Timeline of the xz open source attack(research.swtch.com)

967 points by todsacerdoti 2 years ago | 431 comments

Russ Cox's blog post giving a detailed timeline of the social engineering behind the xz/liblzma backdoor attack by "Jia Tan".

Linux Kernel Exploitation: Attack of the Vsock(hoefler.dev)

223 points by todsacerdoti 1 year ago | 65 comments

Attacking UNIX Systems via CUPS(evilsocket.net)

385 points by NetBender 2 years ago | 280 comments

Security researcher evilsocket's writeup of a remote code execution attack on GNU/Linux and UNIX systems via CUPS and cups-browsed, plus notes on the disclosure process.

OpenSSH 10.5/10.5p1(openssh.org)

103 points by voxadam 2 months ago | 32 comments

Ash (Almquist Shell) Variants(in-ulm.de)

63 points by thefilmore 1 year ago | 3 comments

The long life of Apache httpd 2.4(utcc.utoronto.ca)

156 points by ingve 3 years ago | 121 comments

Start all of your commands with a comma (2009)(rhodesmill.org)

344 points by vmbrasseur 2 years ago | 140 comments

Brandon Rhodes' 2009 blog post suggesting prefixing personal shell script names with a comma to avoid collisions with system commands.

Start all of your commands with a comma (2009)(rhodesmill.org)

628 points by theblazehen 8 months ago | 227 comments

Brandon Rhodes' 2009 blog post suggesting prefixing personal shell script names with a comma to avoid collisions with system commands.

New Linux udisks flaw lets attackers get root on major Linux distros(bleepingcomputer.com)

336 points by smig0 1 year ago | 227 comments

BleepingComputer news article about a udisks vulnerability that lets attackers gain root privileges on major Linux distributions.

What to Know About JavaScript in 2026(blog.master.dev)

17 points by eustoria 1 month ago | 2 comments

A blog post outlining what developers should know about the JavaScript language and ecosystem in 2026.

Io_uring, kTLS and Rust for zero syscall HTTPS server(blog.habets.se)

444 points by guntars 1 year ago | 138 comments

Blog post describing building an HTTPS web server in Rust using io_uring and kernel TLS to avoid system calls on the request path.

Shell Tricks That Make Life Easier (and Save Your Sanity)(blog.hofstede.it)

564 points by zdw 7 months ago | 246 comments

A blog post sharing practical Unix shell tricks and keyboard shortcuts for bash and other shells to speed up everyday terminal work.