MidSpike

CVE-2022-23812

---

RIAEvangelist/node-ipc is malware / protestware

The RIAEvangelist/node-ipc module contains protestware peacenotwar.

Excerpt from RIAEvangelist/node-ipc:

as of v11.0.0 & v9.2.2 this module uses the peacenotwar module.

adamhooper

import ctypes
import os
import signal
from typing import Callable

libc = ctypes.CDLL("libc.so.6", use_errno=True)

# <linux/prctl.h>
PR_SET_NAME = 15
PR_SET_SECCOMP = 22

JonathonReinhart

#!/usr/bin/env python3
from __future__ import print_function
from tempfile import TemporaryFile
from binascii import hexlify

from ctypes import *

class StructHelper(object):
    def __get_value_str(self, name, fmt='{}'):
        val = getattr(self, name)

nicowilliams

I recently happened upon a very interesting implementation of popen() (different API, same idea) called popen-noshell using clone(2), and so I opened an issue requesting use of vfork(2) or posix_spawn() for portability. It turns out that on Linux there's an important advantage to using clone(2). I think I should capture the things I wrote there in a better place. A gist, a blog, whatever.

This is not a paper. I assume reader familiarity with fork() in particular and Unix in general, though, of course, I link to relevant wiki pages, so if the unfamiliar reader is willing to go down the rabbit hole, they should be able to come ou

pypt

import yaml
from yaml.constructor import ConstructorError

try:
    from yaml import CLoader as Loader
except ImportError:
    from yaml import Loader


def no_duplicates_constructor(loader, node, deep=False):

Eugeny

#include <lang/libc-ext.h>
#include <stdlib.h>
#include <string.h>
#include <unistd.h>
#include <limits.h>


char * normalize_path(char* pwd, const char * src, char* res) {
	size_t res_len;
	size_t src_len = strlen(src);