2025-09-12

crates.io phishing attempt

A phishing attack targeting crates.io, the main Rust package repository, was detected through emails directing maintainers to a fake GitHub login page. The crates.io team has acknowledged the situation, with no compromised packages identified as of September 12th UTC.

Original archive.is archive.ph web.archive.org

Log in to get one-click access to archived versions of this article.

read comments on news aggregators:

Related articles

Fixing my gripes with GitHub using Gleam and a Raspberry Pi

A developer created a custom solution using Gleam and a Raspberry Pi Zero to monitor GitHub PR conflicts and mergeability status. The system uses GitHub's GraphQL API to fetch PR data and displays it through a simple web interface, solving the inconvenience of manually checking each PR's status.

NT OS Kernel Information Disclosure Vulnerability - CVE-2025-53136 - Crowdfense

A kernel information leak vulnerability (CVE-2025-53136) was discovered in Windows, allowing unauthorized access to kernel addresses through a race condition in the RtlSidHashInitialize function. The vulnerability affects Windows versions 24H2 or later and can be exploited from Low IL or AppContainer contexts, potentially enabling local privilege escalation when combined with other vulnerabilities.

www.rte.ie

A standard website security verification page that checks if visitors are human before granting access to www.rte.ie, requiring JavaScript and cookies to be enabled.

tarsnap is cozy

Tarsnap provides secure online backups with a Unix-friendly command-line interface and prepaid model for enhanced privacy. Created by Dr. Colin Percival, the service combines robust security features with user-friendly design principles, making it ideal for backing up sensitive data.

Checking your browser

Security check page indicating a brief browser verification process is taking place

Delta Chat: Delta Chat, decentralized secure messenger

Delta Chat offers secure, decentralized messaging with multi-profile support and interactive web apps, built on Internet Standards. The application combines instant messaging features with email server compatibility and end-to-end encryption. Users can access the platform across mobile and desktop devices while enjoying gaming and collaboration features.

Tailscale is pretty useful

Tailscale creates a virtual private network enabling secure remote access to devices and file sharing without traditional port forwarding. The service offers features like device-to-device connectivity, Taildrop for easy file transfers, and VPN capabilities through Mullvad integration.

Mox - modern, secure, all-in-one email server

Mox is a modern, open-source email server written in Go that combines all essential email protocols in a single, easy-to-maintain application. The server offers comprehensive features including IMAP4, SMTP, security protocols, and can be set up within 10 minutes through a quickstart command, addressing the growing centralization of email services.

Block Breakers

A hands-on educational resource focused on block cipher cryptanalysis, with a particular emphasis on attacking AES. The course provides guided exercises and practical implementations rather than theoretical knowledge, making complex cryptography concepts more approachable.

Effective Rust

A comprehensive guide presenting 35 specific methods to enhance Rust programming practices, covering essential topics from type systems to FFI boundaries. The guide is structured into six main sections, focusing on types, traits, concepts, dependencies, tooling, and advanced Rust features. Each item provides detailed insights for writing more effective and maintainable Rust code.