3n

hopecore

All good engineers know you should NEVER EVER read published patents

does anyone else find it weird that people’s first reaction to someone not deciding to open source their project is to recreate it and make it free

Super secret method to block most of the Linux exploits in obscure modules without manual labor of recompiling the kernel or picking only selected ones: Run on boot: sleep 10m && echo 1 > /proc/sys/kernel/modules_disabled This will prevent new kernel modules from being loaded.

Microsoft is investigating mistralai PyPI package v2.4.6 compromise. Attackers injected code in mistralai/client/__init__.py that executes on import, downloads hxxps://83[.]142[.]209[.]194/transformers.pyz to /tmp/transformers.pyz, and launches a second-stage payload on Linux. The file name transformers.pyz appears deliberately chosen to mimic the widely used Hugging Face Transformers library and blend into ML/dev environments. The main payload is a credential stealer, but it also includes country-aware logic; it avoids Russian-language environments and contains a geo fenced destructive branch that has 1-in-6 chance of executing rm -rf / when the system appears to be in Israel or Iran. To mitigate this threat: isolate affected Linux hosts, block 83[.]142[.]209[.]194, hunt for /tmp/transformers.pyz, pgmonitor[.]py, and pgsql-monitor.service, and rotate exposed credentials.