The Journey of Bypassing Ubuntu's Unprivileged Namespace Restriction

Comments (3)

0xbadcafebee · 5h ago

> As a researcher, it was frustrating to see various bypass methods being publicly disclosed while I couldn’t share my own work because I had already reported it to ZDI. After a few days with no updates, I even emailed ZDI to ask if I could withdraw my submission. Fortunately, my boss, Orange Tsai, stepped in just in time and patiently walked me through the pros and cons of doing so. That helped me regain my composure, and I ended up sending another email to retract my withdrawal request.

If you feel emotion when writing an email (or Slack message), put it in draft and look at it tomorrow. I've never not edited or scrapped it the next day.

rexer · 2h ago

> I've never not edited or scrapped it the next day.

There's definitely a balance. Showing a little emotion can be a good thing, necessary even

throw290348190 · 2h ago

security@$COMPANY.DOMAIN inboxes are constantly inundated with BS security reports phishing for a payout. The situation has only gotten worse with LLMs.

Expecting a quick response is ridiculous. You should try taking on a role where it's your job to sift through all those emails .

Ask HN: How do you learn Spanish guitar?

The 90% Gravity Problem: Why We Tend to Quit Right Before the Finish Line

Ask HN: Startup shutting down, should we open source?

Ask HN: Anyone using augmented reality, VR, glasses, helmets etc. in industry?

Ask HN: Why aren't AIs being used as app beta testers yet?

I built an app to backup Live Photos from iPhone to external hard drives

Ask HN: How would expose a scam involving a powerful figure?

Tell HN: Beware confidentiality agreements that act as lifetime non competes

Ask HN: Why does my Node.js multiplayer game lag at 500 players with low CPU?

Ask HN: How to get rid of Gemini?

Ask HN: What are your peronsal data backup and sync setups?

Ask HN: Alternatives to Cloudflare for DNS?

Strategy or Just a Dream?

Ask HN: Is anyone else just done with the industry?

Tell HN: Meta developer account suspended

Ask HN: Anyone interested in taking over my indie app?

The scam that is Visa Account Updater

Ask HN: How to regain the ability to read with focus and learn

Ask HN: If you translate with LLMs, GT or DeepL–what features are missing?

Ask HN: How do you keep your SWE skills sharp outside of work?

Ask HN: Why doesn't HN have notifications for replies?

184,000 Ray AI Dashboards Exposed Online Without Authentication

Ask HN: How Do You Actually Use Claude Code Effectively?

Ask HN: Laid-off devs who left tech?

Ask HN: Why can't AI fix all open source issues on GitHub?

A literary magazine accessible only via telnet

Are we overfitting our code to trends instead of problems?

Ask HN: Why do LLMs call Trump "former president" despite current knowledge?

The Journey of Bypassing Ubuntu's Unprivileged Namespace Restriction

Comments (3)