Your favourite ROP gadget

A security issue in Omarchy’s default Docker configuration meant that essentially every program running in the user’s desktop session could escalate to root without a password, sudo, or a privilege prompt. If you use Omarchy, the most important takeaway is simple: update to 4.0.1. I reported this issue privately through the project’s responsible-disclosure process. The underlying configuration has since been patched, so I’m publishing the details now to explain what the issue is and let users know to update their systems.

Meta must make massive transformations that will reduce the risk of harm from its platforms — and will do it within months. OAKLAND — California Attorney General Rob Bonta, as part of a bipartisan coalition of 51 attorneys general, today announced a proposed settlement, which remains subject to court approval through entry of a consent judgment, resolving the Attorney General's lawsuit against Meta Platforms, Inc.