kuizu

Wasn't the EU Data Act (https://digital-strategy.ec.europa.eu/en/policies/data-act) put in place to exactly prevent these kind of scenarios (Article 4 and 5)?

"where the user cannot directly access the data from the connected product or related service, the data holder must make the readily available data and necessary metadata accessible to the user without undue delay, in the same quality as available to the data holder, easily, securely, free of charge, in a structured, commonly used, machine-readable format, and continuously/in real time where relevant and technically feasible."

There is even special EU guidance for vehicle data for it: https://digital-strategy.ec.europa.eu/en/library/guidance-ve...

A similar concept, but with multiple probes at the same time, was published in this blog series as open source hard- and software: https://www.schutzwerk.com/en/blog/proboter-01/ They explain some of the use cases in this demo video https://youtu.be/TYEjZA-xbGo?is=osWXCrBkLOi4JHxO

Something does not line up here. The description at NIST in the CVE is about a local privilege escalation.

It contains these two links

- https://packetstorm.news/files/id/189989

- https://gist.github.com/R-Security/1c707a08f9c7f9a91d9d84b50...

The first is also about the LPE, the second is apparently by the same author, names the same CVE-ID but is about a remote code execution?

Also

* 10-part series explaining all relevant Linux container mechanisms ( https://www.schutzwerk.com/blog/linux-container-intro/ )

At least on Android there is a nice app for the first point. It will track your calls and messages and remind you to contact people in certain intervals based on predefined contact group settings: https://play.google.com/store/apps/details?id=me.barta.stayi...

A nice blog series explaining in detail each Linux kernel mechanism making up containers: https://www.schutzwerk.com/en/43/posts/linux_container_intro...

The Gitlab licensing model was recently change and the lowest tier starter license was removed. Anyone knows which of these new features a customer receives that is still on "starter" (which can be kept for up to one year after the change to the license model)?

Part one was discussed here https://news.ycombinator.com/item?id=25538820

Public information is very thin on the exploitability of this. Are you able to elaborate a little bit where MSG_PEEK might be used? Is it used in the kernel? Only in specific applications?