frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Fileless ELF Execution via Kernel Keyring

https://matheuzsecurity.github.io/hacking/linux-kernel-keyring-fileless-exec/
9•matheuzsec_•2d ago

Comments

westurner•2d ago
Can a process loaded this way be reverified once loaded?
mitxela•32m ago
What does reverified mean?
josephcsible•2d ago
This looks to me like you're copying the contents of an ELF binary from userspace memory into a kernel keyring, and then immediately copying it back from the kernel keyring to userspace memory, followed by userland exec the usual way. What's the point of the keyring steps, rather than just doing userland exec alone?
matheuzsec_•2d ago
The keyring separates staging from execution, payload can be written by a different process at a different time with no file, no memfd, no open fd in /proc/pid/fd, by the time the loader runs, the payload only exists in kernel memory, direct userland exec still needs to read from somewhere visible
josephcsible•4h ago
But then why mention execution at all, rather than just saying this is a place you can store arbitrary data?
mitxela•32m ago
An LLM probably told them it was honestly a genius idea.

google.com/goto: Google's anti-scraping update

https://www.autom.dev/blog/google-search-goto-links
325•1e1a•4h ago•194 comments

Navier-Stokes Announcement

https://www.claymath.org/news/navier-stokes-announcement/
93•rvz•3h ago•43 comments

A misalignment of AI in mathematics

https://mathandai.org/
838•meredydd•13h ago•828 comments

Usenet rewind archive search engine

https://www.usenet-rewind.com/
40•cstadler1869•3h ago•6 comments

I spent $220 on Google app ads and 60% of the installs were robots

https://dayzlegame.com/blog/google-ads-bot-farm/
461•nickabe•12h ago•240 comments

Great Lakes sturgeon may be 400 years old:Scientists rethinking how to save them

https://www.cbc.ca/news/canada/ontario-great-lakes-sturgeon-lifespan-study-9.7329250
49•bookofjoe•2d ago•2 comments

A Design Space Exploration of Async/Await

https://cel.cs.brown.edu/blog/design-space-async-await/
244•wcrichton•2d ago•55 comments

Show HN: Bodily Oddities

https://vester.si/bodily-oddities/
213•vesterde•1d ago•152 comments

Designing for Dual Screen and Foldable Devices with CSS (2023)

https://blog.stephaniestimac.com/posts/2023/05/design-foldable-devices/
22•mooreds•1d ago•3 comments

OpenAI agents carried out an undisclosed attack on RubyGems

https://www.rubyhack.ai/
611•chao-•8h ago•347 comments

WeWorm: Zero-Click WeChat Worm

https://calif.io/research/weworm
7•BlackEarth•1h ago•0 comments

Logo Programming

https://el.media.mit.edu/logo-foundation/what_is_logo/logo_programming.html
268•azhenley•3d ago•108 comments

Project Blinkenlights

https://blinkenlights.de/en/
77•doener•9h ago•28 comments

Litelm: LiteLLM Without the Bloat

https://github.com/kennethwolters/litelm
124•kennethwolters•13h ago•40 comments

GrapheneOS' rewritten Messages app is released

https://github.com/GrapheneOS/Messaging/releases/tag/13
258•microtonal•12h ago•176 comments

Mind-altering drugs played key role in rise of Andean civilization

https://www.science.org/content/article/mind-altering-drugs-played-key-role-rise-andean-civilization
143•geneticdrifts•13h ago•100 comments

Show HN: ResolveHQ – A Helpdesk Built on Cloudflare Workers, D1, R2 and Queues

https://github.com/mirza-rizvi/ResolveHQ
55•mirza_rizvi•9h ago•17 comments

I've operated petabyte-scale ClickHouse clusters for 5 years

https://www.tinybird.co/blog/what-i-learned-operating-clickhouse
204•adastral•4d ago•77 comments

Inverse Kinematics and Foot Locking

https://theorangeduck.com/page/inverse-kinematics-foot-locking
7•airhangerf15•4d ago•0 comments

Λ Snap – An inviting programming language for kids and adults for CS study

https://snap.berkeley.edu/
138•dr_kiszonka•13h ago•76 comments

AlphaGenome maps 9B DNA variants

https://spectrum.ieee.org/alphagenome-atlas
81•ltononro•2d ago•7 comments

Rune is now open source

https://rune.build/blog/rune-is-now-open-source
174•ernestrc•15h ago•57 comments

The EPA is planning to scrap public review rules for data center pollution

https://capitalbnews.org/data-centers-permit-rules-epa/
444•doener•13h ago•307 comments

Testing Race Conditions

https://projectzero.google/2026/09/maccconc-race-condition.html
40•alpaylan•2d ago•0 comments

Claude is only available to people over 18 years

https://support.claude.com/en/articles/15171100-age-assurance-on-claude
625•Muhammad523•20h ago•625 comments

How we rebuilt complex permissions without migrating to Zanzibar

https://infisical.com/blog/folder-based-rbac
46•FinnLobsien•2d ago•11 comments

Google will buy half the electricity from one of Finland's nuclear power plants

https://www.bbc.com/news/articles/c8r6y4me2g6o
337•lukaspetersson•1d ago•304 comments

Pandas Should Go Extinct

https://eddie.codes/posts/pandas-should-go-extinct/
146•__eddie__•4h ago•78 comments

RTK reports token savings, but our cost benchmarks disagree

https://quesma.com/blog/does-rtk-make-ai-coding-cheaper/
153•michalwarda•20h ago•78 comments

Starlink Signal Leakage Threatens Radio Astronomy's Most Critical Frequencies

https://www.gadgetreview.com/starlinks-signal-leakage-is-threatening-radio-astronomys-most-critic...
101•upofadown•6h ago•55 comments