VK: Voorpagina

Volkskrant.nl biedt het laatste nieuws, opinie en achtergronden

Verslavende pijnstillers op de zwarte markt komen soms uit apotheken en ziekenhuizen

The Register

Biting the hand that feeds IT — Enterprise Technology News and Analysis

Dirty Frag gets a sequel as Fragnesia hands Linux attackers root-level access

Linux admins hoping Dirty Frag was a one-off horror from the kernel networking stack are about to have a considerably worse week. Researchers at Wiz have published an analysis of "Fragnesia," a Linux kernel local privilege escalation flaw discovered by William Bowling of the V12 security team that allows unprivileged users to gain root by corrupting page cache memory. The bug, tracked as CVE-2026-46300, has public proof-of-concept exploit code documented by V12 on GitHub that demonstrates the vulnerability being used against /usr/bin/su to spawn a root shell. According to Google-owned Wiz, the flaw sits in the Linux kernel's XFRM subsystem, specifically ESP-in-TCP processing tied to IPsec support. By carefully triggering the bug, attackers can modify protected file data in memory without changing the original files stored on disk. Wiz describes Fragnesia as part of the broader "Dirty Frag" bug family rather than a completely separate class of issue. Dirty Frag itself only surfaced days ago and was already attracting attention thanks to public exploit code, incomplete patch coverage, and unusually reliable privilege escalation. According to researcher Hyunwoo Kim, who uncovered Dirty Frag, "Fragnesia" emerged as an unintended side effect of patches shipped to fix the original Dirty Frag vulnerabilities, adding yet another entry to the long tradition of security fixes accidentally creating new security problems. As The Register previously reported, Dirty Frag followed hot on the heels of Copy Fail, another Linux kernel privilege escalation flaw that abused page cache handling to overwrite supposedly read-only files. Historically, local Linux privilege escalation bugs had a reputation for being unreliable, crash-prone, or fiddly enough that attackers needed good timing and a fair bit of luck to pull them off cleanly. Fragnesia looks different, as Wiz and V12 both say the exploit avoids race conditions entirely, making it far more predictable than older Linux root exploits like Dirty COW. That makes the bug much more useful after an initial compromise. An attacker who gains access to a system through phishing, stolen credentials, or a vulnerable cloud workload suddenly has a cleaner path to full root access. The V12 proof-of-concept repository is already public, while Linux vendors have started pushing out advisories and mitigation guidance. AlmaLinux warned that all supported releases are affected and urged administrators to patch quickly or disable unused ESP-related functionality where possible. Similar advisories have also been issued by Amazon Linux, CloudLinux, Debian, Gentoo, Red Hat Enterprise Linux, SUSE, and Ubuntu as distributors scramble to assess exposure across supported kernel versions. Microsoft also urged organizations to patch quickly, noting that though it had not observed in-the-wild exploitation so far, Fragnesia "can modify any file readable by the user, including [/]etc[/]passwd." The Linux networking stack is starting to look less like infrastructure and more like a root exploit vending machine. ®

De Speld

Uw vaste prik voor betrouwbaar nieuws.

PRO lanceert nieuwe merchandise

​PRO, voormalig GL-PvdA, heeft zojuist nieuwe merchandise op hun website gezet. Op de shirts en hoodies staan pitbulls en adelaars met de tekst ‘Defend saamhorigheid’

Op de website staan foto's van groepen breed staande duurzaamheidsadviseurs met zwarte balaclavas en trainingsbroeken in de nieuwe merchandise. “Bescherm saamhorigheid met trots en kracht”, staat in de beschrijving. “Saamhorigheid is van de saamhorigen!”

