4 links, newest first.
bobdahacker.com
every note-taking bot you invite to a call gets a full copy of everything said in it.
seclists.org
Tavis Ormandy's Full Disclosure post on CVE-2010-3847: glibc's dynamic linker expands $ORIGIN in LD_AUDIT for setuid binaries, which a hardlink trick turns into local root.
eli.thegreenplace.net
Walks through adding an until statement to CPython, touching the grammar, the AST, the bytecode compiler and the symbol table.
linuxgazette.net
A walkthrough of building a Linux process that even root cannot stop, using a loop-mounted ISO, an inittab respawn entry and a patched init.
This site counts visits with cookieless analytics, and uses Google Analytics only if you accept. See thecookie andprivacy policies.