TimHolus blog - The gibberish of a madman

4 Likes

They need the ratcheted neck, should they square up [+5min penalty for fighting?]
giphy-393307095

4 Likes

So apparently the --host option in sudo has been broken since 2013. You could just trick it into accepting remote rules on the local system and get root. No exploit needed.

And nobody noticed. For 12 years.

Open source security at its finest: “If enough people look at the code, bugs will be found”

https://www.stratascale.com/vulnerability-alert-CVE-2025-32462-sudo-host

3 Likes

4 Likes

That is a great end table!

1 Like

4 Likes

Was not expecting to see good doggo!

Thanks for the smile!