&


The Guardian

Latest news, sport, business, comment, analysis and reviews from the Guardian, the world's leading liberal voice

Space Jam review – Michael Jordan’s 90s merch-hocking basketball blockbuster rises again

The Jordan-fronted live-action/cartoon hybrid is 30 years old – and with its R Kelly soundtrack, it feels it. Cue Seinfeld’s Wayne Knight to rescue it for a second time

This 30th anniversary rerelease brings us the strangest piece of 90s pop-cultural detritus imaginable, at once surreally baffling and very dated – not least in its resounding soundtrack use of I Believe I Can Fly by R Kelly, the now disgraced singer currently serving a 20-year prison term for child sexual abuse. Space Jam is the live-action/cartoon hybrid and nakedly commercial brand partnership of NBA superstar Michael Jordan and the Warner Bros stable of Looney Tunes characters like Bugs Bunny and Elmer Fudd; this feature was developed from TV ads in which Jordan was paired with the hyperactive rabbit.

The idea is that an evil race of animated space aliens have captured the Looney Tunes squad and propose to enslave them, but sportingly agree not to if Bugs and the gang can defeat them at basketball. These villains use their evil mojo to give themselves an unfair advantage, stealing basketball skills from other live-action NBA stars such as Charles Barkley, before turning them into humanoids. So the Looney Tunes heroes and heroines approach Jordan (who has now swapped basketball for baseball, a sport at which he turns out to be no good at all) and ask for his help. And so Space Jam semi-accidentally conforms to the classic underdog sports template: the classy player, fallen on hard times, has to coach a bunch of lovable losers.

Continue reading...

War, inflation and Trump’s tariffs have shaken the US. Why does the stock market keep going up?

Wall Street has proved incredibly resilient to instability, and while consumer confidence has dipped, shares have soared

It was a dark Friday for Wall Street on 27 March. Oil prices were climbing and the war with Iran raged on. Markets responded accordingly, with the Dow and Nasdaq entering correction territory, falling more than 10% below their peak, after a month of selloffs.

Fast forward seven weeks later to 13 May, and the situation in Iran only looked marginally better. Oil prices were high, and the strait of Hormuz was still closed. Peace talks with Iran seemed tenuous, even with the pressures of high gas prices. Donald Trump on Wednesday said he is “not even a little bit” motivated by Americans’ financial situation to end the war.

Continue reading...

No, Richard Dawkins. AI is not conscious | Arwa Mahdawi

Dawkins appears to have gone from atheist to AI-theist: perhaps he doesn’t view AI as God, but he certainly seems to see it as God-like

Are you there God? It’s me, Arwa. I’ll be quite honest, I’m afraid I’ve never been a believer. I agreed wholeheartedly with Richard Dawkins, the world’s most famous atheist, when he argued that belief in God is a “pernicious” delusion. But perhaps I should reconsider my position. Recent events have led me to question Dawkins’ judgment about life, the universe and everything.

Those recent events are the evolutionary biologist publicly concluding that AI may be conscious. In an op-ed, Dawkins recounted how he gave the Anthropic chatbot Claude the text of a novel he was writing. Dawkins writes: “He took a few seconds to read it and then showed … a level of understanding so subtle, so sensitive, so intelligent that I was moved to expostulate, ‘You may not know you are conscious, but you bloody well are!’”

Continue reading...

Blooming at the Zen temple

etsu2 has added a photo to the pool:

Blooming at the Zen temple

'Undercover econoom' Jona van Loenen OPNIEUW betrapt op plagiaat, nu ontslagen als columnist EW

