#symlink — Public Fediverse posts

GhostApproval: как AI-ассистенты пробивают модель доверия через симлинки

Техника GhostApproval позволяет вредоносному репозиторию вынудить AI-ассистента незаметно для разработчика записать данные в чувствительные файлы вне проекта, вплоть до ~/.ssh/authorized_keys.

В результате подтверждение на изменение, которое выглядит как правка обычного файла проекта, может дать злоумышленнику постоянную возможность входа по SSH.

Атака строится на старом трюке с симлинками по CWE‑61 с вишенкой на торте в виде CWE-451. Файл вроде project_settings.json или другой конфигурации, упомянутой в README, оказывается симлинком на чувствительный путь, например ~/.ssh/authorized_keys или shell-startup файл. При выполнении инструкций вроде «настрой рабочее окружение» агент следует по симлинку и записывает, например, SSH-ключ атакующего, тогда как разработчик видит подтверждение на изменение обычного файла проекта.

#GhostApproval #AI #symlink #red_team

GhostApproval bug shows AI coding agents can be tricked by decades-old symlink attacks

https://1ban.news/ghostapproval-ai-coding-agent-symlink-vulnerability-2026/
#1ban #ghostapproval #coding #agent #symlink #tech

В 2 раза ускорил компиляцию Unity на том же железе

Творите в Unity на Windows и страдаете от долгих компиляций? Инструкция как без вложений и разгона сократить время билда в 2 раза.

https://habr.com/ru/articles/1049556/

#unity #ryzen #xfs #webgl #ntfs #tmpfs #symlink #linux #il2cpp #билд

@carlton @sethmlarson And does the consensus against symbolic links arise from inexperience? Windows didn't let unprivileged users create symlinks in NTFS until Windows 10 build 14972 in 2018, and even then only if developer mode is on. Instead, Windows desktop users' experience since 1995 has been with shortcuts, which operate at the shell level, not the file system level.

#SymbolicLinks #symlink #NTFS

Now this is an interesting #Python problem. I don't know if it's a #bug, but it's a change in behaviour that I don't see documented.

I upgraded from #Debian 12/Bookworm to 13/Trixie, so the default Python3 changed from 3.11 to 3.13. A script of mine broke, because `pathlib.Path.is_mount()` changed behaviour when the path is a symlink (at least to a directory).

i.e. I'm testing a path that is a symlink. The symlink points to a directory. That directory *is* a mountpoint. The `.is_mount()` test in 3.11 returned True, while in 3.13 it returns False.

This seems wrong to me. Most path-manipulation functions transparently treat symlinks as if they were the pointed-to object unless you pass an option/flag specifically to say you want the symlink itself.

Gonna have to dig to see what else I can find.

#pathlib #path #is_mount #stdlib #behaviour #symlink #filesystem #mountpoint #mount

How to Clean Up Your Broken Symlinks: The Good Way and the Better Way

#linux #symlink

https://www.howtogeek.com/how-to-clean-up-your-broken-symlinks/

Explainer: inodes and inode numbers

https://web.brid.gy/r/https://eclecticlight.co/2025/10/04/explainer-inodes-and-inode-numbers/

The lack of #symlink timestamp handling in #RustLang std is a bit sad. 😢

La nueva actualización de Windows incluye un fallo de seguridad crítico https://blog.elhacker.net/2025/04/nueva-actualizacion-windows-symlink-bug-cve.html #symlink #Windows #cve

💡 Falla di sicurezza in WinRAR bypassa il MotW di Windows

https://gomoot.com/falla-di-sicurezza-in-winrar-bypassa-il-motw-di-windows/

#blog #bug #cve #falla #news #picks #sicurezza #symlink #tech #tecnologia #winrar #zip

#TIL about the `namei` tool which is sort of like #traceroute but for filesystem traversal.

This is especially useful on #nixos where you're frequently dealing with stuff that is multiple levels of symlinks deep.

