HackerTrans
TopNewTrendsCommentsPastAskShowJobs

lolidk

no profile record

Submissions

Looney Tunables – Local Privilege Escalation in the Glibc’s Ld.so

blog.qualys.com
2 points·by lolidk·3 lata temu·0 comments

comments

lolidk
·3 lata temu·discuss
This is pretty neat. There used to be free secondary (slave) DNS and it was good. Nowadays not so much and I'm still looking for some way to have secondary ns on a separate network because that's how it's supposed to work.
lolidk
·3 lata temu·discuss
Whenever you got yourself a new TV, you had to set the channels once. Afterwards it would just remember what you already had.
lolidk
·3 lata temu·discuss
That's right. Before all that you'd typically spend a few minutes going through all the frequencies to set the channels.
lolidk
·3 lata temu·discuss
This is the same as `reboot -f` without systemd.
lolidk
·3 lata temu·discuss
Well then you could use a sandbox (e.g. bubblewrap) to mount whatever on /etc/ssl. Or you could recompile libressl with a different --sysconfdir and LD_PRELOAD it.
lolidk
·3 lata temu·discuss
Time to upgrade to LibreSSL. It works just fine and I haven't ran into any compatibility issues lately. The libraries might even work side by side because of the ".50" version number although I wouldn't recommend it.

When your distro is still on 1.1.1\w, now may be the right time to make the switch.