top 50 comments

sorted by: hot top controversial new old
[–] 85 points 4 months ago (7 children)

Can't wait for one that'll work on Android so I can maybe root some otherwise useless old phones

  • source
  • hideshow 7 child comments
  • [–] [S] 12 points 4 months ago (6 children)

    What would you use the old phones for out of curiosity?

  • source
  • parent
  • hideshow 6 child comments
  • [–] 10 points 4 months ago

    I've encountered a couple of people who use them as remote cameras to observe their 3D printers. That suggests a bunch of other possibilities for things you want to be able to watch or listen to without standing over them and without buying an extra webcam to cover what might be a temporary need.

  • source
  • parent
  • [–] 8 points 4 months ago* (last edited 4 months ago)

    They are less expensive.

    EDIT:

    Sorry, I misread the parent comment.

    You would use them for literally anything you typically or potentially could use a phone for.

    If you are not playing video games on your phone... there is basically no common reason to have a top spec brand new phone.

    What do I want my phone to do?

    Make calls, send messages, run a web browser, check emails, take a picture or video every once in a while, act as a notepad, check a weather forecast, have some map explorer, use some entirely 2D proprietary apps for things like... groceries or hailing a ride or checking my bank balance.

    Pretty sure that right there is about 80% of people's phone use case.

    You do not need top spec hardware to do any of that.

    You have the gaming thing to do the gaming stuff.

  • source
  • parent
  • [–] 4 points 4 months ago

    Removing all the system-level bloat that makes them unpleasant to use, perhaps stripping one down to the level of a fancy MP3 player with its microSD slot. Also having "disposable" phones to play with various rooted tweaks. All of my easily-rootable phones are too valuable as daily drivers to experiment on, while all of the ones I don't care about also don't have rooting methods yet.

  • source
  • parent
  • load more comments (1 reply)
  • [–] 45 points 4 months ago (2 children)

    Ok this is the first time I try one of these exploits and it works on my system, I'm currently very spooked.

    On the other hand, this may allow me to root my LG WebOS TV?

  • source
  • hideshow 2 child comments
  • load more comments (1 reply)
    [–] 40 points 4 months ago (6 children)

    In the 90s I compiled all my kernels at home from source with just the drivers I needed. Only installed the packages I needed. Only enabled the services I needed. The Unix way. When the kernel added modules I was still only compiling a subset and generally loading them manually.

    Obviously that doesn't work for most users and distros sensibly started shipping with modules compiled for practically every need. Usually when I view distro security alerts they are for packages I don't install. But I have all these damn kernel modules just waiting to automatically load. I know I can blacklist them individually but I wonder if there is a way to profile the modules I use and use a deny all/whitelist approach instead?

  • source
  • hideshow 6 child comments
  • [–] 26 points 4 months ago* (last edited 4 months ago) (3 children)

    modprobed-db can create a profile of the kernel modules that get loaded by your system over time. You can feed that directly into make localmodconfig to build a kernel that only includes those modules, or use the data to build a modprobe whitelist.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 3 points 4 months ago (1 child)

    Clearly you know of lot about this. Here are some comments for the next human.

    Deny all modules seems more possible than a whitelist approach. To deny all, the command is likely "sysctl kernel.modules_disabled=1".

    Whitelisting is harder. One could store a list of all loaded modules on a working system. Store a list of all kernel modules currently installed on the system. Compare the lists and remove from the "all" list the "running" list (grep will do this) and write it to the blacklist file.

    The problem with the Whitelisting approach is that it needs to run after every kernel module install (which is doable).

    If the above is the case, then someone must have automated this already, but I cannot find it quickly. (I checked Debian's package repository.)

  • source
  • parent
  • hideshow 1 child comment
  • [–] 7 points 4 months ago

    Clearly you know of lot about this.

    Nah, that is the problem. It all got so dynamic and easy I don't really know how the hundreds of active modules on my desktop are loaded, why or in what order anymore. The days when I could list a handful of modules to load at boot are long gone I think unless its an embedded device or perhaps a simple server.

    Setting modules_disabled might be viable for a relatively static system. I have seen that one when looking at hardening servers in the past but thought it was a bit extreme. Perhaps not.

  • source
  • parent
  • [–] 40 points 4 months ago (3 children)

    Good to see these exploits being found and worked on

  • source
  • hideshow 3 child comments
  • [–] 23 points 4 months ago (1 child)

    may become useful if i forgot my password.

  • source
  • hideshow 1 child comment
  • [–] 12 points 4 months ago* (1 child)

    Update: Kernel 7.0.5 just released

    Fixes: cac2661c53f3 ("esp4: Avoid skb_cow_data whenever possible")

    Fixes: 03e2a30f6a27 ("esp6: Avoid skb_cow_data whenever possible")

    Fixes: 7da0dde68486 ("ip, udp: Support MSG_SPLICE_PAGES")

    Fixes: 6d8192bd69bb ("ip6, udp6: Support MSG_SPLICE_PAGES")

  • source
  • hideshow 1 child comment
  • load more comments (1 reply)
    [–] 8 points 4 months ago*

    It was patched in almalinux though, and it was how this exploit got exposed before disclosure.

    At lest this is what I read

  • source
  • [–] 7 points 4 months ago (8 children)

    Well shit. I wonder if all Linux systems are affected, the testing in the repo doesn't cover Arch for instance. For now I'd assume the answer is yes.

  • source
  • hideshow 8 child comments
  • [–] 6 points 4 months ago* (last edited 4 months ago) (2 children)

    Its a kernel exploit, so probably. But I just checked my arch installs,and I don't have any of the kernel modules loaded. Loading requires root anyway, so I think this may be fairly limited in reality?

    Edit: seems the modules get loaded automatically :(

  • source
  • parent
  • hideshow 2 child comments
  • load more comments (1 reply)
  • load more comments
    view more: next ›