@d_olex@mastodon.social

Dmytro Oleksiuk @d_olex@mastodon.social · Jul 30, 2026

Slop-coded SPARC64 exploit for Solaris kernel vuln that recently been fixed in Illumos by Dan McDonald: https://www.illumos.org/issues/18118 https://github.com/illumos/illumos-gate/commit/08292a06bdfa570d21571965b7bd0f053b3aaaa5 No KASLR, no kernel heap NX -- ain't difficult target, heh. I don't have an access to latest 11.4 SRU to check if it was fixed by Oracle on current version, but on 11.3 SRU 36 it still there

3

0

3

0

Dmytro Oleksiuk @d_olex@mastodon.social · Jul 16, 2026

RE: @d_olex@mastodon.social

This conversation reminds me an old urban legend
***
A cell tower was built in a small village.
A month later, the locals sent a formal complaint to the carrier, claiming they were getting headaches, feeling sick, and suffering from all sorts of other problems.
The carrier's response:
"That's nothing. Just imagine what'll happen once we actually turn it on!"

0

Dmytro Oleksiuk @d_olex@mastodon.social · Jul 16, 2026

Replying to @siguza@infosec.space

@siguza@infosec.space I don't share this unfounded pessimism, worst software projects that I ever seen been written by humans, not AI

0

1

0

Dmytro Oleksiuk @d_olex@mastodon.social · Jul 16, 2026

👏 👏 👏 😊 https://lore.kernel.org/linux-media/CAHk-=wi4zC+Ze8e+p3tMv8TtG_80KzsZ1syL9anBtmEh5Z40vg@mail.gmail.com/

2

3

0

Dmytro Oleksiuk @d_olex@mastodon.social · Jul 12, 2026

RE: https://mastodon.social/@d_olex/116902388645366483 Many people have drawn entirely wrong conclusions from this post. Meanwhile, an actual solution for preventing this kind of tracking lays in a different ballpark: 1) Get a burner laptop for your hacktivism or organized crime activities, never use it for anything else; 2) Get some dedicated hardware to run your VPN or Tor client, for example -- a portable battery powered router with OpenWrt; 3) Configure and use this setup in a way that prevents the laptop from accessing the internet directly;

Quoting

Dmytro Oleksiuk @d_olex@mastodon.social

@earthshine@masto.hackers.town 1) GDID tracking doesn't depend on a Microsoft online account; it works with standard local accounts as well; 2) This feature isn't exclusive to Windows. For instance, Linux has an /etc/machine-id file, which Chrome (and many other programs) logs to its servers; 3) There's no easy solution for this problem: as long as you're using any proprietary software with its own auto-update mechanism, you'll always be tracked;

Open quoted post

5

1

7

0

Dmytro Oleksiuk @d_olex@mastodon.social · Jul 11, 2026

Replying to @Drums_in_the_night@ieji.de

@Drums_in_the_night@ieji.de @earthshine@masto.hackers.town /etc/machine-id is not the root cause — it’s just illustrative example. Does your machine randomizes its hardware IDs and serial numbers every reboot? They’re also telemetry sources that gets logged

4

0

Dmytro Oleksiuk @d_olex@mastodon.social · Jul 11, 2026

Replying to @earthshine@masto.hackers.town

@earthshine@masto.hackers.town 1) GDID tracking doesn't depend on a Microsoft online account; it works with standard local accounts as well; 2) This feature isn't exclusive to Windows. For instance, Linux has an /etc/machine-id file, which Chrome (and many other programs) logs to its servers; 3) There's no easy solution for this problem: as long as you're using any proprietary software with its own auto-update mechanism, you'll always be tracked;

22

12

9

1

Dmytro Oleksiuk @d_olex@mastodon.social · Apr 24, 2026

Replying to @virtualabs@mamot.fr

@virtualabs@mamot.fr About 30-40 minutes, I also submitted my feedback on the website

1

0

Dmytro Oleksiuk @d_olex@mastodon.social · Apr 24, 2026

Replying to @virtualabs@mamot.fr

@virtualabs@mamot.fr Fun but too easy: AI bot spent on this task about the same amount of time as it usually spends on easy/medium level HTB boxes

0

2

0