Forgot your password?
typodupeerror

Submission + - Copy Fail exploit lets 732 bytes hijack Linux systems and quietly grab root (nerds.xyz)

BrianFagioli writes: A newly disclosed Linux kernel vulnerability called Copy Fail (CVE-2026-31431) allows an unprivileged user to gain root access using a tiny 732-byte script, and it works with unsettling consistency across major distributions. Unlike older exploits that relied on race conditions or fragile timing, this one is a straight-line logic flaw in the kernelâ(TM)s crypto subsystem. It abuses AF_ALG sockets and splice to overwrite a few bytes in the page cache of a target file, such as /usr/bin/su. Because the kernel executes from the page cache, not directly from disk, the attacker can inject code into a setuid binary in memory and immediately escalate privileges.

What makes this especially concerning is how quiet it is. The file on disk remains unchanged, so standard integrity checks see nothing wrong, while the in-memory version has already been tampered with. The same primitive can also cross container boundaries since the page cache is shared, raising the stakes for multi-tenant environments and Kubernetes nodes. The underlying issue traces back to an in-place optimization added years ago, now being rolled back as part of the fix. Until patched kernels are widely deployed, this is one of those bugs that feels less like a theoretical risk and more like a practical, reliable path to full system compromise.

Submission + - Longevity Escape Velocity Achieved Within Three Years (popularmechanics.com)

frdmfghtr writes: Popular Mechanics has a story about the rate at which lifespans are being extended by medical technology will surpass actual aging.

From the article:
"There's a controversial idea floating around the futurist community of "longevity escape velocity." It sounds super sci-fi, but it's basi-
cally the idea that as our life extension technology gets better, our life expectancy could increase by more than we age over a set period of time. For example, as medical innovations continue to move forward, we would still age a year over the span of a year. But our life expectancy would go up by, say, a year and two months, meaning we would functionally get two months of life back."

Comment Re:I don't get it (Score 1) 47

Also, for myself, the habit of looking things up is a kind of memory crutch that is weakening some cognitive functions. It's so easy to look up the name of a band or an author or an actor which I've forgotten that I tend to not push my memory. Lately though, I'm refusing the bait more and more, and forcing myself to wait until my slowing memory finds the thing its looking for.

Exercise - it's not just for your body any more!

This reminds me of the line from "Indiana Jones and the Last Crusade" when Dr. Jones (the elder one) is asked about something regarding the grail contained in his diary (at that point being in the possession of the Nazis) but he couldn't remember it. When given the scornful "what do you mean you don't remember?" look, his reply is "I wrote it down in my diary so I wouldn't HAVE to remember!"

Comment Re:I don't get it (Score 1) 47

A connected smartphone is an awesome brain augmentation device if used correctly - to look up things in the moment you want to know them.

The key phrase is "if used correctly." Part of that is knowing when to look something up "in the moment you want to know them," and when looking up a particular thing can wait until later. Too often I see searches being made for answers to questions that don't warrant an immediate answer, interrupting the ongoing conversation or activity, or even diverting the whole train of thought onto a dead-end side spur completely unrelated to the original topic.

If it's germane to the present topic, then sure, look it up. If not, it can wait. If you forget to look it up later, then it wasn't that important.

Comment Re: simple question (Score 1) 221

The conference is to explore ways to *wind down* the use of fossil fuels. The wells aren't being shut off next Tuesday.

figuring out how to get off the oil fossil fuel teat is going to take a long time, and it has to start somewhere. If not now, when? Five years? Ten years? When somebody decides to make the Strait of Hormuz completely and permanently impassible? Why not start now?

Comment Re:Same as it ever was (Score 5, Interesting) 296

It's clear you've never owned an EV and simply want to demonize a technology it's obvious you know little about.

The same people usually don't want to learn either. I know of people for whom an EV would be a perfect fit; local driving only, low annual miles (I'm talking maybe 5k/year)...but claim that "there are too many unknowns" with EVs. The only "unknowns" are the ones you don't want to learn about.

Comment Re:Not sure, we've been all electric over 2 years (Score 5, Insightful) 296

The math behind driving an ICE car today only makes sense if you need to tow large loads for significant distances.

I would add to that "on a regular basis." For example, if you're towing a boat to/from that marina twice a year for launching/storage, then a EV still makes sense; rent a big pickup for those few times per year that you need the capacity. If there is a need for the capacity on a frequent, regular basis, then the math certainly changes.

Comment Re: The underlying issue (Score 5, Insightful) 152

As a Mac user and electrical engineer, I respectfully disagree.

None of the engineering software I come across in daily use (SolidWorks, AutoCAD, power systems analysis, machine controls development) is available for the Mac. SolidWorks and power systems analysis work on a Windows VM (and now I'm tempted to try the controls software) but I haven't seen Mac versions.

Of course the answer will vary depending on your field, but if we are being honest with ourselves, most engineering applications are going to be Windows-based.

Comment Re: "summary" (Score 3, Funny) 50

Well glad to see I'm not the only one who sees this.

I get it; it's Slashdot where knee jerk reactions to summaries are historically the norm. But when posting a summary this f*****g long, there's need LESS motivation to read the original story.

Hey editors, a SUMMARY is one or two paragraphs AT MOST, highlighting key phrases or ideas. you're just cutting and pasting major chunks of the story. Show a little effort ffs! SUMMARIZE the story so we can go read the full original and maybe encourage more intelligent comments!

Slashdot Top Deals

If a thing's worth having, it's worth cheating for. -- W.C. Fields

Working...