Security

리눅스 커널의 cleanup 루틴과 syscall 루틴의 방향 차이로 생기는 Use-After-Cleanup 취약점, dPair 개념, 그리고 pty를 이용한 exploit 가능성 정리.

Tried to path-traverse my own homework upload API. It held up, but only because of a timestamp prefix I never meant as a security thing.

An nginx 400 felt like a fix. send_from_directory felt like a fix. Then a different endpoint handed me /etc/passwd, and the real question was how bad that actually is.

cert.crt, chain_cert.crt, root_cert.crt and a .key. I’d installed them a dozen times without knowing why there were four, so I finally sat down and worked it out on my own server.