Video yükleniyor...

Video Yüklenemedi

Ana Sayfaya Dön

Multiple Vulnerabilities Found in Rust Sudo Clone in Ubuntu Ubuntu is now shipping with Rust based replacements of core utilities (sudo, date, du, etc.). And the steady stream of bugs, missing functionality, and security vulnerabilities continues.

LundukeJournal's profile picture

The Lunduke Journal

25,592 subscribers

18,392 görüntüleme • 7 ay önce •via X (Twitter)

LIVE

Anya Rossi• Live Now

Private livecam show

0 Yorum

Yorum bulunmuyor

Orijinal gönderinin yorumları burada görünecek

Benzer Videolar

“Joining the Rust ultras?” That’s just one of the comments Jon addresses in our latest YouTube video on sudo-rs, the Rust-based reimplementation of sudo. From “Why fix what isn’t broken?” to “Is this about moving GPL code outside Linux?”, Jon responds directly and adds context to the discussion. 🎥 Watch the full video: #Ubuntu #OpenSource #Linux #Sudo #Rust
0:24

“Joining the Rust ultras?” That’s just one of the comments Jon addresses in our latest YouTube video on sudo-rs, the Rust-based reimplementation of sudo. From “Why fix what isn’t broken?” to “Is this about moving GPL code outside Linux?”, Jon responds directly and adds context to the discussion. 🎥 Watch the full video: #Ubuntu #OpenSource #Linux #Sudo #Rust

Ubuntu

13,432 görüntüleme • 9 ay önce

Ubuntu Hired Security Research Firm After Rust Re-writes Raised "Serious Concerns" With the release of Ubuntu 26.04 (Long Term Support), Ubuntu is revealing massive security and ship-ability issues with the Rust-based, GNU Coreutils replacements.
10:04

Ubuntu Hired Security Research Firm After Rust Re-writes Raised "Serious Concerns" With the release of Ubuntu 26.04 (Long Term Support), Ubuntu is revealing massive security and ship-ability issues with the Rust-based, GNU Coreutils replacements.

The Lunduke Journal

25,573 görüntüleme • 1 ay önce

Can We Trust Rust? Debian Linux and Ubuntu are forcing adoption of Rust at core levels of the system. Considering the large numbers of Leftist Extremist Activists among Rust developers... can that software be trusted?
24:30

Can We Trust Rust? Debian Linux and Ubuntu are forcing adoption of Rust at core levels of the system. Considering the large numbers of Leftist Extremist Activists among Rust developers... can that software be trusted?

The Lunduke Journal

46,107 görüntüleme • 7 ay önce

Ubuntu 26.04 LTS, codenamed #ResoluteRaccoon, is now available to download. 🦝 Resolute Raccoon builds on the resilience-focused improvements introduced in interim releases, with TPM-backed full-disk encryption, improved support for application permission prompting, Livepatch updates for Arm-based servers, and Rust-based utilities for enhanced memory safety. This release also brings native support for industry-leading AI/ML toolkits like NVIDIA CUDA and AMD ROCm, making Ubuntu 26.04 LTS the ideal platform for AI development and production workloads. Install now: Learn more about the release:
1:20

Ubuntu 26.04 LTS, codenamed #ResoluteRaccoon, is now available to download. 🦝 Resolute Raccoon builds on the resilience-focused improvements introduced in interim releases, with TPM-backed full-disk encryption, improved support for application permission prompting, Livepatch updates for Arm-based servers, and Rust-based utilities for enhanced memory safety. This release also brings native support for industry-leading AI/ML toolkits like NVIDIA CUDA and AMD ROCm, making Ubuntu 26.04 LTS the ideal platform for AI development and production workloads. Install now: Learn more about the release:

Ubuntu

651,487 görüntüleme • 1 ay önce

This project is a simple banking application with multiple security vulnerabilities built in. It's designed to help security researchers learn about: - Common web application and API vulnerabilities !!! Github : Cc : Ghost St Badmus
1:36

This project is a simple banking application with multiple security vulnerabilities built in. It's designed to help security researchers learn about: - Common web application and API vulnerabilities !!! Github : Cc : Ghost St Badmus

Gospel

48,163 görüntüleme • 1 yıl önce

Ubuntu Core 26 has arrived. Ubuntu Core 26 is now generally available, bringing precise Linux builds, optimized OTA updates, live kernel patching, and enhanced hardware-backed protection for mission-critical deployments. "Ten years ago, Ubuntu Core pioneered a new OS security model, where every component is strictly confined, transactionally updated, and independently verifiable. Today, that approach is reflected in emerging industry standards. With Ubuntu Core 26, we continue to deliver the foundation that critical infrastructure operators need to meet the Cyber Resilience Act, run attested, immutable edge AI workloads, and manage devices securely at scale," said Jon Seager, VP of Ubuntu Engineering at Canonical. Read the press release to learn more: #OpenSource #Canonical #UbuntuCore26
0:20

