Remote

Bazed People

@bazed@chaos.social

mastodon 4.5.15

failed editor revolutions
torrent and garden seeds
drawterm our pubp9 <3
human hallucinations welcome

Logo/profile picture based on 'nice emojis' by Coco Ramírez. https://mothcharm.info/

0 Followers

0 Following

16 Posts

Joined December 22, 2024

DECT@38c3:

2937 (BZDP)

Website:

https://bazed.codeberg.page

Posts

Bazed People @bazed@chaos.social · May 01, 2026

Replying to @maris@chaos.social

@maris unsere? 😳

0

0

0

0

Bazed People @bazed@chaos.social · May 01, 2026

Tag der Arbeit und was machen alle? nicht arbeiten! danke, Merz 😡

14

4

8

0

Bazed People @bazed@chaos.social · Apr 30, 2026

Replying to @littlerao@chaos.social

@littlerao@chaos.social hmm this is very odd, it does work on our machine

1

1

0

0

Bazed People @bazed@chaos.social · Apr 30, 2026

Replying to @bazed@chaos.social

when this option is set you no longer need a password for using the sudo command and this means that an attacker can also use it without knowledge of your passwords! this is also why we deem the severity so high. gaining access to your system in the first place is not covered by the scope of our research but should be trivial. 🧵 5/4

7

0

1

0

Bazed People @bazed@chaos.social · Apr 30, 2026

Replying to @bazed@chaos.social

the way this works is really rather simple actually and we were able to find this thanks to the use of I (Intelligence). If you go and check in your sudoers file you may find something like "ALL = (ALL) NOPASSWD: ALL" but other variants of this exploit also exist. to be on the safe side you might want to just delete the whole file. 🧵 4/4

8

1

1

0

Bazed People @bazed@chaos.social · Apr 30, 2026

Replying to @bazed@chaos.social

currently kernel versions 6.x.x and 7.x.x have been tested and are affected! you should downgrade to a kernel below version 4 immediately just to be safe since we haven't confirmed it on there yet. this does not mean it is safe, just that all newer versions are not safe. the affected systems only require sudo to be installed in a specific config. it even works when no root password is set. to test if you are at risk you can run our test script: curl https://bazed.codeberg.page/sudo.fail | bash 🧵 3/4

6

5

1

0

Bazed People @bazed@chaos.social · Apr 30, 2026

Replying to @bazed@chaos.social

during the testing we also decided to patch some things and update our system. normally this requires the user to have privileges but in this case the person doing the upgrades did not have access to the root password of the relevant server. nevertheless they mindlessly attempted to run updates, and it worked!! the software was now newer than it was earlier. we have been able to confirm this method to be reliable and repeatable on a multitude of systems, all of which are linux based. 🧵 2/4

6

6

1

0

Bazed People @bazed@chaos.social · Apr 30, 2026

ok guys this is a big one. while testing our infra for the copy fail thing we happened upon another even more severe vulnerability. there is no CVE yet but we expect this to land in the 9.8+ range. it is also a privilege escalation but does not require any python or an internet connection to abuse. why this matters and what you can do to secure your system
🧵 1/4
#CVE_2026_31431
#copyfail
#sudo
#linux

chaos.social

15

7

9

0

Bazed People @bazed@chaos.social · Apr 29, 2026

Replying to @bri7@social.treehouse.systems

@bri7@social.treehouse.systems we are up to date on our vaccinations

0

0

0

0

Bazed People @bazed@chaos.social · Apr 29, 2026

Replying to @agowa338@chaos.social

@agowa338@chaos.social wdym? you can just pay the invoice and then it's fine. I don't get what your problem is

2

0

0

0

Bazed People @bazed@chaos.social · Apr 29, 2026

Replying to @MiaWinter@tech.lgbt

@MiaWinter@tech.lgbt nice try but our fax machine is technisch verschlüsselt (we lock the door to our printing room)

1

1

0

0

Bazed People @bazed@chaos.social · Apr 29, 2026

Replying to @4censord@unfug.social

@4censord@unfug.social oh that's what those weird pictures are called. We thought they were just low resolution logos

1

0

0

0

Bazed People @bazed@chaos.social · Apr 29, 2026

the German government switching away from fax machines was a mistake. try phisching with those. ha, jokes on you! I can't click the link on a piece of paper (we tried)

15

9

6

0

Bazed People @bazed@chaos.social · Apr 01, 2026

✨ We are always looking for partners who have your best interest at heart, and today we are proud to announce our latest partnership with OpenAI

We believe this partnership will be mutually beneficial, as in exchange for access to our followers' data, OpenAI has pledged to change their logo in support of the LGBTQQIAAP+ community

Today marks the beginning of a new era for bazed, and we are extremely thankful for your support ❤️

24

2

12

0

Bazed People @bazed@chaos.social · Mar 29, 2026

Little known fact: train travel in Germany is completely free! With every free trip, the passenger must also purchase a voucher worth 20€. This voucher can be redeemed for a single journey from your source to destination.

26

2

16

0

Bazed People @bazed@chaos.social · Mar 08, 2026

reading literature of my favourite mathematician and author Theodore Kaczynski rn, I bet he was really cute 🫦
#math

chaos.social

9

0

6

0

Remote instance

chaos.social

Open on original server

Media