@paulos@infosec.exchange

@paulos@infosec.exchange · Aug 03, 2026

This is ... not ideal. https://grapheneos.social/@GrapheneOS/116915979564795550

Quoting

GrapheneOS @GrapheneOS@grapheneos.social

Google recently informed OEMs of greatly reduced security support for older releases of Android. For the vast majority of discovered vulnerabilities, only Critical severity issues deemed to be an imminent risk will be backported at all and only to the most recent 2 major yearly releases (16 and 17).

Open quoted post

0

Pavel Valach

@paulos@infosec.exchange · Jul 29, 2026

Replying to @pfhllnts@mstdn.io

@pfhllnts@mstdn.io oh wow and they replaced that? Good on them! Just recently I had to have a Lenovo motherboard replaced. Extended service paid off; the board died a few weeks after the regular 3yrs, right after I booted Windows... 🤣

0

Pavel Valach

@paulos@infosec.exchange · Jul 29, 2026

Replying to @paulos@infosec.exchange

As for how I like OpenSnitch... well, let's just say it's a beautiful way of seeing just how many telemetry domains there are, and how regular apps make requests you would have not expected (legitimate requests for the most part) ;) For example, various KDE apps querying www.ecb.europa.eu to get exchange rates.

0

Pavel Valach

@paulos@infosec.exchange · Jul 29, 2026

Replying to @paulos@infosec.exchange

As for how I like OpenSnitch... well, let's just say it's a beautiful way of seeing just how many telemetry domains there are, and how regular apps make requests you would have not expected (legitimate requests for the most part) ;)

0

Pavel Valach

@paulos@infosec.exchange · Jul 29, 2026

There is a peculiar behavior I am seeing with OpenSnitch and Electron apps that I do not yet understand fully; maybe someone noticed it and analyzed it? (OpenSnitch is a firewall with an UI for Linux that can also control traffic for specific apps, domains and ports. By default it uses eBPF to do that. It's this one: https://github.com/evilsocket/opensnitch) With the Electron apps, I am seeing that some apps ask for connection to domains I would have never expected, e.g. files.slack.com in Mattermost or even Todoist. I use Slack, too, and most of Electron apps I run in Flatpak. I have no idea if these domains are somehow needed for some functionality, or if I have just discovered a bug in OpenSnitch.

GitHub

GitHub - evilsocket/opensnitch: OpenSnitch is a GNU/Linux interactive application firewall inspired

OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch. - evilsocket/opensnitch

0

2

0

Pavel Valach

@paulos@infosec.exchange · Jul 28, 2026

Safe Mode u Mikrotiku funguje velmi dobře. :-D

0

Pavel Valach

@paulos@infosec.exchange · Jul 24, 2026

Framework announced some absolutely bonkers pricing updates about the RAMs (LPCAMM2s to be exact), changing pre-orders of laptops and mainboards because they do not have enough RAM modules on hand with the old pricing. Thankfully I was just moved to a lower capacity with the old memory price still honored, so I do not have to pay more, but holy sh*t... Let me just say, THIS is crazy. (22090 Kč = 913.94 EUR for 32GB). And just to be clear, this is only about the LPCAMMs, which are still not used very widely, but they are also really scarce on the market right now - after Crucial dropped out of the consumer market.

0

Pavel Valach

@paulos@infosec.exchange · Jul 20, 2026

Replying to @paulos@infosec.exchange

I might have just given myself an idea to check what happens exactly with the packets... because I know for a fact that after I shutdown the LTE interface and then bring it back up, my computer does not receive the IPv6 packets anymore.

0

Pavel Valach

@paulos@infosec.exchange · Jul 20, 2026

I've encountered an interesting IPv6 bug on Mikrotik hAP ax lite LTE6. Whenever I restart the LTE interface, IPv6 packets from the LTE interface stop reaching my computer on LAN interfaces (over a bridge). Happens on both 7.21.5 (long-term) and 7.23.2 (stable), and the only remedy I have found so far is to reboot the router. I have reported it to support, let's see what happens...

0

1

0

Pavel Valach

Posts

GitHub - evilsocket/opensnitch: OpenSnitch is a GNU/Linux interactive application firewall inspired

Remote instance

Media