TGViewer
Programming Programming @programmingreddit · 918 subscribers
Post #11819 129
OpenWrt Supply Chain Compromission via Truncated SHA-256 Collision and Command Injection
https://flatt.tech/research/posts/compromising-openwrt-supply-chain-sha256-collision/

https://redd.it/1ha7b2v
@programmingreddit
GMO Flatt Security Research Compromising OpenWrt Supply Chain via Truncated SHA-256 Collision and Command Injection Introduction Hello, I’m RyotaK (@ryotkak ), a security engineer at Flatt Security Inc. A few days ago, I was upgrading my home lab network, and I decided to upgrade the OpenWrt on my router.1 After accessing the LuCI, which is the web interface of OpenWrt…
Open in Telegram All posts from @programmingreddit
More from @programmingreddit
  1. Oct 15, 2026BIPM announces the end of leap seconds https://www.bipm.org/en/cgpm-2026/resolution-5 http…
  2. Oct 15, 2026How Stripe uses graph search and state machines to auto-remediate a global database fleet…
  3. Oct 14, 2026Zxc 0.15.0 - decompression 2x faster than Zstandard https://libzxc.org/ https://redd.it/1x…
  4. Oct 14, 2026Adopting Pyrefly as the Python type checker at Google https://opensource.googleblog.com/20…
  5. Oct 13, 2026The Order of Things: Why You Can't Have Both Speed and Ordering in Distributed Systems htt…
  6. Oct 12, 2026Python 3.15 vs Python 3.14 – performance testing https://en.lewoniewski.info/2026/python-3…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →