Daily Shaarli

All links of one day in a single page.

December 22, 2023

SMTP Smuggling - Spoofing E-Mails Worldwide - SEC Consult
thumbnail

New technique for SMTP smuggling... vulnerable servers then allow to spoof while still passing DMARC checks properly. Check your providers and server configuration.

Memory Safety is a Red Herring

Very interesting musing about undefined behaviors and language constraints. This is a bit Rust focused for obvious reasons but is also looking at what other languages have been doing.

Do we need to rethink what free software is?

A bit of an older article I'm bumping into again. It lays out fairly well the current limits and issues with Free Software as it is defined today. I'm unconvinced it can be solved via licenses but the debate needs to happen... I feel that somehow it's too much ignored.

PowerInfer: Fast Large Language Model Serving with a Consumer-grade GPU

Interesting inference engine. The design is clever with an hybrid CPU-GPU approach to limit the memory demand on the GPU and the amount of data transfers. The results are very interesting, especially surprising if the apparently very limited impact on the accuracy.

Google OAuth is broken (sort of) - Truffle Security
thumbnail

Interesting finding. This shows a potential issue in how identities are verified by providers.