HackerNews Digest Daily

Subscribe
Archives
March 30, 2024

Hacker News Top Stories with Summaries (March 31, 2024)

    <style>
        p {
            font-size: 16px;
            line-height: 1.6;
            margin: 0;
            padding: 10px;
        }
        h1 {
            font-size: 24px;
            font-weight: bold;
            margin-top: 10px;
            margin-bottom: 20px;
        }
        h2 {
            font-size: 18px;
            font-weight: bold;
            margin-top: 10px;
            margin-bottom: 5px;
        }
        ul {
            padding-left: 20px;
        }
        li {
            margin-bottom: 10px;
        }
        .summary {
            margin-left: 20px;
            margin-bottom: 20px;
        }
    </style>
        <h1> Hacker News Top Stories</h1>
        <p>Here are the top stories from Hacker News with summaries for March 31, 2024 :</p>

    <div style="margin-bottom: 20px;">
        <table cellpadding="0" cellspacing="0" border="0">
            <tr>
                <td style="padding-right: 10px;">
                <div style="width: 200px; height: 100px; border-radius: 10px; overflow: hidden; background-image: url('https://hackernewstoemail.s3.us-east-2.amazonaws.com/hnd2'); background-size: cover; background-position: center;">

XZ backdoor: "It's RCE, not auth bypass, and gated/unreplayable."

https://bsky.app/profile/filippo.abyssdomain.expert/post/3kowjkx2njy2b

Summary: Filippo Valsorda reports on a reverse-engineering effort of the xz backdoor. Preliminary analysis reveals that the hooked RSA_public_decrypt verifies a signature on the server's host key by a fixed Ed448 key, then passes a payload to system(). It's an RCE, not an auth bypass, and is gated/unreplayable.

    <div style="margin-bottom: 20px;">
        <table cellpadding="0" cellspacing="0" border="0">
            <tr>
                <td style="padding-right: 10px;">
                <div style="width: 200px; height: 100px; border-radius: 10px; overflow: hidden; background-image: url('https://mattlakeman.files.wordpress.com/2024/03/bukele-14.jpg'); background-size: cover; background-position: center;">

Notes on El Salvador

https://mattlakeman.org/2024/03/30/notes-on-el-salvador/

Summary: In 1995, El Salvador had a record high intentional homicide rate of 139 per 100,000. However, in 2023, the rate dropped to 2.4 per 100,000, largely due to President Nayib Bukele's successful anti-crime crackdown. The country has been under quasi-martial law since 2022, with about 1.7% of the population in prison. This turnaround has made El Salvador safer than its neighbors, Guatemala and Honduras, whose rates remain 5-10 times higher.

Want to read the full issue?
This email brought to you by Buttondown, the easiest way to start and grow your newsletter.