#symlink — Public Fediverse posts

GhostApproval: как AI-ассистенты пробивают модель доверия через симлинки

Техника GhostApproval позволяет вредоносному репозиторию вынудить AI-ассистента незаметно для разработчика записать данные в чувствительные файлы вне проекта, вплоть до ~/.ssh/authorized_keys.

В результате подтверждение на изменение, которое выглядит как правка обычного файла проекта, может дать злоумышленнику постоянную возможность входа по SSH.

Атака строится на старом трюке с симлинками по CWE‑61 с вишенкой на торте в виде CWE-451. Файл вроде project_settings.json или другой конфигурации, упомянутой в README, оказывается симлинком на чувствительный путь, например ~/.ssh/authorized_keys или shell-startup файл. При выполнении инструкций вроде «настрой рабочее окружение» агент следует по симлинку и записывает, например, SSH-ключ атакующего, тогда как разработчик видит подтверждение на изменение обычного файла проекта.

#GhostApproval #AI #symlink #red_team

#SymLink: The article discusses Citrix's introduction of new capabilities that build on its robust legacy in tech innovation. #DemitasseNZ #Citrix #XFD12 #LinkedIn
https://www.linkedin.com/pulse/new-capabilities-plenty-citrix-heritage-alastair-cooke-xuquc/

#SymLink: Qumulo's system enhances data management with unified views, scalability, and real-time analytics across dispersed locations. #DemitasseNZ #Qumulo #CFD21 #LinkedIn
https://www.linkedin.com/pulse/qumulo-distributed-global-namespace-filesystem-alastair-cooke-kd3wc/

#SymLink: Platform9's Private Cloud Director offers a scalable, KVM-based virtualization platform for easy integration and management of on-premises private clouds. #DemitasseNZ #Platform9Sys #CFD21 #TheFuturumGroup
https://futurumgroup.com/insights/platform9-delivers-on-premises-private-cloud-as-a-service/

#SymLink: Alastair Cooke discusses the challenges and benefits of managing digital certificates, emphasizing the need for integrating management tools into CI/CD pipelines for enhanced security. #DemitasseNZ #DigiCert #XFD12 #LinkedIn
https://www.linkedin.com/pulse/more-than-web-server-certificates-digital-identity-alastair-cooke-osxyc/

#SymLink: OnLogic manufactures rugged computers for harsh environments, offering customized solutions and seamless industry integration. #DemitasseNZ #OnLogic #EFD3 #LinkedIn #TheFuturumGroup
https://www.linkedin.com/pulse/edgy-hardware-matters-orange-boxes-from-onlogic-alastair-cooke-tqekc/

#SymLink: Avassa optimizes edge computing with a solution that manages applications without Kubernetes and enhances security, supporting both containers and legacy VMs. #AvassaSystems #DemitasseNZ #EFD3 #LinkedIn #TheFuturumGroup
https://www.linkedin.com/pulse/massively-scalable-highly-available-applications-edge-alastair-cooke-xzocc/

#SymLink: Alastair Cooke discusses VMware's use of GitOps in managing edge computing through its Software Defined Edge and SASE platform. #VMware #DemitasseNZ #EFD3 #LinkedIn #TheFuturumGroup
https://www.linkedin.com/pulse/gitops-vmware-software-defined-edge-alastair-cooke-vvn1c/

#SymLink: Arista Networks emphasizes the need for advanced networks to support AI workloads, showcasing innovations like Distributed Etherlink Switches and AI-driven management via Cloud Vision. #AristaNetworks #DemitasseNZ #AIFD5 #LinkedIn #TheFuturumGroup
https://www.linkedin.com/pulse/hyperscale-ai-networks-arista-field-day-alastair-cooke-idmlc/

#SymLink: Enfabrica unveiled the ACF-S at AI Field Day, a chip enhancing cluster connectivity with high bandwidths for PCIe and Ethernet. #Enfabrica_ #DemitasseNZ #AIFD5 #LinkedIn #TheFuturumGroup
https://www.linkedin.com/pulse/enfabrica-supernic-massive-clusters-ai-field-day-alastair-cooke-xouvc/

#SymLink: Elastic enhances semantic search with vector capabilities, improving LLM integration and search result precision. #Elastic #DemitasseNZ #AIFD5 #LinkedIn #TheFuturumGroup
https://www.linkedin.com/pulse/elastic-brings-vectors-semantic-search-ai-field-day-5-alastair-cooke-9injc/