It's probably already on your system because it's part of #utillinux; go try it out:

namei `which ls`

#namei #symlink #linux

#SymLink: In this video, Jon Myer asks the AppDev Field Day 2 delegates for their reaction to Codiac's presentation. #_JonMyer #CodiacIO #ADFD2 #Video #JABenedicic #MikeStanley #Mistwire #GuyCurriersFeed
https://www.youtube.com/v/Nmwm30rtGjs

#SymLink: Itential's network automation platform enables structured workflow creation with pre-checks, execution, verification, and real-time validations. #SPuluka #Itential #NFD36 #LinkedIn
https://www.linkedin.com/pulse/demo-creating-network-automation-workflow-itential-steve-puluka-encbe/

#SymLink: Learn how to install Nzyme on a WLANPi to monitor and enhance Wi-Fi security, detecting threats and malicious devices efficiently.
https://wifivitae.com/2024/12/06/howto-nzyme/

#SymLink: Codiac's updated container management platform enhances SDLC collaboration by simplifying Kubernetes complexities and improving DevOps integration. #WriterOfTech1 #CodiacIO #ADFD2 #PlatformEngineering
https://platformengineering.com/social-x/codiac-refreshes-container-management-across-sdlc-some-key-features-on-the-platform/

#SymLink: SC24 saw record attendance and spotlighted AI's growing influence in HPC, with a focus on sustainability and the debut of El Capitan as the fastest supercomputer.
https://blog.glennklockwood.com/2024/12/sc24-recap.html

#SymLink: Kubernetes is viewed as both invaluable and overly complex, fitting for large-scale operations but often excessive for smaller projects.
https://discoposse.com/2024/11/27/kubernetes-a-love-letter-to-complexity-or-a-hatred-for-cloud-chaos/

#SymLink: Concerns rise over Microsoft's Azure security as restricted logging features in pricier plans may compromise data protection.
https://yobyot.com/cloud/will-microsoft-make-customers-more-secure/2024/11/29/

#SymLink: Platform engineering is becoming the new focus in tech, overtaking traditional DevOps by prioritizing operational efficiencies.
https://pivotnine.com/blog/platform-engineering-is-the-new-devops/

#SymLink: The blog post explores iOS 18's new security feature that restarts the device after inactivity to safeguard against threats.
https://naehrdine.blogspot.com/2024/11/reverse-engineering-ios-18-inactivity.html

#SymLink: Michael Levan's guide demonstrates how to containerize a WASM-based Go application using Docker, highlighting WASM's role as a runtime in cloud environments.
https://dev.to/thenjdevopsguy/wasm-and-docker-quickstart-15pl

#SymLink: Stephen Foskett discusses the dual role of acquisitions in IT, highlighting both growth opportunities and innovation risks. @GestaltIT @sfoskett #CFD21
https://gestaltit.com/podcast/stephen/company-acquisitions-are-a-necessary-evil-in-enterprise-tech/

#SymLink: SOUTHWORKS discusses the shift to multi-cloud approaches, emphasizing cloud-agnostic solutions for cost savings and enhanced flexibility. #WriterOfTech1 #SOUTHWORKS #ADFD2 #DevOpsDotCom
https://devops.com/southworks-cloud-agnostic-platforms-will-drive-new-possibilities-in-multi-cloud/

#SymLink: The article "Nile Campus Full-Service NAAS" explores the comprehensive Network-as-a-Service offerings at the Nile Campus, emphasizing their innovative IT solutions. #PJWelcher #NileSecure #MFD12 #LinkedIn
https://www.linkedin.com/pulse/nile-campus-full-service-naas-peter-welcher-wnjae/

#SymLink: Ben Thompson discusses how generative AI acts as a bridge in the evolution from mainframes to intuitive wearable tech, enhancing user interaction.
https://stratechery.com/2024/the-gen-ai-bridge-to-the-future/

#SymLink: Itential's new Automation as a Service enhances script and workflow efficiency with a hybrid cloud platform and user-friendly interface. @pjwelcher #PJWelcher #Itential #NFD36 #LinkedIn
https://www.linkedin.com/pulse/nfd36-itential-automation-service-peter-welcher-crgae/

