Stories by jwilk

AURpocalypse now: a look at the recent AUR attacks

Moving beyond fork() + exec()

LLM-driven security reports disrupt coordinated disclosure

Debian decides not to decide on AI-generated contributions

As ye clone(), so shall ye AUTOREAP

Security incident on plone GitHub org with force pushes

GNU InetUtils Security Advisory: remote authentication by-pass in telnetd

A free and open-source rootkit for Linux

The difficulty of safe path traversal

A “frozen” dictionary for Python

Explicit Lazy Imports for Python

Linux's Missing CRL Infrastructure

Understanding Debian's Security Processes

Libxml2's "no security embargoes" policy

Slowing the flow of core-dump-related CVEs

Hardening fixes lead to hard questions

Local information disclosure in apport and systemd-coredump

ISC has disclosed three vulnerabilities in Kea

Recent Disruptive Changes from Setuptools

Dancing Pigs

1 2 3 4 5 6