From xz to ibus: more questionable tarballs(openwall.com)

159 points by nateb2022 2 years ago | 123 comments

Rsync vulnerabilities(openwall.com)

100 points by pavodive 1 year ago | 14 comments

Atop 2.11 heap problems(openwall.com)

157 points by baggy_trough 1 year ago | 70 comments

For Linux kernel vulnerabilities, there is no heads-up to distributions(openwall.com)

565 points by ori_b 5 months ago | 477 comments

An oss-security mailing list reply from Gentoo's Sam James on CVE-2026-31431 (CopyFail), a Linux local privilege escalation, and the lack of advance notice to distributions.

CVE-2024-6409: OpenSSH: Possible remote code execution in privsep child(openwall.com)

119 points by andreyv 2 years ago | 38 comments

Musl 1.2.4 adds TCP DNS fallback(openwall.com)

223 points by goranmoomin 3 years ago | 112 comments

Io_uring, kTLS and Rust for zero syscall HTTPS server(blog.habets.se)

444 points by guntars 1 year ago | 138 comments

Blog post describing building an HTTPS web server in Rust using io_uring and kernel TLS to avoid system calls on the request path.

Hardware backdoors in some x86 CPUs(github.com)

351 points by epestr 2 months ago | 95 comments

GitHub repository for Project Rosenbridge by xoreaxeaxeax, documenting and demonstrating a hardware backdoor found in some x86 CPUs.

How SSH port became 22(ssh.com)

358 points by sysoleg 2 years ago | 140 comments

SSH Academy page from ssh.com explaining SSH ports and the story of how SSH was assigned port 22.

SSH over HTTPS(trofi.github.io)

373 points by jandeboevrie 2 years ago | 124 comments

A blog post showing how to tunnel SSH through HTTPS using an ssh ProxyCommand with socat and Apache's mod_proxy_connect.

A Practical Guide to SSH Tunnels: Local and Remote Port Forwarding(labs.iximiuz.com)

376 points by signa11 4 months ago | 77 comments

A tutorial by Ivan Velichko on iximiuz Labs explaining SSH local and remote port forwarding, the sshd settings involved, and how to remember the flags.

SSH3: Faster and rich secure shell using HTTP/3(github.com)

495 points by tempaccount420 1 year ago | 248 comments

GitHub repository for SSH3, a secure shell implementation built on HTTP/3, with an accompanying arXiv paper and IETF Internet-Draft.