• 0 Posts
  • 304 Comments
Joined 2 years ago
cake
Cake day: June 19th, 2023

help-circle
  • It’s so user friendly. It tells you exactly what to do to solve the problem. Switch to a tty (if that even works on your system) and log in, type this long command from memory, making sure not to mistake those 0s for Os or the Unicode left single quote for back tick, restart your lockscreen, which of course you know how to do, and then come back. If that doesn’t work, start terminating some processes and praying.

    It says you can return using “ctrl+alt+F[N] where N is the tty number in the top left corner.” I can’t find my F0 key.



  • Some Unity games may be launched with a parameter that causes them to execute arbitrary code. It seems like it only makes sense on Android. Windows and Linux games can normally only be launched by a process with the same or greater privileges than the process being created, but on Android you can elevate privileges by invoking another app. In practical terms, another app can access the save data of your mobile games.

    There was also something about games that register to be launchable directly from a webpage, which would allow web sites to escape the browser sandbox, but it didn’t sound likely.














  • Giving a container access to the docker socket allows container escapes, but if you’re doing it on purpose with a service designed for that purpose there is no problem. Either you trust Watchtower to manage the other containers on your system or you don’t. Whether it’s managing the containers through a mounted docker socket or with direct socket access doesn’t make a difference in security.

    I don’t know if anybody seriously uses Watchtower, but I wouldn’t be surprised. I know that companies use tools like Argo CD, which has a larger attack surface and a similar level of system access via its Kubernetes service user.