@ravensrod 👋

@dgar
The word, "ew" is in their weird & F-ed up handle but their lack of understanding of Mastodon / the Fediverse is scary.

@dgar 👋

Update on the 9.8 CVSS TCP/IP RCE in the Linux kernel (CVE-2026-98432): we've detected what appears to be a threat actor activity scanning the entire internet for exposed affected systems. Our own scanning also suggests that the number of potential targets is high, therefore there is an increased likelihood of threat actors attempting to develop exploits for the vulnerability.

while CVE-2026-98432 is believed to require MPTCP to be enabled in the kernel, as well as a listening app/service which binds an MPTCP socket, which many have suggested should be rare, several kernels including Debian enable MPTCP by default.

Additionally, Go 1.24+ binds MPTCP sockets by default if the option is enabled in the kernel, so anything built on top of Go (including Caddy) will create the required MPTCP listener.

The mitigation of setting net.mptcp.enabled=0 disabled MPTCP, but does not apply to existing sockets, so any applications that have bound MPTCP sockets need to be restarted, otherwise the system remains exploitable.

You can check if your server is running any MPTCP listeners with the following command: sudo ss -Mlnp

On 2026-10-30 our preliminary internet-wide scan of port 443 confirmed that there are approximately 2,102,043 servers that are successfully reachable via an MPTCP connection. A deeper scan which attempts to connect to each endpoint on port 443 and negotiate a full TLS connection with MPTCP enabled returned about 762,774 systems.

Neither scan can confirm that these are unpatched kernels, just total exposure, but it's a lot more systems than expected. Since a valid HTTP connection is not required to exploit the vulnerability, the total attack surface is likely closer to the 2.1 million number than the 763k one.

As of today (2026-11-02), we've picked up several residential proxies and VPNs scanning the internet on port 443 using MPTCP-enabled connections. Since regular scanners do not negotiate MPTCP by default, and no data is being sent to the HTTP server over 443, we strongly suspect this activity is scanning for CVE-2026-98432 specifically. The use of residential proxies and RU-based VPN servers suggests that this is likely threat actor scanning, rather than security researchers.

Currently there are no known publicly available remote code execution exploits, but there are several denial of service proof-of-concepts floating around. This code gives threat actors a starting point to begin attempting to weaponize the vulnerability. Building exploits for the vulnerability is reported to be extremely difficult, but several state-sponsored threat actors likely have the resources required to succeed.

Woman allegedly trafficked to Balmoral by Epstein was ‘travelling massage therapist’, FBI told

#News

https://www.independent.ie/world-news/woman-allegedly-trafficked-to-balmoral-by-epstein-was-travelling-massage-therapist-fbi-told/a/163987026.html

@somebody this guy knows what's up https://fosstodon.org/@leeg/117547133281575772

@ai6yr @wordshaper UK and EU are making heat pump driers compulsory because they save so much energy, much of it at grid peak demand times. Though we used to have a combined washer/drier, they tend to be much less efficient so should be avoided if possible.

But we haven't used one at all for many years, instead line drying, or indoors on a clothes horse near an MHRV when outdoors is not possible.

@hipsterelectron don't make me get my blackboard out

@thomholwerda

Slowly rediscovering sanity, I see? Nice and welcome to the fam!

Good morning fellow Mastos and hello Tuesday. It's pilates day, so Wesley and I will tag along with MrsD, and have a walk instead. After that hour or two, there might be a café involved, maybe, perhaps...

Have yourselves a very jolly day, whatever you are doing. Have fun, have laughs, have a conversation with a stranger today. Take care.

Today's photo is Linn Falls at Aberlour, from a week or two ago.

@mcc hahaha omfg. this in no way will backfire on people who are attempting to be visible and influence public opinion

@Screwtapello This leads to some fun shit, such as in my case, I bought a USB-C hub that's video-capable. But it's only video-capable if it's _sinking_ power from a monitor (and thus is the source for the monitor's video signal). Any other combo, the hub cannot drive a monitor.

But why bother explaining this to the user before buying? Or in the instructions? Why not have them go through Reddit posts to find the gotcha?!

@hipsterelectron don't make me get my blackboard out

"Abdul #ElSayed, the #Democrat US #Senate #candidate in #Michigan, refused to backpedal his support of #trans people’s #civilRights when questioned about it by #conservative commentator Ross Douthat in a #60Minutes interview that aired yesterday"

https://www.lgbtqnation.com/2026/11/abdul-el-sayed-stands-up-for-trans-people-their-rights-in-hostile-60-minutes-interview/

👏 👏 👏

#vote, idiots

it matters

#transRights

@somebody this guy knows what's up https://fosstodon.org/@leeg/117547133281575772

I've been dogfooding Sup for a few weeks, and I'm super pumped to start onboarding early testers!

#Sup

🎵 #NowPlaying on https://labr.online

🎵 Midday Workday Chill Mix 01
🎤 Brother Soul

#LABR #radio #Fediradio #communityradio #fediwave #music #dj #mixes #house #hiphop #rnb #rock

@hipsterelectron well the ACM also conveniently omitted his actual thrust from their hagiography didn't they