auteurspagina jona van loenen bij ew

Volgende vraag voor de column van Sander Schimmelpenninck: bestaat Jona van Loenen wel? De 'undercover econoom', eerder door GeenStijl betrapt op nepnieuws, en door Dumpert op plagiaat, blijkt namelijk niet alleen grappen van anderen te jatten, maar ook columns van zichzelf. Dat hebben wij overgeschreven van Jan Dijkgraaf, die ontdekte dat Van Loenen bij EW zijn eigen opiniestuk uit 2024 in het Parool (ook nog een slecht stuk trouwens, Van Loenen meldt nergens dat het door hem bepleite maandelijks betalen van vakantiegeld nu gewoon al mag en blijkt ook nog het Nibud selectief te citeren) als column had ingeleverd. EW-baas Hella Hueck (aka het Zonnetje in Huis) tegen Dijkgraaf: "EW heeft vastgesteld dat Jona van Loenen afgelopen maand een column heeft aangeleverd die twee jaar eerder al in een krant was gepubliceerd. EW verwacht van haar columnisten originele en exclusieve bijdragen. Het opnieuw aanleveren van eerder gepubliceerd werk voldoet niet aan die norm. Daarom is besloten de samenwerking per direct te beëindigen. De column is niet gepubliceerd." Fun fact: op zijn eigen substack kijkt Van Loenen niet zo nauw, en heeft hij het stuk alsnog opnieuw gepubliceerd. Als we het Briefje van Jan goed lezen heeft Van Loenen geen gebruik gemaakt van de mogelijkheid tot wederhoor, wat hem niet alleen een dief maakt, maar ook een lafbek. Kortom, de ideale talkshowgast.

De vorige keer

Social

MetaFilter

The past 24 hours of MetaFilter

Kickstarter: Back on Their Bullshit: 'Adult' Content Guidelines Overhaul

Kickstarter is Back on Their Bullshit: 'Adult' Content Guidelines Overhaul "Kickstarter Policy Change Over Adult Content, Comic Creators Affected" - Bleedingcool.com Kotaku also briefly covered this news

Pay Close Attention to Who gets to define what is and isn't 'Adult' Content. If you don't see the pattern, you aren't paying close enough attention. Kickstarter official Content Rules in Full Mature Content Section: We do not allow: - Any project specifically stating it or the rewards being offered are being created for sexual pleasure. - Any project that distributes or enables distribution of pornographic content. - Any project that seeks funding for receiving or providing sexual services or spaces that offer sexual services. - Any project that promotes, glorifies, or praises sexual or abusive content or language that is coercive, degrading, humiliating, or otherwise sexually exploitative or abusive. For example: derogatory terminology ("slut", "whore", "MILF/DILF", etc.) and explicitly violent (rape fantasy, etc.) - Illegal content (bestiality, incest, etc.) - Child Sexual Exploitation and Abuse Material. Kickstarter takes the protection of children and vulnerable populations very seriously. We prohibit any and all sexual content and nudity of actual, or inferred, minors and vulnerable persons. If we detect or are alerted to sexually explicit content involving underage persons, we will report it to the National Center for Missing & Exploited Children (NCMEC or other equivalent law enforcement or designated reporting body, as required by applicable law). - Photographs, photo-realistic depictions, printed models, sculpture, and illustrations of: - Sex acts or implied sex acts, inclusive of masturbation. - Nudity inclusive of female nipples/areolas, genitalia, anuses, gluteal cleft (buttocks). - Implied nudity where the subject is wearing lingerie, fetish wear, or clothing that is see-through or very tight and shows human genitalia, the anus, or the nipple/areola of female breasts. - Sexual wellness products that: -- Are explicitly designed for sexual stimulation through insertion or penetration, or are intended to have body parts inserted into them. -- Are marketed or presented primarily for sexual gratification in a manner that creates heightened safety or moderation concerns. - Dating or meet up type websites, applications and other software. We do allow: - Romance/"spicy" literature, including comic books - Sexual wellness products that are not designed for insertion or penetration and are not marketed primarily for sexual gratification. Examples may include lubricants, nipple jewellery, and other intimate items such as bras and underwear. - Any photographs or illustrations containing: - Revealing photographs in a non-sexual setting. Examples of this are: a model in swimwear or an actor in their boxers getting ready for work. - Intimate acts that are not explicitly sex acts. Examples of this are: two people kissing, two people cuddling, etc. - Nudity (breasts, genitalia, anuses, gluteal cleft/buttocks) found in projects that are portrayed in a non-sexualized, scientific, educational, or documentary style where the focus is not on genitalia or reproductive organs. - Kickstarter may still restrict content that is presented in a sexualized, exploitative, or otherwise harmful manner, even if it falls within an otherwise permitted category. Anti-evasion / anti-circumvention Creators may not evade any of these rules through cropped, blurred, obscured, misleadingly labeled, or otherwise disguised content. Interestingly, this is from the Backerkit Creator FAQ: "Adult content is allowed on BackerKit, but: - It must be clearly labeled, restricted to 18+, and presented responsibly. - Non-consensual, exploitative, or otherwise harmful content is strictly prohibited." Hope this stays that way. Backerkit is the largest alternative to Kickstarter for for English Language crowd funded projects