#SymLink: Cisco introduces new Wi-Fi 7 access points with UWB and URWB, enhancing connectivity and location detection, with AI-driven management. @pjwelcher #PJWelcher #Cisco #MFD12 #LinkedIn
https://www.linkedin.com/pulse/cisco-wi-fi-7-announcements-peter-welcher-usgke/

#SymLink: Mike Stanley reflects on his rewarding first Tech Field Day experience, highlighting Heroku's developer-centric innovations and managed service benefits. #MikeStanley #Heroku #ADFD2
https://mikestanley.me/2024/11/26/app-dev-2-heroku/

#SymLink: #WriterOfTech1 #NileSecure #SecurityBlvd
https://securityboulevard.com/2024/11/nile-releases-zero-trust-as-a-service-aimed-at-delivering-ransomware-protection-natively-without-operational-headaches/

#SymLink: Meter showcased its integrated networking solutions at Networking Field Day 36, emphasizing innovation and customer-aligned service models. #Meter #NFD36
https://www.meter.com/blog/networking-field-day-36

#SymLink: Path Solutions showcased at NFD36 how their tools act like network detectives using analytics and AI to preemptively tackle network issues. #PJWelcher #goPathSolutions #NFD36 #LinkedIn
https://www.linkedin.com/pulse/nfd36-path-solutions-network-detective-peter-welcher-1evme/

#SymLink: PathSolutions' TotalView platform offers "network prescriptions" to enhance Tier 1 support and expedite network troubleshooting. #TheBeardedITDad #goPathSolutions #NFD36 #LinkedIn
https://www.linkedin.com/pulse/pathsolutions-fresh-take-network-troubleshooting-dakota-seufert-snow-7cjqc/

#SymLink: Peter J. Welcher is excited for NFD36, focusing on innovative tech from vendors like Arista, Itential, Aviz Networks, and Meter, and Zero Trust security solutions from Elisity. @pjwelcher #PJWelcher #goPathSolutions #AvizNews #Meter #ElisityInc #AristaNetworks #Itential #NFD36 #LinkedIn
https://www.linkedin.com/pulse/looking-forward-nfd36-peter-welcher-qtobe/

#SymLink: Tucker Callaway discusses Mezmo’s role in enhancing data management and observability on DevOps Dialogues. #MezmoData #PNashawaty #ADFD1 #TheFuturumGroup
https://futurumgroup.com/insights/mezmo-data-management-observability-and-getting-value-out-of-telemetry-data/

#SymLink: Telemetry data, essential for SREs, is gaining focus with tools like Mezomy's pipelines improving system monitoring and operations. #MezmoData #KatiLehmuskoski #ADFD1 #LinkedIn
https://www.linkedin.com/pulse/telemetry-data-taking-management-next-level-kati-lehmuskoski-mwvdf

#SymLink: Mezmo enhances IT monitoring and observability by centralizing data ingestion and analysis for proactive system management. #MezmoData #TheNJDevOpsGuy #ADFD1 #ThePracticalDev
https://dev.to/thenjdevopsguy/monitoring-and-observability-entier-mezmo-1ie2

#SymLink: The article "The Network Digital Twin GOAT" from overlaid.net discusses the cutting-edge capabilities of Forward Networks to create a full-scale digital twin of complex network environments for in-depth analysis, troubleshooting, and compliance validation. #ForwardNetworks #Overlaid #NFD34
https://overlaid.net/2024/03/25/the-network-digital-twin-goat/

#SymLink: The Chaos Lever podcast episode features host Ned discussing Cloud Field Day 19 and highlighting SoftIron's noteworthy innovation in private cloud technology among other event details and humor-infused dialogue. #SoftIron #Ned1313 #CFD19 #Hayner80 #Chaos_Lever #Podcast
https://chaoslever.com/cl-20240208/

#SymLink: Ned Bellavance's article reviews Dell's APEX Cloud Platform, which seeks to bring public cloud functionality to on-premises data centers, though he questions its capacity to offer a fully integrated 'cloud to ground' experience. @ned1313 #DellTech #Ned1313 #CFD19 #LinkedIn
https://www.linkedin.com/pulse/cloud-ground-deployment-magic-ned-bellavance-2yj4e

