Quickly dove into the copy.fail exploit.

1. Yes, it's real.
2. Current chain can write any arbitrary content to any user-readable file (into the page cache).
3. Current chain relies on an available target suid binary that you can open() as a lowpriv user.
4. Current exploit relies on that binary being /bin/su and then being able to execve(/bin/sh, 0, 0) (which doesn't work on alpine, etc.). The former is easily replaced in the code. The latter needs a rebuilt payload ELF (also easy).

Want to make your system immune to copyfail (CVE-2026-31431) but compiled your kernel with CONFIG_CRYPTO_USER_API_AEAD=y so you can’t disable the module and don’t want to reboot? Use BPF-LSM to block AF_ALG sockets from being created!

/* SPDX-License-Identifier: GPL-2.0-or-later OR MIT */

#include <linux/bpf.h>
#include <bpf/bpf_helpers.h>
#include <bpf/bpf_tracing.h>

#define EPERM 1
#define AF_ALG 38

char LICENSE[] SEC("license") = "Dual MIT/GPL";

SEC("lsm/socket_create")
int BPF_PROG(socket_create_block_af_alg, int family, int type, int protocol, int kern, int ret)
{
  if (ret) return ret;          /* don't override a previous denial */
  if (family == AF_ALG) return -EPERM;
  return 0;
}

Compile with clang -Wall -Wextra -Wno-unused-parameter -g -O2 -target bpf -c -o nocopyfail.o nocopyfail.c and load with bpftool prog load nocopyfail.o /sys/fs/bpf/nocopyfail autoattach (as root).

I’m not saying I need new electronics but who wouldn’t want a I apologize but I cannot complete this task it requires using trademarked brand names which goes against OpenAI use policy. Is there anything else I can assist you with-16” 32GB RAM

In light of recent events, I just want to put out a PSA

You are seen
You are loved
You are valuable

I’m kind of terrible with words, but I like being here for people. If you ever feel alone, please reach out. I promise there are people who see you and care.

Ed Balls

good night

Yay okay so its finally time!
I'm announcing Jester Linux, my own distro based on NixOS for work and gaming, no Nix knowledge required!
https://jesterlinux.org/blog/hello-world/

my wife just reminded me of a very funny story. I ordered a bench PSU from one of the big electronics suppliers and when the box arrived only the power cable was in there, no bench PSU. so I called them up, the warehouse guy was able to confirm the shipping weight was way off, and we ended up chatting about funny shipping errors. one of their newbies had once gone to a shelf, it was empty, so assumed the shelf itself was the item and shipped it out. but that wasn't the funniest one.

Everyone in the world has to take a private vote by pressing a red or blue button. If more than 50% of people press the blue button, everyone survives. If less than 50% of people press the blue button, only people who pressed the red button survive. Which button would you press?

(original post: https://xcancel.com/waitbutwhy/status/2047710215265730755)

i think i should be allowed to have estrogen without a prescription. they should sell it like ibuprofen

I discovered that there's an ewaste bin near my school.

Who throws away a working pair of headphones, a working CD player, a working portable USB-C vacuum cleaner, and a seemingly unopened USB-A to B cable with the price tag still on it?

reminder: there is no limit in the IRC emoji reactions specification for how long an emoji react can be... so the first 4kb of the bee movie is a legal emoji reaction!

my server now has 8TB of storage

it’s btrfs RAID-1 on two second-hand Seagate Enterprise Capacity (ST8000NM0045-1RL112) drives that are over 6 years old so I’m not sure how long they will last

also they’ve got 4k logical sector sizes so I don’t think SeaBIOS will be able to boot from them (but I don’t need that anyway)

Hey @frameworkcomputer! If I publish my dotfiles and write an installer for them, will you send me free(?) hardware to test on too?

RE: https://shrimple.aagaming.me/notes/alcnu72jj8

How the modem dial-up sound was actually created

#enough #negative #tech #and #news #timeFor #eyebleach

@slatian I published that eBPF program you were interested in: https://codeberg.org/noisytoot/bindrestrict

It's still very incomplete, but it does work. The README describes the state it's currently in.

Today I learned a spell to TOAST A BAGEL. It is supposed to be a spell to REFORGE A RING but it does not check the ring’s MATERIAL, and if you cancel about a second into casting the bagel will NOT be DESTROYED.

#wizardposting #wizard

I think my laptop might need new thermal paste. It always ran quite hot but it seems to be even hotter lately

Hi @catsalad I heard you like cats so here's one I saw today