Network

Zero-Day Exploit in WinRAR File

Posted by Bruce Schneier

https://www.schneier.com/blog/archives/2025/08/zero-day-exploit-in-winrar-file.html

https://www.schneier.com/?p=70599

A zero-day vulnerability in WinRAR is being exploited by at least two Russian criminal groups:

The vulnerability seemed to have super Windows powers. It abused alternate data streams, a Windows feature that allows different ways of representing the same file path. The exploit abused that feature to trigger a previously unknown path traversal flaw that caused WinRAR to plant malicious executables in attacker-chosen file paths %TEMP% and %LOCALAPPDATA%, which Windows normally makes off-limits because of their ability to execute code.

Books read in 2025

43 Stone and Sky, Ben Aaronovitch (Rivers of London #10) (e)
42 Regency Buck, Georgette Heyer (re-re-re-&c-read)
41 I Dare, Sharon Lee and Steve Miller (Liaden Universe #7) (page proofs)
40 To Hive and to Hold, Amy Crook (The Future of Magic #1) (e)
39 These Old Shades, Georgette Heyer, narrated by Sarah Nichols (re-re-re-&c-read, 1st time audio)
38 Faking it (Dempsey Family #2), Jennifer Crusie, narrated by Aasne Vigesaa (re-re-re-&c-read, 1st time audio)
37 Copper Script, K.J. Charles (e)
36 The Masqueraders, Georgette Heyer, narrated by Eleanor Yates (re-re-re-&c-read; 1st time audio)
35 Everyone Here Spoke Sign Language: Hereditary Deafness on Martha's Vineyard, Nora Ellen Groce (e)
34 Miss Pettigrew Lives for a Day, Winifred Watson, narrated by Frances McDormand (re-re-re-&c-read; 1st time audio)
33 The Wings upon Her Back, Samantha Mills (e)
32 Death on the Green (Dublin Driver #2), Catie Murphy (e)
31 The Elusive Earl (Bad Heir Days #3), Grace Burrowes (e)
30 The Mysterious Marquess (Bad Heir Days #2), Grace Burrowes (e)
29 Who Will Remember (Sebastian St. Cyr #20), C.S. Harris (e)
28 The Teller of Small Fortunes, Julie Leong (e)
27 Check and Mate, Ali Hazelwood (e)
26 The Dangerous Duke (Bad Heir Days #1), Grace Burrowes (e)
25 Night's Master (Flat Earth #1) (re-read), Tanith Lee (e)
24 The Honey Pot Plot (Rocky Start #3), Jennifer Crusie and Bob Mayer (e)
23 Very Nice Funerals (Rocky Start #2), Jennifer Crusie and Bob Mayer (e)
22 The Orb of Cairado, Katherine Addison (e)
21 The Tomb of Dragons, (The Cemeteries of Amalo Trilogy, Book 3), Katherine Addison (e)
20 A Gentleman of Sinister Schemes (Lord Julian #8), Grace Burrowes (e)
19 The Thirteen Clocks (re-re-re-&c read), James Thurber (e)
18 A Gentleman Under the Mistletoe (Lord Julian #7), Grace Burrowes (e)
17 All Conditions Red (Murderbot Diaries #1) (re-re-re-&c read) (audio 1st time)
16 Destiny's Way (Doomed Earth #2), Jack Campbell (e)
15 The Sign of the Dragon, Mary Soon Lee
14 A Gentleman of Unreliable Honor (Lord Julian #6), Grace Burrowes (e)
13 Market Forces in Gretna Green (#7 Midlife Recorder), Linzi Day (e)
12 Shakespeare: The Man Who Pays the Rent, Judi Dench with Brendan O'Hea (e)
11 Code Yellow in Gretna Green (#6 Midlife Recorder), Linzi Day (e)
10 Seeing Red in Gretna Green (#5 Midlife Recorder), Linzi Day (e)
9 House Party in Gretna Green (#4 Midlife Recorder), Linzi Day (e)*
8    Ties that Bond in Gretna Green (#3 Midlife Recorder), Linzi Day (e)
7    Painting the Blues in Gretna Green (#2 Midlife Recorder), Linzi Day (e)
6 Midlife in Gretna Green (#1 Midlife Recorder), Linzi Day (e)
5    The Goblin Emperor, Katherine Addison (Author), Kyle McCarley (Narrator) re-re-re&c-read (audio)
4    The House in the Cerulean Sea, TJ Klune (e)
3    A Gentleman in Search of a Wife (Lord Julian #5) Grace Burrowes (e)
2    A Gentleman in Pursuit of the Truth (Lord Julian #4) Grace Burrowes (e)
1    A Gentleman in Challenging Circumstances (Lord Julian #3) Grace Burrowes (e)

_____
*Note: The list has been corrected. I did not realize that the Gretna Green novella was part of the main path, rather than a pleasant discursion, and my numbering was off. All fixed now.

