Crypt sentinel collision hands out root shells
Some musl-based Linux systems can hand an unauthenticated attacker a shell, possibly as root, because the password-hashing function's error marker for an overlong password is the same '*' value that already means 'account locked'. — sunshowers.io
$10 USB stick runs a silent home server
A passively cooled USB modem stick runs a full Linux distribution and enough containerized services to serve as a low-power, noiseless home server. — blog.bosscher.ch
GitHub adds Overview preview to pull requests
GitHub's opt-in Overview preview moves merge status and next available actions to the top of a pull request, condensing the merge box into a compact readiness summary. — github.blog
Apple blocks 100,000 words from autocomplete
Apple's predictive-text engine holds a hidden list of more than 100,000 words and phrases it will not complete, including political and sexual terms, so users must spell them out. — theguardian.com
Musician rebuilds rig with speech-recognized chords
A dance musician rebuilt his rhythm setup around a laptop, swapping hardware for code and adding speech recognition that calls chords by voice. — lesswrong.com