Forgot your password?
typodupeerror

Submission + - Trump condemns 'sick conspiracy' against AI (bbc.co.uk)

mrspoonsi writes: US President Donald Trump posted:

"The only control or 'guardrails' that AI needs is a STRONG AND SMART (High IQ!) PRESIDENT, and the U.S.A. has that, in spades!

"The Trump Administration has stopped AI 'people' from doing bad, or potentially bad, 'things,' like Dario (Anthropic!), who is now pretending to be a 'perfect little angel' — and we will continue to do so!

"We already have tremendous CRIMINAL and REGULATORY power over these companies!

"There is a SICK conspiracy going on against AI and Data Centers, and the only one that is happy about it is China.

"WHOEVER WINS AI, WINS!

"We are leading China, and all others, and will continue to do so. Conspiracy Theorists, Treasonists, Traitors, and Leakers, BEWARE!

"Thank you for your attention to this matter!"

Comment Re:'Pharma Bro' Martin Shkreli modus operandi (Score 1) 56

They are like Oracle, take something very good like Sun Microsystems (Solaris, Java), as far as locking into worse contracts after acquisition: "Java SE Universal Subscription (2023): Oracle changed its pricing metric. Instead of charging per user or per processor, organizations now pay based on their total employee count. This means you must pay for every employee in the company, even if only a few use Oracle Java"

Submission + - And another Linux vunerablity, SSH private keys. (github.com)

mrspoonsi writes: Steal SSH host private keys and /etc/shadow via the ptrace_may_access mm-NULL bypass + pidfd_getfd. Pre-31e62c2ebbfd kernels.

__ptrace_may_access() skips the dumpable check when task->mm == NULL. do_exit() runs exit_mm() before exit_files() — no mm, fds still there. pidfd_getfd(2) succeeds in that window when the caller's uid matches the target's.

Reported by Qualys, fixed by Linus 2026-05-14. Jann Horn flagged the FD-theft shape in October 2020.

Submission + - Joining Copy Fail, say hello to Dirty Frag (github.com)

mrspoonsi writes: Dirty Frag vulnerability class, first discovered and reported by Hyunwoo Kim (@v4bel), which can obtain root privileges on major Linux distributions by chaining the xfrm-ESP Page-Cache Write vulnerability and the RxRPC Page-Cache Write vulnerability.

Dirty Frag is a case that extends the bug class to which Dirty Pipe and Copy Fail belong. Because it is a deterministic logic bug that does not depend on a timing window, no race condition is required, the kernel does not panic when the exploit fails, and the success rate is very high.

Because the embargo has currently been broken, no patch or CVE exists

Slashdot Top Deals

"We don't care. We don't have to. We're the Phone Company."

Working...