Differences in behavior between two Netcat and FIFO commands for creating a bind shell

I am trying to grasp the concept of terminal-emulators, shells and redirections.
I have two commands, both of them start a netcat listener for the bind shell:
1) rm /tmp/fifo; mkfifo /tmp/fifo; cat /tmp/fifo | /bin/bash -i 2>&1 | nc… Continue reading Differences in behavior between two Netcat and FIFO commands for creating a bind shell

How can this unelevated tool intercept VM traffic and cause a "blue screen of death" on a personal Windows 10 computer?

Because my child wanted to access certain blocked websites (such as ChatGPT), on his school computer, which runs personal Windows 10, I decided to setup a Ubuntu VM for him.
Websites are blocked by a tool called Blue-Coat Unified agent, wh… Continue reading How can this unelevated tool intercept VM traffic and cause a "blue screen of death" on a personal Windows 10 computer?

What to consider when routing priviledged ports to sandboxed services? net.ipv4.conf.eth0.route_localnet=1 vs CAP_NET_BIND_SERVICE

The use case is: running isolated services, either as a hardened systemd unit file — with close to a zero score on systemd-analyze security, or a linux container.
Both of those will place services listening on localnet (127.0.0.0/8-ish) o… Continue reading What to consider when routing priviledged ports to sandboxed services? net.ipv4.conf.eth0.route_localnet=1 vs CAP_NET_BIND_SERVICE