terrorobe

Manifesto for Post-Local-Kernel Security

We are uncovering better ways of shipping systems by admitting the obvious:

The local kernel boundary is not a security model.
It is a bug backlog with a syscall table.

Through this work we have come to value:

Small blast radius over large excuses

terrorobe

import type { ExtensionAPI, ExtensionContext, SessionEntry, SessionMessageEntry } from "@mariozechner/pi-coding-agent";
import { copyToClipboard } from "@mariozechner/pi-coding-agent";

/**
 * Missing vs upstream branch (requires core changes):
 * 1) Inline code-block labels in assistant messages:
 *    - @mariozechner/pi-tui: add MarkdownOptions + code-block hooks/labels in
 *      packages/tui/src/components/markdown.ts and export via packages/tui/src/index.ts.
 *    - @mariozechner/pi-coding-agent: wire registry + label rendering in
 *      packages/coding-agent/src/modes/interactive/components/assistant-message.ts and

terrorobe

fafafa

terrorobe

icu (52.1-8+deb8u7) jessie-security; urgency=high

  * Backport upstream security fix for CVE-2017-15422: Persian calendar
    integer overflow (closes: #892766).

 -- Laszlo Boszormenyi (GCS) <gcs@debian.org>  Wed, 14 Mar 2018 18:28:21 +0000

icu (52.1-8+deb8u6) jessie; urgency=high

  * Backport upstream security fix for CVE-2017-14952: double free in

terrorobe

% numastat -m

Per-node system memory usage (in MBs):
Token Node not in hash table.
Token Node not in hash table.
                          Node 0           Total
                 --------------- ---------------
MemTotal                 7853.46         7853.46
MemFree                   274.07          274.07
MemUsed                  7579.39         7579.39

terrorobe

admin@gheaws-michaelrenner-at-primary:~$ free -m
             total       used       free     shared    buffers     cached
Mem:         15294      13549       1744          0        419       2293
-/+ buffers/cache:      10835       4458
Swap:            0          0          0
admin@gheaws-michaelrenner-at-primary:~$ free --version
free from procps-ng 3.3.9
admin@gheaws-michaelrenner-at-primary:~$

terrorobe

Reading package lists...
Building dependency tree...
Reading state information...
NOTICE: 'systemd' packaging is maintained in the 'Git' version control system at:
git://anonscm.debian.org/pkg-systemd/systemd.git
Need to get 3,135 kB of source archives.
Get:1 http://security.debian.org/ jessie/updates/main systemd 215-17+deb8u8 (dsc) [3,804 B]
Get:2 http://security.debian.org/ jessie/updates/main systemd 215-17+deb8u8 (tar) [2,889 kB]
Get:3 http://security.debian.org/ jessie/updates/main systemd 215-17+deb8u8 (diff) [243 kB]
dpkg-source: info: extracting systemd in systemd-215

terrorobe

admin@gheaws-michaelrenner-at-replica:~$ sudo ls -la /data/user/mysql/
total 917180
drwx------  7 mysql mysql      4096 Oct 12 14:42 .
drwxr-xr-x 21 root  root       4096 Oct 11 09:41 ..
-rw-r--r--  1 root  root  309494019 Oct 12 14:37 database_seed_9fad21ae-0969-11e7-b01b-0a43d10d6233.sql

# What do you expect this to do
$ sudo rm -f /data/user/mysql/database_seed*.sql

terrorobe

-- 7 Billion Humans (2059) --
-- 20: Reverse Line --

if w == nothing or
 e == nothing:
	step s
	pickup c
	if e == hole:
		jump a
	endif

terrorobe

mysql> show variables like '%character%';
+--------------------------+----------------------------+
| Variable_name            | Value                      |
+--------------------------+----------------------------+
| character_set_client     | utf8mb4                    |
| character_set_connection | utf8mb4                    |
| character_set_database   | utf8mb4                    |
| character_set_filesystem | binary                     |
| character_set_results    | utf8mb4                    |
| character_set_server     | utf8mb4                    |