Ubuntu Core 26 has arrived. Ubuntu Core 26 is now generally available, bringing precise Linux builds, optimized OTA updates, live kernel patching, and enhanced hardware-backed protection for mission-critical deployments. "Ten years ago, Ubuntu Core pioneered a new OS security model, where every component is strictly confined, transactionally updated, and independently verifiable. Today, that approach is reflected in emerging industry standards. With Ubuntu Core 26, we continue to deliver the foundation that critical infrastructure operators need to meet the Cyber Resilience Act, run attested, immutable edge AI workloads, and manage devices securely at scale," said Jon Seager, VP of Ubuntu Engineering at Canonical. Read the press release to learn more: #OpenSource #Canonical #UbuntuCore26

Canonical

24,970 görüntüleme • 1 ay önce

The Authd authentication daemon for Ubuntu allows direct integration with cloud-based identity providers for both Ubuntu Desktop and Server. Supporting both Microsoft Entra ID and Google IAM, you can deploy this at scale using Landscape and cloud-init. Find out how in our walkthrough here: #Ubuntu #Linux #OpenSource #PluckyPuffin
1:52

The Authd authentication daemon for Ubuntu allows direct integration with cloud-based identity providers for both Ubuntu Desktop and Server. Supporting both Microsoft Entra ID and Google IAM, you can deploy this at scale using Landscape and cloud-init. Find out how in our walkthrough here: #Ubuntu #Linux #OpenSource #PluckyPuffin

Ubuntu

14,400 görüntüleme • 1 yıl önce

NetBSD Says No to Rust "Rust in the core of NetSD is probably a non-starter," says long-time NetBSD developer. "Keeping Rust working is quite a bit of work."
20:49

NetBSD Says No to Rust "Rust in the core of NetSD is probably a non-starter," says long-time NetBSD developer. "Keeping Rust working is quite a bit of work."

The Lunduke Journal

44,820 görüntüleme • 4 ay önce

Excited to launch OpenHack! 🚀 A fully open source agentic security scanner to hunt and verify security vulnerabilities. Upto 40x cheaper, it is on par with Claude Opus 4.6 on CVE-Bench for finding logic based vulnerabilities in web apps.
2:40

Excited to launch OpenHack! 🚀 A fully open source agentic security scanner to hunt and verify security vulnerabilities. Upto 40x cheaper, it is on par with Claude Opus 4.6 on CVE-Bench for finding logic based vulnerabilities in web apps.

Ananay

13,945 görüntüleme • 16 gün önce

. Tom Cruise on his experience of filming in #SouthAfrica🇿🇦. "Humanity is based on the plural not the singular... I am because you are". Ubuntu! #UbuntuDiplomacy Ubuntu Radio DSTV888 #VisitSouthAfrica
0:34

. Tom Cruise on his experience of filming in #SouthAfrica🇿🇦. "Humanity is based on the plural not the singular... I am because you are". Ubuntu! #UbuntuDiplomacy Ubuntu Radio DSTV888 #VisitSouthAfrica

Clayson Monyela

51,271 görüntüleme • 1 yıl önce

Ubuntu VP Says: "Stop Writing Python", Wants Devs "All Day Writing Rust" Ubuntu's Vice President on re-writing everything in Rust: "do it by default with no apology", despite acknowledging that users will "see some breakage".
8:46

Ubuntu VP Says: "Stop Writing Python", Wants Devs "All Day Writing Rust" Ubuntu's Vice President on re-writing everything in Rust: "do it by default with no apology", despite acknowledging that users will "see some breakage".

The Lunduke Journal

18,322 görüntüleme • 3 ay önce

Ubuntu Pro for WSL is a Windows application that automates the attachment of your Ubuntu Pro subscription to instances of Ubuntu on WSL. The Pro for WSL application makes it possible to securely deploy instances of Ubuntu on WSL at scale. 🎥 Learn how to get started with Ubuntu Pro for WSL on Windows.
2:07

Ubuntu Pro for WSL is a Windows application that automates the attachment of your Ubuntu Pro subscription to instances of Ubuntu on WSL. The Pro for WSL application makes it possible to securely deploy instances of Ubuntu on WSL at scale. 🎥 Learn how to get started with Ubuntu Pro for WSL on Windows.

