Security Circus Thread - Post your security news here

bwrap, and thus flatpak escape.

Not that you should be running malicious flatpaks :slight_smile:

1 Like
1 Like
3 Likes

Omarchy: Any User Process Can Escalate to Root

A security issue in Omarchy’s default Docker configuration meant that essentially every program running in the user’s desktop session could escalate to root without a password, sudo, or a privilege prompt.

If you use Omarchy, the most important takeaway is simple: update to 4.0.1.

4 Likes

It’s a rather strange distribution. Some claim it’s riddled with bugs and a ton of work done by AI. The author is well-known and had his own large project in the past. Furthermore, in recent months, the distribution has suddenly gained significant media coverage, almost as if someone was trying to boost its popularity. They’ve also received a good few million supporters.

Of course, beginnings are always difficult and there are tons of bugs, but I’m worried something is fishy… time will tell.

1 Like

Sadly, I’m not surprised when I was checking out the distro because it keeps showing up on my feed and I was wondering what it was, and when I opened, the GitHub page and website , and looked at what they have preinstalled and there configurations. It’s not great and for distribution is meant for beginners supposedly, it’s very bloated and has a lot of stuff I wouldn’t include by default or at least make it opt in

1 Like

Google downgraded the security features in the Pixel 11 compared to previous generations. My tinfoil hat say either they wanna rid themselves of GOS before the intelligence services get angry they can’t hack the phones or there was already a order from the government.

4 Likes
1 Like
2 Likes
1 Like
1 Like

Not sure who doesn’t hide their email behind VPN in the enterprise world, but in case you aren’t for whatever reason.

2 Likes

A humorous if not concerning updated summary of the accidental OpenAI hack of HuggingFace.

1 Like

Yet another reason to hate ID verification systems.

4 Likes

https://www.darkreading.com/application-security/microsoft-emergency-fixes-patch-tuesday

Worth 40 minutes of your time

1 Like