Personal channel of @lancern
Topics: programming, hacking, memes, life, and more. Forward anything as you wish.
Join the discussion group for more fun.
Discord: https://discord.gg/RwUx9et7
Topics: programming, hacking, memes, life, and more. Forward anything as you wish.
Join the discussion group for more fun.
Discord: https://discord.gg/RwUx9et7
Intel 8080 emulator. 19th IOCCC. Best of Show https://nanochess.org/emulator.html
Show HN: File-based cache for slow Python functions https://docs.sweep.dev/blogs/file-cache
Compiling with Constraints https://www.philipzucker.com/compile_constraints/
Cranelift code generation comes to Rust https://lwn.net/SubscriberLink/964735/8b795f23495af1d4/
macOS Sonoma 14.4 might break Java on your machine https://appleinsider.com/articles/24/03/16/oracle-advises-users-delay-sonoma-update-due-to-java-issue
History of Uniform Random Number Generation
https://www.informs-sim.org/wsc17papers/includes/files/016.pdf
https://www.informs-sim.org/wsc17papers/includes/files/016.pdf
Optimize CSS with SAT Solving https://github.com/matthewhague/sat-css-tool
Show HN: Making a Compiler to Prove Tmux Is Turing Complete https://willhbr.net/2024/03/15/making-a-compiler-to-prove-tmux-is-turing-complete/
Great ideas in theoretical computer science https://www.cs251.com
The Montreal problem: Why programming languages need a style czar https://earthly.dev/blog/language-style-czar/
#今天又看了啥 #security
可怕!虚拟机里点了个链接,物理机居然被黑了!
InstantView from Source
利用了6个2023年的 CVE,组成了一套攻击链,让你在 VMware 虚拟机里的 Chrome 浏览器中点开一个链接,然后外面真实的物理计算机就中招了。
CVE-2023-3079,Chrome V8 JavaScript 引擎漏洞,执行恶意代码;
CVE-2023-21674,本地沙箱提权;
CVE-2023-29360,Windows 操作系统内核驱动程序漏洞,提权到虚拟机高权限;
CVE-2023-34044,获取虚拟机敏感信息;
CVE-2023-20869,利用虚拟机可以共享外面物理机的蓝牙设备,通过虚拟机和外部通信的通道,传递特别构造的数据出来,外部的虚拟机宿主进程处理的时候缓冲区溢出,执行恶意代码;
CVE-2023-36802,Windows 内核驱动程序漏洞,获取外部真实物理机至高权限
可怕!虚拟机里点了个链接,物理机居然被黑了!
InstantView from Source
利用了6个2023年的 CVE,组成了一套攻击链,让你在 VMware 虚拟机里的 Chrome 浏览器中点开一个链接,然后外面真实的物理计算机就中招了。
CVE-2023-3079,Chrome V8 JavaScript 引擎漏洞,执行恶意代码;
CVE-2023-21674,本地沙箱提权;
CVE-2023-29360,Windows 操作系统内核驱动程序漏洞,提权到虚拟机高权限;
CVE-2023-34044,获取虚拟机敏感信息;
CVE-2023-20869,利用虚拟机可以共享外面物理机的蓝牙设备,通过虚拟机和外部通信的通道,传递特别构造的数据出来,外部的虚拟机宿主进程处理的时候缓冲区溢出,执行恶意代码;
CVE-2023-36802,Windows 内核驱动程序漏洞,获取外部真实物理机至高权限
Bloomberg 开源的 P2996: Reflection for C++26 的实现