Incroyable ce truc pour se faire son propre desktop Linux : quickshell.org

Si vous avez enfin compris que sur le temps long, bluesky ne sera ni décentralisé (je parle en terme de gouvernance !) ni un lieu de discussion fiable (le capitalisme ne l'a pas encore emmerdifié, mais ça ne tardera probablement pas ...) un rappel que piaille.fr est toujours ouvert !

A new Spectre-like attack dubbed VMScape allows a malicious virtual machine (VM) to leak cryptographic keys from an unmodified QEMU hypervisor process running on modern AMD or Intel CPUs.

chromium 140.0.7339.80 on #debian tries to access sensitive folders : ~/.ssh/ ~/.gnupg/ ~/.dbus/ /boot/ bugs.debian.org/cgi-bin/bugr... #security

SilverBullet v2 released! Your ultimate note taking app, programmable with Lua community.silverbullet.md/t/silverbull...

Travel eSIMs secretly route traffic over Chinese www.itnews.com.au/news/travel-...

The Hacker's Renaissance: A Manifesto Reborn phrack.org/issues/72/19

J'aimerais profiter de ma petite audience ici pour vous rappeler qu'actuellement notre gouvernement œuvre activement à la mise en place d'un système de surveillance de masse sur l'intégralité de vos systèmes de communication. www.clubic.com/actualite-57...

ZeroFS has a website now :)

@imil.net idée de stream : Regarder des screenshot ricing linux et photos de data étagère / homelab des lutinos

Okay this is really neat. ZFS pool data is being stored on S3. The NBD kernel module (man nbd-client) connects to a ZeroFS instance and creates local block devices (/dev/ndb0) over the network. The local block devices then get turned into a #zfs pool. www.reddit.com/r/zfs/commen... Nicely done 👏

A Dutch bank (Triodos Bankieren NL) has added explicit support for GrapheneOS and will be testing it going forward: github.com/PrivSec-dev/... They join a growing number of banking apps actively permitting users to use a much more secure device instead of trying to ban it instead.

Un bon résumé de pourquoi il ne faut pas utiliser le navigateur Brave : thelibre.news/no-really-do...

IMPORTANT: We're pre-disclosing two high severity CVEs in Matrix's federation protocol, which will require a coordinated upgrade on July 22nd of all servers running in untrusted federations. Client developers may need to make minor changes too. Please see matrix.org/blog/2025/07...

#Symfony always keeping the pace with latest IT innovations!

Un genre de Keybase mais fédéré. Par un des fondateurs de Keybase : foks.pub

Well, this horrible idea refuses to die so we should refuse to let it pass and start organizing again. ec.europa.eu/commission/p...

It doesn't make sense to wrap modern data in a 1979 format, introducing .ptar www.plakar.io/posts/2025-0...

Attackers can exploit two newly discovered local privilege escalation (LPE) vulnerabilities to gain root privileges on systems running major Linux distributions.

Attention si vous êtes clients de l’hébergeur suisse @infomaniak.bsky.social, qui se présente comme une entreprise respectueuse de la vie privée et des libertés numériques. Infomaniak soutient maintenant ouvertement la surveillance de masse. discuss.privacyguides.net/t/psa-infoma...

Si vous utilisez jq dans des scripts sensible genre CI/CD sachez que plusieurs CVE existent et les développeurs de jq n'ont pas le temps de sortir les correctifs depuis décembre 2023. github.com/jqlang/jq/is...

Si vous utilisez jq dans des scripts sensible genre CI/CD sachez que plusieurs CVE existent et les développeurs de jq n'ont pas le temps de sortir les correctifs depuis décembre 2023. github.com/jqlang/jq/is...

This is really bad. EU is planning a new mass surveillance law that includes mandating data retention, built-in backdoors, sanctioning non-compliant services and is asking you for feedback. EU citizens, please give them your feedback.

Nouvelle spec : ipcrypt : chiffrement et obfuscation des adresses IP (IPv4/IPv6) pour la protection de la vie privée et l'analyse sécurisée. #Privacy #IETF #Crypto #rgpd datatracker.ietf.org/doc/draft-de... implémentation PHP : github.com/jedisct1/php...

We still need help getting early access to Android 16 sources prior to the stable release in June. Every mainstream Android OEM has it. We're currently spending significant time on reverse engineering Android 16 Beta releases. It's a huge waste compared to having what we need.

