Eric Berger

sciguyspace.bsky.social

13 January 2025 10:27

They're scrubbing the launch attempt of New Glenn this morning. Not sure when it will be made official.

Filippo Valsorda

filippo.abyssdomain.expert

30 March 2024 20:13

I'm watching some folks reverse engineer the xz backdoor, sharing some *preliminary* analysis with permission. The hooked RSA_public_decrypt verifies a signature on the server's host key by a fixed Ed448 key, and then passes a payload to system(). It's RCE, not auth bypass, and gated/unreplayable.