But they know that. And you do too.

Duplicitous.

A big heyooo to the catholic soldiers out there, doin their thang for Jehovah. You losers are wonderfully corrupt and shortsighted. Makes being a Leftist real easy and alot of fun.

Happy May Day Comrades!

All inspired by this bit of Cath-o-lic propaganda about law and pedorder. I masturbated in the shower for you folks, and came up with the title of this post.

Source: https://www.smbc-comics.com/index.php

Credits: Saturday Morning Breakfast Cereal

xkcd #3240: Bottle

Title text:

"I know it seems impossible, but the trick is that I sailed in here when I was very young."

Transcript:

Transcript will show once it’s been added to explainxkcd.com

Source: https://xkcd.com/3240/

explainxkcd for #3240

Republicans in Congress voted to fund the Department of Homeland Security Thursday, effectively ending the 76-day shutdown of the department.

The bill, passed by a voice vote in the House, is a win for Democrats, as it still includes no money for ICE or Border Patrol, and is now headed to President Trump’s desk to be signed into law. House Speaker Mike Johnson reportedly decided to finally support the bill after a private meeting with his fellow Republican leaders earlier in the day, where they agreed that the situation couldn’t continue.

The GOP will still try to fund ICE through the reconciliation process, which takes much longer but only requires a simple majority in both chambers of Congress.

https://www.railadvent.co.uk/2023/04/telford-steam-railway-appeals-to-restore-steam-tram-thomas.html

President Donald Trump on Friday signed an executive order broadening U.S. sanctions against the Cuban government, two White House officials told Reuters. He seeks to put more pressure on Havana, following his administration's challenge to Venezuela's leadership. The new sanctions target people, entities and affiliates supporting Cuba's security apparatus, or those complicit in corruption or serious human rights violations, officials said. Government agents, officials or supporters are also included. It was not immediately clear which specific people or entities were impacted by the sanctions under the order, which Reuters first reported. The order authorizes secondary sanctions for conducting or facilitating transactions with those targeted under the order, officials said.

Cybersecurity researchers have disclosed details of a Linux local privilege escalation (LPE) flaw that could allow an unprivileged local user to obtain root.

The high-severity vulnerability tracked as CVE-2026-31431 (CVSS score: 7.8) has been codenamed Copy Fail by Xint.io and Theori.

"An unprivileged local user can write four controlled bytes into the page cache of any readable file on a Linux system, and use that to gain root," the vulnerability research team at Xint.io and Theori said.

At its core, the vulnerability stems from a logic flaw in the Linux kernel's cryptographic subsystem, specifically within the algif_aead module. The issue was introduced in a source code commit made in August 2017.

Successful exploitation of the shortcoming could allow a simple 732-byte Python script to edit a setuid binary and obtain root on essentially all Linux distributions shipped since 2017, including Amazon Linux, RHEL, SUSE, and Ubuntu. The Python exploit involves four steps -

• Open an AF_ALG socket and bind to authencesn(hmac(sha256),cbc(aes))
• Construct the shellcode payload
• Trigger the write operation to the kernel's cached copy of "/usr/bin/su"
• Call execve("/usr/bin/su") to load the injected shellcode and run it as root

While the vulnerability is not remotely exploitable in isolation, a local unprivileged user can get root simply by corrupting the page cache of a setuid binary. The same primitive also has cross-container impacts as the page cache is shared across all processes on a system.

cross-posted from: https://lemmy.world/post/46310733

Cybersecurity researchers have disclosed details of a Linux local privilege escalation (LPE) flaw that could allow an unprivileged local user to obtain root.

The high-severity vulnerability tracked as CVE-2026-31431 (CVSS score: 7.8) has been codenamed Copy Fail by Xint.io and Theori.

"An unprivileged local user can write four controlled bytes into the page cache of any readable file on a Linux system, and use that to gain root," the vulnerability research team at Xint.io and Theori said.

At its core, the vulnerability stems from a logic flaw in the Linux kernel's cryptographic subsystem, specifically within the algif_aead module. The issue was introduced in a source code commit made in August 2017.

Successful exploitation of the shortcoming could allow a simple 732-byte Python script to edit a setuid binary and obtain root on essentially all Linux distributions shipped since 2017, including Amazon Linux, RHEL, SUSE, and Ubuntu. The Python exploit involves four steps -

• Open an AF_ALG socket and bind to authencesn(hmac(sha256),cbc(aes))
• Construct the shellcode payload
• Trigger the write operation to the kernel's cached copy of "/usr/bin/su"
• Call execve("/usr/bin/su") to load the injected shellcode and run it as root

While the vulnerability is not remotely exploitable in isolation, a local unprivileged user can get root simply by corrupting the page cache of a setuid binary. The same primitive also has cross-container impacts as the page cache is shared across all processes on a system.

Scumbag Resolve

Is a carpet cleaner

Can't spray downwards

Its fans just don't want to let go.

source