ulveon.net (on derg.social)

It seems there is another massive Linux local privilege escalation vulnerability: https://github.com/V4bel/dirtyfrag/blob/master/assets/write-up.md

Around December 2025, I posted a piece on why I think software being open source is necessary but not sufficient for them to be declared secure and trustworthy: https://ulveon.net/p/2025-12-03-the-secure-open-source-fallacy/

I certainly didn't expect the idea behind my article to materialise in devastating Linux privilege escalation vulnerabilities, not just once, but twice, in the span of a few weeks.

We will continue seeing more and more of this. This doesn't mean that open source software is unsafe or that Linux is worse than proprietary operating systems. But it does mean that those development teams that refuse to adopt AI into their development processes will be severely disadvantaged.

RE: @0xabad1dea@infosec.exchange

Age verification is coming to the US too.

But please keep talking about how the US has free speech or whatever.

https://reclaimthenet.org/us-bill-mandates-on-device-age-verification

Me when I use Signal to feel like a secret agent despite never having done a single threat model.

https://www.ietf.org/archive/id/draft-thain-ipv8-00.html

🙃

As a matter of fact, why are anti-AI people often very quick to deploy their stupid "ebooks" bots trained on their own posts?

RE: https://derg.social/notes/al3j4195qe

Harassment wins. Always.

Don't pretend to be anti-harassment when you also harass others.

Even if they deserve it.

I'm sure someone told you they are absolutely horrible people.

I'm sure you're confident. Maybe you even saw it with your own eyes.

Evil people, right? They're evil.

RE: https://thegayagenda.fans/notes/aivnrip3dhbc0f0k

Since I was a teenager, I have tended to interact with adults more often than people my age or younger. I found people my age generally emotionally unstable and intellectually unstimulating. I thought, as I grow up, surely, people my age would become a moving target, and they'd be older and wiser. But actually, that has somehow not been the case?

That's not to say there are no stupid adults, of course there are.

But as I grow up and mature emotionally and intellectually, I continue to find people my age who haven't done the same introspective work and exhibit immaturity and instability. And this pisses me off. On one hand, I have spent countless hours to introspection and philosophy while people my age just went to parties, did drugs and alcohol. On the other, these people have been able to vote in democracies for several decades now, and their stupidity is hampering political progress because they refuse to take responsibility for their own education and introspection.

I am not entitled to anyone's time, much less demand they spend time doing what I think they should do.

But over and over, as I try to give everyone an opportunity, I just experience the same behaviour from people my age and younger. It is kind of exhausting.

Something funny I've noticed is that, frequently the most trustworthy projects I've encountered approach trust with things like "Why trust us? You shouldn't trust us, the code is fully open source, there are test suites, and all builds are reproducible, so you should check for yourself"

Meanwhile many of the projects that go "trust me, bro", end up ran by the most evil and unserious people imaginable.

I think there's a lot about ego and being selfless with regards to trusting others.

Open source TikTok alternatives be like: "yeah we made the automatic mental illness machine but at least you can read the code now"

Here's your regular reminder that Anubis is insecure and easily bypassable.

I don't really care whether https://kernel.org and other large projects use Anubis, it is an incredibly sloppy security solution.

See: https://addons.mozilla.org/en-US/firefox/addon/anubypass

https://chromewebstore.google.com/detail/anubypass/lgldgmdbmpbcehbmphededeblmgkoeim

"You're mad that Anubis is famous and you're not!"

Donald Trump won the US election. And "leave" option also won in Brexit. Do not forget that.

Yeah ok that's fair. XScreensaver really is art.

RE: @jwz@mastodon.social

Remember those headlines around late March regarding RAM prices "CRASHING!!!!"?

I remember. I said back then RAM prices were not crashing any time soon.

People called me clueless. After all, OpenAI just pulled out of a massive datacenter investment, and they also cancelled Sora.

How dare I question the headlines?

Yeah, well.

Some thoughts around "AI deleted my database" from an SRE perspective.

https://ulveon.net/p/2026-05-05-why-did-ai-destroy-my-production-database/

In the face of relentless attacks against the free press and democratic values from the President of the United States, the EU remains a bastion of democracy. Being anti-EU is being pro-authoritarianism, there is no other possible interpretation.

When did the furry community stop being an open, inclusive place to help each other and lift each other up, and started being about cults of personality, rampant harassment, and a place where learning and discovery is absolutely forbidden?

You must say nothing, you must think nothing.

I'm not old enough to remember but other older furries tell me it's gotten worse. But has it, really?