@PeterMotte This was just a silly computer joke. "GPT" can also mean "GUID Partition Table".

I don't understand the hate against GPT. I think it's a great technology, and definitely a step in the right direction. Of course there are those who will resist it, but we should all accept it's here to stay.

For example, having a backup copy of the partition table at the end of the disk greatly increases the chances of being able to recover from disk corruption at the first few sectors of the disk.

...chatbot? What chatbot?

Has anyone wondered why the CopyFail PoC is so heavily obfuscated?

That's a legit question. Isn't a PoC supposed to be clear so you know what you're trying to defend against?

CopyFail Was Not Disclosed to Distros : https://www.openwall.com/lists/oss-security/2026/04/30/10

#CopyFAil

Update: not available
I'm donating #Pixel3 with installed #PostmarketOS #Phosh edge. It helps me open #mobileLinux world and now I prefer a more modern hardware.

I'd be happy to post it to someone who needs it as long it's in the EU. No payment needed.

You can also come collect it in #Helsinki

#fediGiveFi

https://wiki.postmarketos.org/wiki/Google_Pixel_3_(google-blueline)

Update:
Thank you for the support. I'm going to send the phone to Hamburg. Happy coding!

#cats

@cas At this point the only reason why I still run Android is because I can degoogle most of it rather easily and because I can install other OSes such as pmOS on my phone without being reliant on someone discovering some tethered vuln in iBoot. (though yes, pmOS does run on iPhones :)

that's why I run android instead of iOS. Other than that I hate the thing now. Android now isn't the Android I remember being excited about using in 2012 :(

My main issue with postmarketOS isn't really the app selection (given it's also quite barebones on degoogled Android), but rather just the reliability of it all. I've daily driven pmOS on my phone at some point, and really mostly calls and audio were unreliable, enough for many people IRL to complain about me not answering calls. :P

@cas At this point the only reason why I still run Android is because I can degoogle most of it rather easily and because I can install other OSes such as pmOS on my phone without being reliant on someone discovering some tethered vuln in iBoot. (though yes, pmOS does run on iPhones :)

that's why I run android instead of iOS. Other than that I hate the thing now. Android now isn't the Android I remember being excited about using in 2012 :(

My main issue with postmarketOS isn't really the app selection (given it's also quite barebones on degoogled Android), but rather just the reliability of it all. I've daily driven pmOS on my phone at some point, and really mostly calls and audio were unreliable, enough for many people IRL to complain about me not answering calls. :P

@elly @domi @moses_izumi don't you get it? the fedi is the website? :p

Quickly dove into the copy.fail exploit.

1. Yes, it's real.
2. Current chain can write any arbitrary content to any user-readable file (into the page cache).
3. Current chain relies on an available target suid binary that you can open() as a lowpriv user.
4. Current exploit relies on that binary being /bin/su and then being able to execve(/bin/sh, 0, 0) (which doesn't work on alpine, etc.). The former is easily replaced in the code. The latter needs a rebuilt payload ELF (also easy).

important reminder about copy.fail:

https://xkcd.com/1200/

Seven new stable kernels for Thursday

https://lwn.net/Articles/1070641/ #LWN #Linux #kernel

Disclosure: in some cases, a Linux user can use doas to edit files in /etc/periodic/15min, allowing to execute code as root. I haven't reported this to cron because maintainer's e-mail address was so long I didn't want to type it.

lauren@hayasaka ~ $ doas python3 ./turbohack.py
lauren@hayasaka ~ $ tail -n2 /tmp/out.txt
[+] Executing: whoami
root

ios users; how old is your (main) phone (since release)?
don’t vote if your main phone isn’t an iphone and/or you don’t connect it to the internet

android users, how old is your (main) phone (since release)?
don’t vote if your main phone doesn’t run android and/or you don’t connect it to the internet

@cas and soon they'll work the same, making it just moot to use android over iOS :P

@cas I was kind of being sarcastic. I'm saying Android and iOS look the same now

@CyReVolt Hehe :D I can do it too, just take the SSD/HDD and throw it violently on the floor to break it.

@noisytoot @fossdd HexChat is dead.

@jns @blendernation However it seems they're already using Claude to write stuff. Ugh.