Jons Mostovojs @jonn@social.doma.dev

Brief primer on the Special Operations Branches and Detachments of the Office of Strategic Services:

#OSS #WW2

https://arsof-history.org/oss/index.html

Senator Cory Booker #MoralCourage #resistance #democracy #fearlessness #MoralMoment

He yields the floor at 25 hours and 5 minutes. :)

Patch your Mozilla things. They released an advisory for Firefox and Thunderbird with four sev:HIGH vulns.

https://www.mozilla.org/en-US/security/advisories/mfsa2025-20/

CVE-2025-3028: Use-after-free triggered by XSLTProcessor

CVE-2025-3031: JIT optimization bug with different stack slot sizes

CVE-2025-3032: Leaking file descriptors from the fork server

CVE-2025-3029: URL bar spoofing via non-BMP Unicode characters

CVE-2025-3035: Tab title disclosure across pages when using AI chatbot

CVE-2025-3033: Opening local .url files could lead to another file being opened

CVE-2025-3030: Memory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9

CVE-2025-3034: Memory safety bugs fixed in Firefox 137 and Thunderbird 137

Encryption is essential for cybersecurity

The lack of protections for it in the UK Cyber Security Bill, coupled with the UK's encryption-breaching order against Apple, shows a lack of seriousness about the threats we face.

Sign and share our petititon to send a message

https://you.38degrees.org.uk/petitions/keep-our-apple-data-encrypted

#e2ee #encryption #cybersecurity #cybersecuritybill #security #ukpolitics #ukpol

define "greenwashing"

Oh dear, I'm feeling political today. It's just that it's dawned on me that 'zero tolerance' only seems to mean putting extra police in poor, run-down areas, and not in the Stock Exchange.

Terry Pratchett, alt.fan.pratchett

#GNUTerryPratchett, #SpeakHisName, #Discworld

When people say 'politics is too divisive now,' what they really mean is 'I was more comfortable when certain groups suffered quietly.'

Holy shit.

Just wow, wow, holy shit:

Completely rewriting a multi-million line COBOL codebase that has life-or-death consequences for real people in the space of a few months, using gen AI?

I’ve been writing software for 40-some years, and I have to say: this may be, without exaggeration, the stupidest software-related idea I’ve ever heard from leadership.

https://www.wired.com/story/doge-rebuild-social-security-administration-cobol-benefits/

Don't know what to do or were to start in resisting the MAGA authoritarian takeover? Need to start small? Check out this link:

Thirty lonely but beautiful actions you can take right now which probably won't magically catalyze a mass movement against Trump but that are still wildly important.

https://thewhitepages.net/p/thirty-lonely-but-beautiful-actions

#Resistance

HT: @garrettbucks

@samlitzinger Just remembered what happened when Silvio 'Bunga Bunga' Berlusconi, Italy's Trump (or, to be more precise, Trump is America's Berlusconi) died: his heirs called specialists to appraise his art collection, which occupied a WAREHOUSE, and the recommendation of those exquisite Italian experts was "burn it all"

https://www.bbc.com/news/world-europe-67162602

Today we are very proud to announce that the United Nations has switched from Google Forms to CryptPad Form for collecting endorsements on the UN Open Source Principles: https://unite.un.org/news/sixteen-organizations-endorse-un-open-source-principles

CryptPad Form is a full-fledged application allowing you to build privacy-preserving questionnaires for your respondents.

Try it for free, without even registering an account, on our CryptPad.fr flagship instance!

#UnitedNations #UN #Privacy #OpenSource #Forms #Studies #FOSS

Interesting Git repos of the week:

Detection:

* https://github.com/tstromberg/ucd - hunt for unauthorised changes
* https://github.com/mnrkbys/fjta - check for anomalies in your FS timeline

Exploitation:

* https://github.com/hardenedlinux/tzram-audit - audit your TrustZone implementatation

Nerd:

* https://gist.github.com/halcy/b4f455ef05c4c36906107e9367b8dd63 the Fediverse in FUSE

#security, #research, #code

We’re all trying to find the collaborators who did this.

https://mastodon.social/@hanse_mina/114226655742304795