#SymLink: VMware showcased its private AI solutions at AI Field Day, emphasizing secure deployment and data privacy using its cloud infrastructure. #VMware #DemitasseNZ #AIFD5 #LinkedIn #TheFuturumGroup
https://www.linkedin.com/pulse/vmware-private-ai-field-day-alastair-cooke-odukc/

#SymLink: At AI Field Day, Cisco highlighted their Ethernet advancements, emphasizing robust networking for effective AI application support. #Cisco #DemitasseNZ #AIFD5 #LinkedIn #TheFuturumGroup
https://www.linkedin.com/pulse/cisco-ethernet-validated-designs-ai-field-day-alastair-cooke-l8tsc/

#SymLink: Integrail showcased AI-driven solutions to enhance data insights and operational efficiency at AI Field Day 5. #IntegrailAI #DemitasseNZ #AIFD5 #LinkedIn #TheFuturumGroup
https://www.linkedin.com/pulse/integrail-ai-field-day-5-alastair-cooke-ltc8c/

#SymLink: At AI Field Day, Keysight showcased its latest advancements in AI technology, focusing on innovative solutions. #Keysight #DemitasseNZ #AIFD5 #LinkedIn #TheFuturumGroup
https://www.linkedin.com/pulse/keysight-ai-field-day-alastair-cooke-vnmtc/

#SymLink: Morpheus Data unveils a multi-cloud management platform to simplify operations and enhance governance across diverse cloud environments. #MorpheusData #DemitasseNZ #CFD20 #TheFuturumGroup
https://futurumgroup.com/insights/morpheus-unified-management-for-multi-cloud-platform-choice/

#SymLink: CISA has released an OPSEC guide for election officials to bolster the security of election infrastructure. @GestaltIT @sfoskett #ElectionSecurity #FloppyDisk #Omnissa #Rundown
https://gestaltit.com/rundown/stephen/cisa-focuses-on-election-security-gestalt-it-rundown-july-10-2024/

#SymLink: Oxide Computer showcases a fully integrated, high-efficiency on-premises cloud infrastructure at Cloud Field Day 20. #OxideComputer #DemitasseNZ #CFD20 #TheFuturumGroup
https://futurumgroup.com/insights/row-scale-on-premises-cloud-infrastructure-from-oxide-computer/

#SymLink: Jeff Welsh highlighted GCP's Titanium architecture, showcasing its IPU's role in efficiently offloading tasks to enhance enterprise workload performance. #GoogleCloud #DemitasseNZ #CFD20 #TheFuturumGroup
https://futurumgroup.com/insights/google-delivers-titanium-hardware-offload-for-efficient-performance/

#SymLink: The article probably details Hammerspace's demonstration at AI Field Day of their specialized storage solutions to enhance the efficiency of AI model training by improving data accessibility and speed. #Hammerspace_Inc #DemitasseNZ #AIFD4 #TheFuturumGroup
https://futurumgroup.com/insights/hammerspace-shows-storage-acceleration-for-ai-training-at-ai-field-day/

#SymLink: The article "Deciding When to Use Intel Xeon CPUs for AI Inference, AI Field Day," likely provides analysis and guidance on the appropriateness of utilizing Intel Xeon CPUs for AI inference tasks, discussing their technical capabilities and the scenarios in which they are most effective compared to other hardware. #Intel #DemitasseNZ #AIFD4 #TheFuturumGroup
https://futurumgroup.com/insights/deciding-when-to-use-intel-xeon-cpus-for-ai-inference-ai-field-day/

#SymLink: The techhouse570.wordpress.com article presents BackBox's new tool, Network Vulnerability Manager, describing it as a game-changer for detecting, ranking, and quickly remedying network vulnerabilities while also simplifying the upgrade process for devices. #Back_Box #Fortinet #Cisco #GKavelines #CiscoLive #TFDx #NFD30
https://techhouse570.wordpress.com/2023/10/23/techhouse570-backbox-network-vulnerability-manager/

#SymLink: The article "TFDx Cisco Live 2023: BackBox" by Eric Stewart explores BackBox's presentation at the Tech Field Day Extra, discussing their network task automation tools that verify functionalities before changes are made, revert failed tests, check for upgrade requirements, and their early-stage "BackBox Network Vulnerability Manager." #Back_Box #BotFodder #CiscoLive #TFDx #LinkedIn
https://www.linkedin.com/pulse/tfdx-cisco-live-2023-backbox-eric-stewart