Ubuntu

28,595 görüntüleme • 6 ay önce

Say please.❤️Don't say sudo! 🔥 There is something very passive-aggressive about the Linux sudo command. Don't do it!😡 $ sudo rm -rf folder 👎 $ please rm -rf folder 👍 Just the idea of referring to yourself as a super-user, as the first two letters of the sudo command infer, is positively hubristic.🤦‍♀️ The idea of then using the assumed super-user state to demand the Unix-based OS unquestionably perform a function or task is just outright dictatorial. It’s not a good look.🦡 That’s why I always say please instead of sudo. Every Linux installation allows the developer to add aliases to commonly used commands. Why not add please as an alias for sudo? For example, to remove a folder with sudo, an admin would have to type the following, argumentative sounding, command in the terminal window: With please set as an alias for sudo, the command looks positively pleasant: $ please rm -rf folder Doesn’t please sound more pleasant than sudo? Asking the OS please rather than demanding it respond to your sudo command is just the proper thing to do. Aliases are easy to create. To make please an alias for sudo, just type in: $ alias please="sudo" From that point on, instead of issuing sudo commands, you just say please instead. Your Linux box will appreciate your politeness. #DevOps #SoftwareDeveloper
0:58

Say please.❤️Don't say sudo! 🔥 There is something very passive-aggressive about the Linux sudo command. Don't do it!😡 $ sudo rm -rf folder 👎 $ please rm -rf folder 👍 Just the idea of referring to yourself as a super-user, as the first two letters of the sudo command infer, is positively hubristic.🤦‍♀️ The idea of then using the assumed super-user state to demand the Unix-based OS unquestionably perform a function or task is just outright dictatorial. It’s not a good look.🦡 That’s why I always say please instead of sudo. Every Linux installation allows the developer to add aliases to commonly used commands. Why not add please as an alias for sudo? For example, to remove a folder with sudo, an admin would have to type the following, argumentative sounding, command in the terminal window: With please set as an alias for sudo, the command looks positively pleasant: $ please rm -rf folder Doesn’t please sound more pleasant than sudo? Asking the OS please rather than demanding it respond to your sudo command is just the proper thing to do. Aliases are easy to create. To make please an alias for sudo, just type in: $ alias please="sudo" From that point on, instead of issuing sudo commands, you just say please instead. Your Linux box will appreciate your politeness. #DevOps #SoftwareDeveloper

Darcy DeClute | Scrum | Python | GitHub | Java | X

71,779 görüntüleme • 2 yıl önce

multiple vulnerabilities found on vvaifu.fun V2. get in touch. I can help.
1:10

multiple vulnerabilities found on vvaifu.fun V2. get in touch. I can help.

H4CK Terminal

101,207 görüntüleme • 1 yıl önce

🇫🇷 Former thief reveals the Louvre's vulnerabilities: He had already alerted Louvre security about the vulnerabilities in the windows, and he didn't understand why the real jewels were being put on display instead of being kept in a secure vault and replaced with fake copies
2:33

🇫🇷 Former thief reveals the Louvre's vulnerabilities: He had already alerted Louvre security about the vulnerabilities in the windows, and he didn't understand why the real jewels were being put on display instead of being kept in a secure vault and replaced with fake copies

Lord Bebo

22,551 görüntüleme • 8 ay önce

▶️ Ubuntu 24.04 LTS is here 👑 Download it now 👇 #Ubuntu #Linux #NobleNumbat
1:24

▶️ Ubuntu 24.04 LTS is here 👑 Download it now 👇 #Ubuntu #Linux #NobleNumbat

Ubuntu

271,568 görüntüleme • 2 yıl önce

Memory Corruption Vulnerability in Linux "Memory Safe" Rust Code Rust programmers re-wrote a portion of the Linux kernel in Rust. That Rust code had a crashing vulnerability in an "unsafe" chunk of code... which Linux is littered with.
18:23

Memory Corruption Vulnerability in Linux "Memory Safe" Rust Code Rust programmers re-wrote a portion of the Linux kernel in Rust. That Rust code had a crashing vulnerability in an "unsafe" chunk of code... which Linux is littered with.

The Lunduke Journal

70,616 görüntüleme • 6 ay önce

STOP typing your sudo password... use your fingerprint instead! 😲 It takes seconds. Here's how 👇 1️⃣ sudo nano /etc/pam.d/sudo 2️⃣ add "auth sufficient pam_tid.so" 3️⃣ never type your sudo password again
0:37

STOP typing your sudo password... use your fingerprint instead! 😲 It takes seconds. Here's how 👇 1️⃣ sudo nano /etc/pam.d/sudo 2️⃣ add "auth sufficient pam_tid.so" 3️⃣ never type your sudo password again

NetworkChuck

83,318 görüntüleme • 1 yıl önce

POV: Ubuntu in 2016 👀
0:23

POV: Ubuntu in 2016 👀

Ubuntu

85,935 görüntüleme • 5 ay önce

Ubuntu Planning Mandatory Age Verification Ubuntu & Elementary OS developers are planning to add age verification functionality, in a way which impacts all Linux users, to comply with a new California law.
10:15

Ubuntu Planning Mandatory Age Verification Ubuntu & Elementary OS developers are planning to add age verification functionality, in a way which impacts all Linux users, to comply with a new California law.

The Lunduke Journal

418,752 görüntüleme • 3 ay önce