Kickstarter: Back on Thier Bullshit: 'Adult' Content Guidelines Overhaul

Kickstarter is Back on Thier Bullshit: 'Adult' Content Guidelines Overhaul "Kickstarter Policy Change Over Adult Content, Comic Creators Affected" - Bleedingcool.com Kotaku also briefly covered this news

Pay Close Attention to Who gets to define what is and isn't 'Adult' Content. If you don't see the pattern, you aren't paying close enough attention. Kickstarter official Content Rules in Full Mature Content Section: We do not allow: - Any project specifically stating it or the rewards being offered are being created for sexual pleasure. - Any project that distributes or enables distribution of pornographic content. - Any project that seeks funding for receiving or providing sexual services or spaces that offer sexual services. - Any project that promotes, glorifies, or praises sexual or abusive content or language that is coercive, degrading, humiliating, or otherwise sexually exploitative or abusive. For example: derogatory terminology ("slut", "whore", "MILF/DILF", etc.) and explicitly violent (rape fantasy, etc.) - Illegal content (bestiality, incest, etc.) - Child Sexual Exploitation and Abuse Material. Kickstarter takes the protection of children and vulnerable populations very seriously. We prohibit any and all sexual content and nudity of actual, or inferred, minors and vulnerable persons. If we detect or are alerted to sexually explicit content involving underage persons, we will report it to the National Center for Missing & Exploited Children (NCMEC or other equivalent law enforcement or designated reporting body, as required by applicable law). - Photographs, photo-realistic depictions, printed models, sculpture, and illustrations of: - Sex acts or implied sex acts, inclusive of masturbation. - Nudity inclusive of female nipples/areolas, genitalia, anuses, gluteal cleft (buttocks). - Implied nudity where the subject is wearing lingerie, fetish wear, or clothing that is see-through or very tight and shows human genitalia, the anus, or the nipple/areola of female breasts. - Sexual wellness products that: -- Are explicitly designed for sexual stimulation through insertion or penetration, or are intended to have body parts inserted into them. -- Are marketed or presented primarily for sexual gratification in a manner that creates heightened safety or moderation concerns. - Dating or meet up type websites, applications and other software. We do allow: - Romance/"spicy" literature, including comic books - Sexual wellness products that are not designed for insertion or penetration and are not marketed primarily for sexual gratification. Examples may include lubricants, nipple jewellery, and other intimate items such as bras and underwear. - Any photographs or illustrations containing: - Revealing photographs in a non-sexual setting. Examples of this are: a model in swimwear or an actor in their boxers getting ready for work. - Intimate acts that are not explicitly sex acts. Examples of this are: two people kissing, two people cuddling, etc. - Nudity (breasts, genitalia, anuses, gluteal cleft/buttocks) found in projects that are portrayed in a non-sexualized, scientific, educational, or documentary style where the focus is not on genitalia or reproductive organs. - Kickstarter may still restrict content that is presented in a sexualized, exploitative, or otherwise harmful manner, even if it falls within an otherwise permitted category. Anti-evasion / anti-circumvention Creators may not evade any of these rules through cropped, blurred, obscured, misleadingly labeled, or otherwise disguised content. Interestingly, this is from the Backerkit Creator FAQ: "Adult content is allowed on BackerKit, but: - It must be clearly labeled, restricted to 18+, and presented responsibly. - Non-consensual, exploitative, or otherwise harmful content is strictly prohibited." Hope this stays that way. Backerkit is the largest alternative to Kickstarter for for English Language crowd funded projects