Little known fact: train travel in Germany is completely free! With every free trip, the passenger must also purchase a voucher worth 20€. This voucher can be redeemed for a single journey from your source to destination.
Remote
Bazed People
@bazed@chaos.social
mastodon 4.6.9failed editor revolutions
torrent and garden seeds
drawterm our pubp9 <3
human hallucinations welcome
Logo/profile picture based on 'nice emojis' by Coco Ramírez. https://mothcharm.info/
0 Followers
0 Following
16 Posts
Joined December 22, 2024
DECT@38c3:
2937 (BZDP)
Website:
✨ We are always looking for partners who have your best interest at heart, and today we are proud to announce our latest partnership with OpenAI
We believe this partnership will be mutually beneficial, as in exchange for access to our followers' data, OpenAI has pledged to change their logo in support of the LGBTQQIAAP+ community 
Today marks the beginning of a new era for bazed, and we are extremely thankful for your support ❤️
the German government switching away from fax machines was a mistake. try phisching with those. ha, jokes on you! I can't click the link on a piece of paper (we tried)
Tag der Arbeit und was machen alle? nicht arbeiten! danke, Merz 😡
Replying to
the way this works is really rather simple actually and we were able to find this thanks to the use of I (Intelligence). If you go and check in your sudoers file you may find something like "ALL = (ALL) NOPASSWD: ALL" but other variants of this exploit also exist. to be on the safe side you might want to just delete the whole file. 🧵 4/4
Replying to
when this option is set you no longer need a password for using the sudo command and this means that an attacker can also use it without knowledge of your passwords! this is also why we deem the severity so high. gaining access to your system in the first place is not covered by the scope of our research but should be trivial. 🧵 5/4
Replying to
during the testing we also decided to patch some things and update our system. normally this requires the user to have privileges but in this case the person doing the upgrades did not have access to the root password of the relevant server. nevertheless they mindlessly attempted to run updates, and it worked!! the software was now newer than it was earlier. we have been able to confirm this method to be reliable and repeatable on a multitude of systems, all of which are linux based.
🧵 2/4
Replying to
currently kernel versions 6.x.x and 7.x.x have been tested and are affected! you should downgrade to a kernel below version 4 immediately just to be safe since we haven't confirmed it on there yet. this does not mean it is safe, just that all newer versions are not safe.
the affected systems only require sudo to be installed in a specific config. it even works when no root password is set. to test if you are at risk you can run our test script:
curl https://bazed.codeberg.page/sudo.fail | bash
🧵 3/4
reading literature of my favourite mathematician and author Theodore Kaczynski rn, I bet he was really cute 🫦
#math
Replying to
@agowa338@chaos.social wdym? you can just pay the invoice and then it's fine. I don't get what your problem is
Replying to
@MiaWinter@tech.lgbt nice try but our fax machine is technisch verschlüsselt (we lock the door to our printing room)
Replying to
@4censord@unfug.social oh that's what those weird pictures are called. We thought they were just low resolution logos