Public
- Public
- Network
- Groups
- Featured
- Popular
- People

Conversation

Notices

Embed this notice
Xe :verified: (cadey@pony.social)'s status on Friday, 15-May-2026 12:07:40 JST Xe :verified:

Fucking christ not again: https://github.com/0xdeadbeefnetwork/ssh-keysign-pwn/
In conversation about a month ago from pony.social permalink
Attachments
1. Domain not in remote thumbnail source whitelist: opengraph.githubassets.com
  
  GitHub - 0xdeadbeefnetwork/ssh-keysign-pwn: Steal SSH host private keys and /etc/shadow via the ptrace_may_access mm-NULL bypass + pidfd_getfd. Pre-31e62c2ebbfd kernels.
  
  Steal SSH host private keys and /etc/shadow via the ptrace_may_access mm-NULL bypass + pidfd_getfd. Pre-31e62c2ebbfd kernels. - 0xdeadbeefnetwork/ssh-keysign-pwn
- Soatok Dreamseeker repeated this.
- Embed this notice
  noodle (noodle@aus.social)'s status on Friday, 15-May-2026 12:07:39 JST noodle
  in reply to
  
  @cadey :thinkingwat:
  "Reported by Qualys, fixed by Linus 2026-05-14. Jann Horn flagged the FD-theft shape in October 2020. Six years"
  
  In conversation about a month ago permalink
- Embed this notice
  iced depresso (icedquinn@blob.cat)'s status on Friday, 15-May-2026 14:26:52 JST iced depresso
  in reply to
  
  @cadey apparently we gotta formally verify more shit
  
  In conversation about a month ago permalink

Feeds