuzzing and explore the magical world. In this episode we cover: Fuzzing in rust i side track to openbsd ofc we talk about internal builds using clippy to inform people about best practices clippy in Rust CI systems Rust in enterprise systems linting in rust the cargo build system security exploits rebuilding binaries cloud binaries cargo rfc cargo fuzz AFL/american fuzzyloop, hongfuzz, libfuzzer binaries dependencies in rust finding zero days unmaintained code in production versions in binaries auditing binaries finding bugs in rust, C and C++ code claiming CVEs address sanitizer going beyond address sanitizer to find use after free/Use of uninitialized memory bugs binary parser angola fuzzer memory sanitizer finding new and interesting bugs in your codebase rust sub reddit libdfuzz External links: https://github.com/rust-fuzz/auto-fuzz-test https://github.com/Shnatsel/rust-audit https://github.com/AngoraFuzzer/Angora https://web.cs.ucdavis.edu/~hchen/paper/chen2018angora.pdf https://github.com/rust-fuzz/cargo-fuzz https://github.com/avadacatavra/unsafe-unicorn https://rust.firosolutions.com https://reddit.com/r/Rust https://lcamtuf.coredump.cx/afl/ https://github.com/rust-fuzz https://github.com/rust-fuzz/trophy-case https://blog.firosolutions.com/2020/07/superhero-rust-fuzzing/
PHP-fusion security vulnerabilities 2020
We wanted to make a love child between a blockchain block explorer and our api. In order to demostrate the true power of our api :) We…
We wanted to make a love child between a blockchain block explorer and our api. In order to demostrate the true power of our api :)
Our exploit of today is one affecting two CVE’s for the popular devops tool salt. Salt is a tool for system administrators to manage and…
Our exploit of today is one affecting two CVE’s for the popular devops tool salt. Salt is a tool for system administrators to manage and carry out tasks on various computers. Such as upgrading a large set of computers. Due to easy of use and a wide variety of supported platforms the tool has grown a bigger and bigger user based and even has a yearly conference called salt con(https://saltconf.com/). Two new vulnerabilities was found that where so serious even salt is having a text on their main page advising people to patch their salt instance.

Anya is live and ready to show you everything. Watch her strip, dance, and perform exclusive shows just for you. Interact in real-time and make your fantasies come true.
Free to watch • No registration required • HD streaming
Going from fuzzing to remote code execution by sending a malicious mms without any user interaction
New fresh rusty updates
Building a Cargo.toml scanner for Rust