- Details
- Written by: MrHorda
- Category: Blog
- Hits: 6
A security researcher named log4j posted a thread revealing that they gained root shell access on a 2025 Samsung TV. The discovery came after noticing weirdly targeted ads. The firmware was AES encrypted with no visible keys. The researcher had to use UART and JTAG magic to proceed. The result was a full root shell. They found a privacy horror inside the device. The post hit 3.7 million views. It is a stark reminder that smart devices are not secure by default.
Read more: Samsung TVs Ship Root Exploits and Privacy Nightmares
- Details
- Written by: MrHorda
- Category: Blog
- Hits: 29
Steve Blank has spent the last month in London and says he has been listening to policymakers react to a wake up call delivered by Elon Musk. The short version: the United States shut off intelligence and throttled Starshield, the military variant of Starlink, for Ukraine. In the US that was a blip. In Europe it landed as proof of something people had been called paranoid for saying out loud.
Read more: Europe Stopped Treating the Kill Switch as a Conspiracy Theory
- Details
- Written by: MrHorda
- Category: Blog
- Hits: 30
Moonshot shipped Kimi K3.1 Pro today and the number that matters is not the parameter count. It is the release date. Full weights land on November 4. A 3T-class open-weight model with a 1-million-token context window is going to exist as a file you can download, and that is the first time this sentence has been true at this size.
Read more: Kimi K3.1 Pro Puts Open Weights on the Table November 4
- Details
- Written by: MrHorda
- Category: Blog
- Hits: 23
A developer at codeandcake.dev spent some time building a container runtime for fun and wrote up what it taught them about Docker. The post is short and better than most of the container explainers I have read, because it starts from the thing that never quite lands when you read documentation: a container is not a small virtual machine. It is a process on your kernel, with restrictions bolted onto it.
- Details
- Written by: MrHorda
- Category: Blog
- Hits: 22
There is a memory corruption bug in Google's Brotli decoder, it is rated 9.2 critical under CVSS v4.0, and it affects every version from 1.0.3 through 1.2.0. Node.js disclosed it on 22 October as Node2Shell. Python shipped an advisory for the same flaw the next day, because the PyPI packages Brotli and brotlicffi compile the same decoder. If your stack speaks HTTP and decompresses responses, this one is probably in your dependency tree right now.
Read more: Brotli 1.2.1 Patches Node2Shell, and Your Scanner Will Not Tell You