OpenSSH on musl lets locked accounts accept any password
OpenSSH on musl-based Linux systems accepts any password longer than 256 characters for accounts meant to reject passwords entirely, including key-only users and root on default cloud images. The long-standing flaw can give attackers root on affected systems and is patched in a newer OpenSSH release. — sshhole.com
Kagi search now works without an account
Kagi Search now lets anyone search the web without an account, with the first 50 queries free and more granted after registering. The move removes the sign-up barrier that made the ad-free engine hard to recommend. — kagi.com
Microsoft Paint flaw enables remote code execution
Microsoft Paint contains an out-of-bounds read flaw that lets an unauthorized attacker execute code over a network. The high-severity vulnerability affects the current Windows drawing app. — cve.org
MangaLens model segments manga speech bubbles
MangaLens, a vision model built for manga pages, detects and segments speech bubbles with roughly 99 percent accuracy, enabling automated translation and accessibility features for comics. — huggingface.co
Kugelblitz is a Mac-native 3D Earth globe
Kugelblitz turns the Earth into a 3D globe and atlas on the Mac, draping open map data over real terrain and flying smoothly even on an M1, with no account required. — apps.metaebene.me