VirtualTam's bookmarks

1. The Deadlock Empire - Slay dragons, master concurrency! 2024-07-10

   tags: concurrency, concurrency/deadlock, concurrency/threading, memory, programming/c#

   [ permalink ]

   Each challenge is a computer program of two or more threads. You take the role of the Scheduler. Your objective is to exploit flaws in the programs to make them crash or otherwise malfunction.

2. Docker & UFW 2019-10-24

   tags: linux/container/docker, linux/iptables, network, security, ufw

   [ permalink ]

   • https://github.com/moby/moby#4737
   • https://github.com/docker/for-linux/issues/690
   • https://stackoverflow.com/questions/30383845/what-is-the-best-practice-of-docker-ufw-under-ubuntu
   • https://www.mkubaczyk.com/2017/09/05/force-docker-not-bypass-ufw-rules-ubuntu-16-04/
   • https://www.techrepublic.com/article/how-to-fix-the-docker-and-ufw-security-flaw/
   • https://www.linux.com/news/how-fix-docker-and-ufw-security-flaw/
   • https://svenv.nl/unixandlinux/dockerufw/
   • https://blog.viktorpetersson.com/2014/11/03/the-dangers-of-ufw-docker.html
   • https://news.ycombinator.com/item?id=27613217
3. Who was responsible for leaking the Meltdown/Spectre story beforehand, and thus breaking the co-ordinated patched release planned for 9th-Jan between various vendors? 2018-01-08

   tags: hack, hardware, hardware/cpu, intel, linux, memory, security

   [ permalink ]

   • https://cyber.wtf/2017/07/28/negative-result-reading-kernel-memory-from-user-mode/
   • https://cyber.wtf/2018/01/05/behind-the-scene-of-a-bug-collision/
   • https://lwn.net/Articles/738975/
   • https://lwn.net/Articles/741878/
   • https://lwn.net/Articles/741882/
   • https://twitter.com/misc0110/status/948706387491786752
   • https://www.theregister.co.uk/2018/01/02/intel_cpu_design_flaw/
4. Excuses cyber ^ sécurité 2015-02-16

   tags: cryptography, excuse, flaw, fun, joke, security

   [ permalink ]

   “Les mots de passe sont aléatoires, mais pas au sens cryptographique du terme. On prend des mots de passe auquel un attaquant ne penserait pas tout de suite.”

   Oué, comme :

   • admin / admin (Livebox bonjour !)
   • <service> / <service> ou <service>admin / <service>admin (intégrateur de choc bonjour !)