Control-Flow Integrity in V8(v8.dev)

37 points by unripe_syntax 3 years ago | 9 comments

Ghrc.io appears to be malicious(bmitch.net)

352 points by todsacerdoti 1 year ago | 58 comments

Blog post by Brandon Mitchell reporting that ghrc.io, a typo of GitHub's ghcr.io container registry, appears to steal GitHub credentials.

Telnyx package compromised on PyPI(aikido.dev)

70 points by overflowy 7 months ago | 25 comments

Emacs arbitrary code execution and how to avoid it(eshelyaron.com)

117 points by oskardrums 1 year ago | 95 comments

TPM GPIO fail: How bad OEM firmware ruins Intel TPM security(mkukri.xyz)

168 points by osks 2 years ago | 105 comments

GitHub Actions has a package manager, and it might be the worst(nesbitt.io)

408 points by robin_reala 10 months ago | 236 comments

Andrew Nesbitt's blog post arguing GitHub Actions functions as a package manager lacking lockfiles, integrity hashes, and other supply chain safeguards.