@alexanderkjall they also had time to obfuscate their exploit.

@simonzerafa @alexanderkjall How do distros know that there is a vulnerability in the wild?

Today I have spent way too much time handling the https://copy.fail situation #copyfail

The persons who discovered it didn't notify the distribution security list, so no patched kernels was available for people to install when they released it.

But they did have time to write an exploit, and thought it was a good idea to distribute that on day one, before vendors had time to provide patches.

I'm not very impressed with xint.io, I guess it's the marketing department that runs the show.

@CyReVolt What's the point? You're not going to run this in an embedded environment with only 64K of SRAM available?

@PeterMotte This was just a silly computer joke. "GPT" can also mean "GUID Partition Table".

I don't understand the hate against GPT. I think it's a great technology, and definitely a step in the right direction. Of course there are those who will resist it, but we should all accept it's here to stay.

For example, having a backup copy of the partition table at the end of the disk greatly increases the chances of being able to recover from disk corruption at the first few sectors of the disk.

...chatbot? What chatbot?

Has anyone wondered why the CopyFail PoC is so heavily obfuscated?

That's a legit question. Isn't a PoC supposed to be clear so you know what you're trying to defend against?

CopyFail Was Not Disclosed to Distros : https://www.openwall.com/lists/oss-security/2026/04/30/10

#CopyFAil

#cats

@cas At this point the only reason why I still run Android is because I can degoogle most of it rather easily and because I can install other OSes such as pmOS on my phone without being reliant on someone discovering some tethered vuln in iBoot. (though yes, pmOS does run on iPhones :)

that's why I run android instead of iOS. Other than that I hate the thing now. Android now isn't the Android I remember being excited about using in 2012 :(

My main issue with postmarketOS isn't really the app selection (given it's also quite barebones on degoogled Android), but rather just the reliability of it all. I've daily driven pmOS on my phone at some point, and really mostly calls and audio were unreliable, enough for many people IRL to complain about me not answering calls. :P

@cas At this point the only reason why I still run Android is because I can degoogle most of it rather easily and because I can install other OSes such as pmOS on my phone without being reliant on someone discovering some tethered vuln in iBoot. (though yes, pmOS does run on iPhones :)

that's why I run android instead of iOS. Other than that I hate the thing now. Android now isn't the Android I remember being excited about using in 2012 :(

My main issue with postmarketOS isn't really the app selection (given it's also quite barebones on degoogled Android), but rather just the reliability of it all. I've daily driven pmOS on my phone at some point, and really mostly calls and audio were unreliable, enough for many people IRL to complain about me not answering calls. :P

@elly @domi @moses_izumi don't you get it? the fedi is the website? :p

Quickly dove into the copy.fail exploit.

1. Yes, it's real.
2. Current chain can write any arbitrary content to any user-readable file (into the page cache).
3. Current chain relies on an available target suid binary that you can open() as a lowpriv user.
4. Current exploit relies on that binary being /bin/su and then being able to execve(/bin/sh, 0, 0) (which doesn't work on alpine, etc.). The former is easily replaced in the code. The latter needs a rebuilt payload ELF (also easy).

important reminder about copy.fail:

https://xkcd.com/1200/

Seven new stable kernels for Thursday

https://lwn.net/Articles/1070641/ #LWN #Linux #kernel

Disclosure: in some cases, a Linux user can use doas to edit files in /etc/periodic/15min, allowing to execute code as root. I haven't reported this to cron because maintainer's e-mail address was so long I didn't want to type it.

lauren@hayasaka ~ $ doas python3 ./turbohack.py
lauren@hayasaka ~ $ tail -n2 /tmp/out.txt
[+] Executing: whoami
root

ios users; how old is your (main) phone (since release)?
don’t vote if your main phone isn’t an iphone and/or you don’t connect it to the internet

android users, how old is your (main) phone (since release)?
don’t vote if your main phone doesn’t run android and/or you don’t connect it to the internet

@cas and soon they'll work the same, making it just moot to use android over iOS :P

@cas I was kind of being sarcastic. I'm saying Android and iOS look the same now