mastodon
4.6.5
Freedom lover; into Freedom of Speech and Fun life. A Python & Rust programmer who enjoys Linux & BSDs. Youtuber with lots of free content including a complete LPIC1 course.
Another Universal Local Privilege Escalation lets any user on most GNU/Linux distros gain root access in seconds! This time its called Dirty Frag.
More info here: https://github.com/V4bel/dirtyfrag
and I made a video explaining the concept here: https://www.youtube.com/watch?v=Ve6qE-i2hhc
I spent the last couple of days examining the source code and understanding the Copy.Fail vulnerability in detail. This vulnerability happens on the shoulders of 4 key components:
- Page cache
- AF_ALG
- algif_aead
- splice()
In this video, I talk about these components and demonstrate how the CVE-2026-31431 vulnerability allows attackers to gain root access by modifying the “su” entry in the page cache.
I made a short trying to explain VPNs in a more "under the hood" way.
Instead of the usual "it hides your IP" explanation, I focused on what’s actually happening to packets. Things like encapsulation, routing changes, and where your traffic really goes when you turn a VPN on.
Also touched on what VPNs don’t do, which is something I feel gets misunderstood a lot.
Iranian users (and others) need your help to bypass censorship using #TOR snowflakes.
For servers (without NAT):
```
sudo apt install snowflake-proxy
sudo systemctl enable snowflake-proxy —now
```
For home users (Behind NAT):
Use *Firefox* and go to:
https://embed-snowflake.torproject.org
Enable it and keep the page open.