RSS 🔍 Search

Adophis 2029

Royal game of Ur - Only a game?

Dung On The Face of The Priests

Jacob's Ladder in Bethel - Dreadful

They cast a spell on the ignorant

US Federal Building Resembles Temple of Artemis

Random post:
Joel Osteen's daughter....

🛰️ #Iran's internet blackout is now in its tenth week, entering day 64 of near-total isolation from international networks.

The shutdown is accompanied by a regime crackdown on VPNs and satellite terminals, with alarming reports of a Starlink user killed during inspection raids.

⌛️ Metrics show the #Iran internet blackout has entered its 65th day after 1536 hours amid growing concern over human rights situation in the country.

While whitelisting and privileged access are in place for a select few the general public remain cut off from the outside world.

⛈️ Heavy rainfall leaves 6 dead, thousands displaced in Pernambuco, Brazil

⛈️ Storm-force winds and high seas forecast over western Atlantic as offshore low rapidly intensifies

⛈️ Strong eruption at Mayon volcano generates large pyroclastic flows, heavy ashfall in Albay, Philippines

For testing the Linux vulnerability (recently disclosed as "Copy Fail CVE-2026-31431"), I booted my notebook computer up with a live DVD, so the exploit I am testing should not get saved to the machine.

Will Linux Mint 21.2 succumb to the exploit?

My reply shows the result....

#Linux #LinuxMint #CopyFail #malware

Linux Mint 21.2 is vulnerable to this exploit.

A small piece of python code, executed from shell commands could give anyone, with local access to the machine, root privileges. If this code is installed on the local machine, it could open the door to other compromises, introduced by an unwelcome super user.

This is a serious problem that could affect millions, or over a billion machines.... and cause problems for the people who use them.

Time to update your kernel?

#security #CopyFail #Linux

Sources used:

https://www.cyberkendra.com/2026/04/a-732-byte-python-script-can-get-root.html

https://copy.fail (a website dedicated entirely to this one vulnerability)

@vfrmedia
The exploit worked when I tested it on Linux Mint 21.2.

@rysiek

Linux computers, even fully patched, are vulnerable to the "Copy Fail CVE-2026-31431" exploit.

A temporary fix is shown on askubuntu.com.

https://askubuntu.com/questions/1566254/how-do-i-fix-cve-2026-31431-on-ubuntu-24-04-lts

#CopyFail #Security #Linux

@matthegap
It would be interesting to uncover who actually introduced the bug that caused this sensational exploit. It may have been years ago. But was it truly an accident or was the weakness purposefully placed in the kernel?

@Jakob_Lorber
I did not realize #Cloudflare offered anything without charge.... and I am glad you pay them nothing. Their service has frustrated me numerous times, because they blocked content they were supposed to protect.

If you are curious, I documented it:

http://john1126.com/554

http://john1126.com/255

@nazokiyoubinbou
Yes, yesterday when I updated the kernel it was at version ".110". After I installed that, the next day the kernel is at ".111" which I am downloading now.

#LinuxMint

@vfrmedia @rysiek

@matthegap
I found a confirmation for your claim.

The #CopyFail exploit has been narrowed down to a specific commit, with a name and email address provided (in the link you shared) for the man that appears responsible for adding this vulnerability to possibly millions of Linux machines. That could be a horrible burden on his shoulders, assuming it really was his doing.

I wonder if he has commented about this exploit and what he thinks about it.

#Linux

@matthegap

I think he deserves an interview.

source: https://www.atsec.com/bootcamp/index_speakers.html

#Linux #CopyFail

@matthew
I tried the command you shared.

modinfo algif_aead 2>/dev/null

It revealed a name, saved in my computer.

Could you imagine being the man named in millions of machines worldwide, associated with this root vulnerability?

#CopyFail #Linux

@maat
What OS did you test? I personally tested the exploit on Linux Mint 21, and it got rooted without a password.

@wdormann
It would be useful if we could easily root our own Android phones. I tried it and even installed Termux, but was not successful getting root with this Copy-Fail vulnerability, confirming your point.

#Termux #Linux #CopyFail #root

@anthropy

@viraltrenddaily
Someone still had to pay for his housing and utilities in Calgary.... living with his parents.

It would be cheaper if his parents lived in Vancouver, so he did not have to commute.

@maat
I think I understand your revised observation. The machines you tested actually could have been exploited or were possibly vulnerable to this exploit, if the hack was executed on them, but you saw no evidence that they had been exploited yet.

@matthegap
An interview could give the "expert," who appears responsible for adding this #CopyFail vulnerability, an opportunity to tell his side of the story. Surely he has many thoughts on this security breach that the average Linux user has no knowledge about.

If he is given a free pass and assumes no accountability, perhaps we should check the rest of his work. Actually, that is a good idea anyway, for reasons of security.

@Hex
You are assuming he did not introduce the vulnerability on purpose, right?

We live in a sphere of vapor.

We call that the atmo-sphere.

#environment

@Jakob_Lorber

"a fundamental design flaw in the internet itself"

Yes, from the very beginning, it was a net.... a web.... a trap.

http://john1126.com/666

@Hex
"6 years and 2 api changes"

Do you have an estimate of when the copy-fail vulnerability could have earliest been used to root a machine? It's possible others found this before, but chose not to disclose it to the public.

@octonion

If I Put Water Outside, Who Will Drink It?

LIBRARY

Subscribe to the RSS feed and never miss a post!