-
My apologies if I'm just missing it, but it seems like this page lacks info on CPU vulnerabilities and the existence and effectiveness of mitigations of these in the latest mainline kernel: https://gi…
ell1e updated
1 month ago
-
Thanks to the spanification activated by default from 128, this possible security error came to light:
```
../../third_party/blink/renderer/platform/image-decoders/jxl/jxl_image_decoder.cc(52,17):…
-
### SY0-701 Themenbereiche
- Allgemeine Sicherheitskonzepte / General Security Concepts: 12%
- Bedrohungen, Schwachstellen und Gegenmaßnahmen / Threats, Vulnerabilities, and Mitigations: 22%
- Sich…
-
I use GCE ingresses via hosted GKE (not running my own ingress-gce).
We have a large-ish cluster with GKE subsetting and a lot of internal network pass-through load balancers.
We wanted to move …
-
Might want to take a look at this:
https://www.ru.nl/publish/pages/909282/draft-paper.pdf
Most relevant bits are those related to the models that populate EMPTY passwords for the master record:
…
ghost updated
5 years ago
-
We should spell out the fact that the `unsigned` field of PDUs received over S2S should be stripped of everything except an explicitly allowed set of keys, to prevent issues as described in https://gi…
-
```
The Request package through 2.88.2 for Node.js allows a bypass of SSRF mitigations via an attacker-controller server that does a cross-protocol redirect (HTTP to HTTPS, or HTTPS to HTTP). NOTE: T…
-
- drain/undrain entire cluster
- drain one service in one cluster
- method for setting qps per cluster, spilling?
- fast-rollback
- add capacity to service in cluster (set limits?)
some in…
-
Right now specifying `-Ccontrol-flow-guard` and targetting a non-msvc platform will silently ignore the `-Ccontrol-flow-guard` option. Given the purpose of the flag and the audience Rust targets, I th…
-
this is my first time writing driver
I found the virtual serial port from [https://docs.microsoft.com/en-us/samples/microsoft/windows-driver-samples/virtual-serial-driver-sample/](url) and I tried to…