Top, du coup ça veut qu’on arrête les conneries avec M$ ? Et qu’on fait enfin briller la tech open source française ?

FrankenPHP is now officially supported by the PHP Foundation, the project repository will be moved to the PHP organization on GitHub, and the collaboration between the PHP project, the Caddy web server, and @les-tilleuls.coop will intensify even further! les-tilleuls.coop/en/blog/fran...

Made a little web server to unlock and mount encrypted ZFS datasets using passkeys and age. What's neat is that the password never touches the client! Attackers need to compromise *first* the server, and *then* the passkey. It's delightfully little code. https://github.com/FiloSottile/mostly-harml

If you want to see GrapheneOS continue, please help us get early access to Android 16 sources before the end of the month. We ideally need all of it so we can do early builds for the emulator, but even just having a few of the most important repositories early would help a lot.

mycoria.org Pas mal ce réseau overlay chiffré de bout en bout. Plus simple à installer que yggdrasil

mycoria.org Pas mal ce réseau overlay chiffré de bout en bout. Plus simple à installer que yggdrasil

Redis is open source again: antirez.com/news/151

Nouvelle spec : ipcrypt : chiffrement et obfuscation des adresses IP (IPv4/IPv6) pour la protection de la vie privée et l'analyse sécurisée. #Privacy #IETF #Crypto #rgpd datatracker.ietf.org/doc/draft-de... implémentation PHP : github.com/jedisct1/php...

We are pleased to announce the completion of security audit of PHP core! Executed by @quarkslab.bsky.social in partnership with @ostifofficial.bsky.social and commissioned by the @sovereign.tech. Learn more: thephp.foundation/blog/2025/04...

Made a programmatic way to build dockerfiles in PHP ala Dagger.io. The end goal is to generated #symfony apps on the fly !

Made a programmatic way to build dockerfiles in PHP ala Dagger.io. The end goal is to generated #symfony apps on the fly !

Android Security Bulletin for April 2025 has 2 more vulnerabilities marked as being exploited in the wild. GrapheneOS fully prevented exploiting both vulnerabilities for locked devices, made both far harder to exploit while unlocked and already had both patched for a while too.

[𝗰𝗹𝗲𝘃𝗲𝗿 𝗰𝗹𝗼𝘂𝗱 𝗳𝗲𝘀𝘁.] What if privacy was the key to a sustainable business model? 🤔 @bayartb.bsky.social deconstructs the myth of ‘everything free’ and explores viable alternatives where ethics and performance don't clash. youtu.be/rLBtHrjS92k

Just 5 years ago these weren't common: - Easy email aliasing - Secure, Android Alts - Crossplatform E2EE TOTP - E2EE Google Photos Alts - Properly pre-hardened Firefox Forks - Robust, easy-to-use firewall tools - Evidence-based data removal services Stay Positive. Keep Fighting.

Dagger.io lance un nouveau shell qui mélange conteneurisation et les principes du shell unix. Cela à l'air très élégant.

What if the Unix shell stole the best ideas from Docker, Make and Nix? Native supports for containers and secrets; typed objects; declarative execution, sandboxed and cached by default... What if those were just standard shell features? 🤩 Well, we built it! dagger.io/blog/dagger-...

Dagger.io lance un nouveau shell qui mélange conteneurisation et les principes du shell unix. Cela à l'air très élégant.

Pouquoi arrêter d'utiliser le navigateur #Brave ? (Anglais) thelibre.news/no-really-do...

TinyKVM: sandbox pour executable ELF basée sur KVM. info.varnish-software.com/blog/tinykvm... (cc @imil.net )

Did you know that #docker compose accept a Dockerfile inline string as a build source ? If you combine this with depends_on you can run a docker compose file as a standalone workflow pipeline where each service is a workflow step. Anyone doing this already ? docs.docker.com/reference/co...

Saudi Arabia just bought Pokémon GO, and probably all of your location data with it. 🔗 www.404media.co/saudi-arabia...

As a preview of what's going to be possible in the upcoming release of GrapheneOS, here's a screenshot from a Pixel Tablet running desktop Chrome in a virtual machine with basic GPU acceleration via ANGLE on the host. The infrastructure is a lot more robust than the Terminal app.

Apple has released emergency security updates to patch a zero-day bug the company describes as exploited in "extremely sophisticated" attacks. www.bleepingcomputer.com/news/apple/a...