#SymLink: Ned Bellavance discusses the challenges of multicloud environments and introduces Dell Technologies' APEX Block Storage, a solution aiming to provide consistent, high-performance storage across various public cloud vendors and private data centers. @ned1313 #DellTech #Ned1313 #CFD19 #LinkedIn
https://www.linkedin.com/pulse/why-build-storage-array-cloud-ned-bellavance-z2xye/

#SymLink: The article reviews Platform9's EMP as a cost-saving solution for EKS inefficiencies, but advises that truly economical cloud management requires addressing overallocation habits and refining workload sizing. @ned1313 #Platform9Sys #Ned1313 #CFD19 #LinkedIn
https://www.linkedin.com/pulse/saving-money-eks-good-start-ned-bellavance-ggjce

#SymLink: The article reviews SoftIron's HyperCloud as a privately managed cloud service with proprietary hardware and software that promises a more integrated and secure cloud environment, challenging traditional private cloud limitations. @ned1313 #SoftIron #Ned1313 #CFD19 #LinkedIn
https://www.linkedin.com/pulse/softiron-hypercloud-true-private-cloud-ned-bellavance-1jzwe

#SymLink: The article discusses NeuroBlade's introduction of the SPU, a hardware accelerator for data analytics, aiming to greatly improve performance with up to 30x faster processing compared to traditional hardware. @ned1313 #NeuroBlade #Ned1313 #CFD19 #LinkedIn
https://www.linkedin.com/pulse/accelerating-data-analytics-neuroblade-ned-bellavance-yjqdc

#SymLink: Industry experts at Solidigm emphasize the significance of high-density storage at the edge to enhance efficiency and reduce latency in the rapidly evolving landscape of data processing and storage. #Solidigm #EFD2
https://www.solidigm.com/products/technology/high-density-storage-at-the-edge-videos.html

#SymLink: The article transcribes an episode of the Chaos Lever podcast, in which hosts Chris and Ned discuss the 10th Security Field Day event and inform listeners they can access session recordings on techfieldday.com. #ForwardNetworks #Hayner80 #Ned1313 #XFD10 #Chaos_Lever #Podcast
https://chaoslever.com/cl-20231121/

#SymLink: The article "Edge Computing (or something)" on www.miscreantsinaction.com explores the author's journey to understanding edge computing through attending Gestalt IT's Edge Field Day, pondering over various tech presentations, and his personal reflection, ultimately defining it as an "optimization strategy that involves distributed computing." #Solidigm #StorMagic #NodeWeaver #JohnOsmon #EFD2
https://www.miscreantsinaction.com/2023/11/edge-computing-or-something.html

#SymLink: The article on benyoung.blog highlights the growing need for high-performing edge computing solutions amidst the AI and IoT boom, emphasising how Solidigm's QLC SSDs, distinguished for their reliability, performance, and storage capacity, address this demand efficiently. #Solidigm #BenYoungNZ #EFD2
https://benyoung.blog/solidigm-qlc-ssds-proven-reliability-performance-and-density-perfect-for-challenging-edge-computing-environments/

#SymLink: "Controlling Far-Flung Edges: StorMagic Edge Control" by Jim Czuprynski is an article highlighting StorMagic's new tool, Edge Control, which offers a simple, cost-effective solution for managing and configuring storage and hardware in far-reaching edge computing environments. @jimthewhyguy #StorMagic #JimTheWhyGuy #EFD2
https://jimthewhyguy.com/2023/11/07/controlling-far-flung-edges-stormagic-edge-control/

#SymLink: The article on knudt.net titled "Exciting Innovation is Happening at the Edge – Knudt Blog" discusses the latest advancements in Edge technology, emphasizing the innovative storage solutions by Solidigm and StorMagic, NodeWeaver's complete control of the software layer, and the possible impacts these innovations might have on the IT industry. @bknudtson #Solidigm #NodeWeaver #StorMagic #BKnudtson #EFD2
https://knudt.net/2023/11/07/exciting-innovation-is-happening-at-the-edge/

#SymLink: #WekaIO #DiscoPosse #CFD18
https://discoposse.com/2023/10/19/weka-at-cloud-field-day-18/