evilstevie @evilstevie@mastod1.ddns.net

We've released #PuTTY version 0.85.

This release fixes five security vulnerabilities. None is _known_ to be severe, but at least one of them could be.

The potentially severe ones:

• Pageant could use freed memory if one of its clients deletes an encrypted private key while the user is still answering a passphrase prompt triggered by another client's attempt to use the key. If this was triggered via a malicious user with access to agent forwarding, they might also have had some control over the contents of the reused memory.

• The OpenSSH encrypt-then-MAC cipher modes (but not the ones PuTTY uses by default) had a buffer overflow if a server sent the largest permitted packet size.

Give the team a graph and things happen.

#curl now allocates less than 130,000 bytes memory to download a HTTP file of any size.

102,400 bytes of that chunk is the download buffer. curl has *never* allocated less non-download buffer memory for this use case.

All it takes is attention to detail, a sensible architecture and lots of dedication.

A quick break from multilingual swearing to allow the wee feather folk I found in the long grass the opportunity to say hello. Or bonjour. Or hej. Or hei. Or ciao.

#sillyScribbles #featherFolk

My wife isn't on mastadon, but she made this memorial for our #dog scout for his #gotchaday yesterday.

Many thanks to @micr0 for their alt text helper. I do not know if I could have posted this thread without it.

#animals #dogsofmastodon #pets

1/8

She growls at the ball while chasing it if it bounces awkwardly

me at the beach

"Oregon Ice Cream, LLC" transferred 192.12.45.0/24 to "Scrumptious Yeets"
(Estimated Market Value: $6.66 K)

Okay, hear me out: Hack Back

I know you all hate the emergency alert about disposable barbeques.

But yesterday I watched a man at our hotel breakfast set fire to a toaster by trying to toast a croissant - despite multiple signs telling him not to.

Today he tried again.

So, you know, calibrate for the average person.

yesterday i was talking about mastodon and someone was like "what the fuck is that" and without thinking i said "linux twitter"

Sky News: Why did you stand here in Clacton?
Count Bin Face: That's where the election was, John.

Imagine the headlines:

FARAGE BEATS BIN. INVESTIGATION REOPENS.

Nigel Farage is *desperate* to portray himeslf as a victim.

I really hope they look into the finances of the 30+ freaks who jumped in on that Clacton-On-Sea byelection racket, who is paying Laurence Fox to be there?

#UKPol #UKpolitics #ClactonOnSea #FarRight #Oligarchs #EpsteinClass

@Viss if you want to be horrified, throw a few URLs in Lookyloo: https://lookyloo.circl.lu/capture

My go-to these days is whatismyipaddress[.]com: https://lookyloo.circl.lu/tree/53be89e2-61ae-4750-8b2f-bb34b299e655

which loads 1839 unique URLs and from 337 unique hostnames *just to render the index*.

Doing my hobbies more efficiently is insulting. That’s not what my hobbies are about.

Otherwise it’s just work you aren’t paid for.

I am very inefficient. That’s the point. I go down random rabbit holes. I have numerous side quests. That’s part of the joy.

Remember to rename your netcat binaries to netcatte for evasion during pentests