Articles by jwilk
90

A “frozen” dictionary for Python (lwn.net)

1

Explicit Lazy Imports for Python (lwn.net)

2

Linux's Missing CRL Infrastructure (lwn.net)

1

Understanding Debian's Security Processes (lwn.net)

113

Libxml2's "no security embargoes" policy (lwn.net)

9

Slowing the flow of core-dump-related CVEs (lwn.net)

1

Hardening fixes lead to hard questions (lwn.net)

1

Local information disclosure in apport and systemd-coredump (openwall.com)

3

ISC has disclosed three vulnerabilities in Kea (openwall.com)

2

Recent Disruptive Changes from Setuptools (lwn.net)

1

Dancing Pigs (wikipedia.org)

1

Cyber Squirrel 1 (2019) (cybersquirrel1.com)

66

Some __nonstring__ Turbulence (lwn.net)

43

Oxidizing Ubuntu: adopting Rust utilities by default (lwn.net)

1

Tim Peters returns to the Python community (lwn.net)

99

Debian opens a can of username worms (lwn.net)

4

Python PGP proposal poses packaging puzzles (lwn.net)

13

RFC 9580: OpenPGP (rfc-editor.org)

9

The Unicode Standard, Version 16.0 (unicode.org)

1

Another try for getrandom() in the vDSO (lwn.net)

100

Debian's /tmpest in a teapot (lwn.net)

16

AI Will Increase the Quantity–and Quality–of Phishing Scams (schneier.com)

2

Linguistic Capture Errors (upenn.edu)

1

Debian dismisses AI-contributions policy (lwn.net)

42

Gentoo bans AI-created contributions (lwn.net)

1

Make your own backdoor: CFLAGS code injection, Makefile injection, pkg-config (openwall.com)

6

Free software's not-so-eXZellent adventure (lwn.net)

1

CVE-2024-28085: Escape sequence injection in util-linux wall (openwall.com)

2

Insecurity and Python Pickles (lwn.net)

65

Forgejo makes a full break from Gitea (lwn.net)

1

Sudo and Its Alternatives (lwn.net)

3

Growing Pains for Typing in Python (lwn.net)

6

The odd saga of CVE-2012-5639 (lwn.net)

1

The return of None-aware operators for Python (lwn.net)

2

Apple and some Linux distros are open to Bluetooth attack (theregister.com)

8

Implicit Keyword Arguments for Python (lwn.net)

5

Hyphens, minus, and dashes in Debian man pages (lwn.net)

15

Squid Caching Proxy Security Audit: 55 vulnerabilities and 35 0days (megamansec.github.io)

1

The GIF Pronunciation Page (olsenhome.com)

2

The Bogus CVE Problem (lwn.net)

18

Altering Python attribute handling for modules (lwn.net)

0

Kernel Security Reporting for Distributions (lwn.net)

3

CPython without a Global Interpreter Lock (lwn.net)

2

Unmaintained Filesystems as a Threat Vector (lwn.net)

12

Flags for fchmodat() (lwn.net)

2

Debian Looks Forward to 2038 (lwn.net)

1

Hardening Magic Links (lwn.net)

3

Mounting images inside a user namespace (lwn.net)

1

Seeking the endgame for Debian's /usr merge (lwn.net)

2

Falsehoods Programmers Believe About Falsehoods Lists (2016) (deldycke.com)

38

Faster CPython at PyCon, part two (lwn.net)

102

Faster CPython at PyCon, part one (lwn.net)

2

Namespaces for the Python Package Index (lwn.net)

1

Ransomware attacks have entered a heinous new phase (wired.com)

3

Free Software During Wartime (lwn.net)

2

2022 Transparency Report (github.blog)

1

CVE-2022-46663: less -R filtering bypass (openwall.com)

4

Sudoedit can edit arbitrary files (sudo.ws)

28

Fedora's tempest in a stack frame (lwn.net)

4

PyTorch and the PyPI Supply Chain (lwn.net)

1

Code execution through MIME-type association of Mono interpreter (openwall.com)

0

Welcome to 2023 (lwn.net)

2

A library implementing C++'s custom literal suffixes using pure Python (github.com/rocketrace)

3

Show HN: zygolophodon: CLI for reading Mastodon posts (no account needed) (github.com/jwilk)

2

Wrapping Up 2022 (lwn.net)

40

Systemd-coredump: CVE-2022-4415: local information leak (openwall.com)

1

The return of lazy imports for Python (lwn.net)

3

Typed Pipes in Every Shell (joeyh.name)

2

CVE-2022-4170: rxvt-unicode code execution via background OSC (openwall.com)

37

Xterm code execution via font ops (openwall.com)

2

Would you like signs with those chars? (lwn.net)

2

Various Linux Kernel WLAN Security Issues (RCE/DOS) Found (openwall.com)

2

A Python security fix breaks (some) bignums

2

Sdate – never ending September date

2

Compiling Rust with GCC: An Update

2

What's in a (Type) Name?

1

123ADV-001: Stack Buffer Overflow in Lotus 1-2-3 R3 for Unix/Linux

1

Terminal Guide

1

PyPI packages hijacked after developers fall for phishing emails

80

Tornado Cash and collateral damage

1

A security-module hook for user-namespace creation

50

Rsync client-side arbitrary file write vulnerability