GNU social JP
  • FAQ
  • Login
GNU social JPは日本のGNU socialサーバーです。
Usage/ToS/admin/test/Pleroma FE

  • Public

    • Public
    • Network
    • Groups
    • Featured
    • Popular
    • People

Embed Notice

HTML Code

Corresponding Notice

  1. Embed this notice
    Filippo Valsorda :go: (filippo@abyssdomain.expert)'s status on Sunday, 31-Mar-2024 05:44:58 JSTFilippo Valsorda :go:Filippo Valsorda :go:

    I'm watching some folks reverse engineer the xz backdoor, sharing some *preliminary* analysis with permission.

    The hooked RSA_public_decrypt verifies a signature on the server's host key by a fixed Ed448 key, and then passes a payload to system().

    It's RCE, not auth bypass, and gated/unreplayable.

    More details in this thread: https://bsky.app/profile/did:plc:x2nsupeeo52oznrmplwapppl/post/3kowjkx2njy2b

    In conversationabout 8 months ago from abyssdomain.expertpermalink

    Attachments

    1. No result found on File_thumbnail lookup.
      Filippo Valsorda (@filippo.abyssdomain.expert)
      I'm watching some folks reverse engineer the xz backdoor, sharing some *preliminary* analysis with permission. The hooked RSA_public_decrypt verifies a signature on the server's host key by a fixed Ed448 key, and then passes a payload to system(). It's RCE, not auth bypass, and gated/unreplayable. [contains quote post or other embedded content]
  • Help
  • About
  • FAQ
  • TOS
  • Privacy
  • Source
  • Version
  • Contact

GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.

Creative Commons Attribution 3.0 All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.