Entry tags:

just one thing

Just one thing: 19 August 2025

It's challenge time!

Comment with Just One Thing you've accomplished in the last 24 hours or so. It doesn't have to be a hard thing, or even a thing that you think is particularly awesome. Just a thing that you did.

Feel free to share more than one thing if you're feeling particularly accomplished!

Extra credit: find someone in the comments and give them props for what they achieved!

Nothing is too big, too small, too strange or too cryptic. And in case you'd rather do this in private, anonymous comments are screened. I will only unscreen if you ask me to.

Go!

Entry tags:

Current Mood: curious

I feel like this is a math problem

( You're about to view content that the journal owner has advised should be viewed with discretion. )

(no subject)

https://apod.nasa.gov/apod/ap250818.html

This galaxy is not only pretty -- it's useful.

https://apod.nasa.gov/apod/ap250818.html

Current Mood: depressed
Current Music: Mean Girl Murders

Entry tags:

Time is racing

I can't believe I'm leaving in 2 days. Faculty meeting Friday, class on monday. I have a ton of students this semester and almost a full year's worth of credit hours which is SO much work.

But that racing time spun my head today. I was talking about retirement a few days ago and people asked me when? If I wanted to go early, 4 years (I wouldn't) If I wanted to go at 67, nine years. But the reality is I probably can't retire until my 70s if at all.

So today I saw someone I went to med school with posting her retirement party and it brought up all that grief again, because grief is tidal. Today was a tsunami. Most of my medical school friends are retiring. Comfortably. Me, because of the bad bounce my life took, am saddled by more than half a million dollars in student debt (still), have not nearly enough for retirement, could barely afford rent let alone a house. Then you look who you graduated with having everything I should have had and it gets hard. Sigh.

But in happier veins, it's music Monday. Feel free to share with us. We're doing the alphabet and we're up to U and V, since they're hard letters. I'm only sharing the last 5 years but you can share whatever U and V songs you'd like.

( I do however have some )

Entry tags:

you asked for my Hugo opinions

Here we go! It's gonna be long though.

You can see the list of finalists here and the list of winners (with stats and such) here.

Overall impressions: People have good taste. Most of the winners, as you’ll see, weren’t that surprising to me, and I had a high degree of agreement in the categories I cared about. I was particularly happy to see three Indigenous winners.

I’m very much a prose person and it shows; I am interested in most of the other categories, but my time is limited, so while I tried to check out as many of the finalists as possible, I didn’t get to everything. If I hadn't read/watched/listen to most of a category, I didn't vote in it. I focused my time on novels, novellas, and short stories and care most about those.

It’s a ranked ballot so I voted for multiple works in many categories, but to avoid this going forever, I’ve only talked about my top choices.

( opinions )

Entry tags:

Book review: "Welcome to Night Vale"

Title: Welcome to Night Vale: A Novel
Authors: Jeffrey Cranor, Joseph Fink
Genre: Fantasy, surrealist/absurdist

Now that I don’t have a commute, I really had to create time to finish my latest audiobook, but it was worth it. Today I finished Welcome to Night Vale: A Novel, the first book put out by the team behind the Welcome to Night Vale fiction podcast and set in the same universe (as is likely apparent by the title). This book was written by Jeffrey Cranor and Joseph Fink.

First, I don’t believe you need familiarity with the podcast to enjoy the novel. Nor do you need to read the novel if you’re a podcast listener; it builds on what listeners may know, but also centers incredibly peripheral characters from the show (local PTA mom Diane Crayton and pawn shop owner Jackie Fierro), so if you’re a podcast only fan, you’re not missing any crucial story information by forgoing the book. If you’re not a listener of the podcast, I think as long as you go in understanding that the core of Night Vale is the absurd and the surreal, you’ll be okay.

This was a fun book! I was curious to see how the Night Vale Presents team would manage a longform story in the world of Night Vale (podcast episodes are about 25 minutes and almost always self-contained), and I think they did a solid job! The book can be a bit slow, especially in the beginning; the drip of information it feeds you about the mysteries at the center of the story is indeed a drip. But it wasn’t so slow I found it tiresome, and the typical Night Vale weirdness and eccentricity kept me listening even where I wasn’t sure where this story was going (if anywhere).

( Read more... )

Current Mood: pleased

Entry tags:

local food shopping

The weather is delightful right now--sunny and about 22 C/72 F--so I went to Central Square after lunch, for the Monday farmers' market and to buy ice cream.

At the farmers market, I bought Zestar apples--an early apple all three of us like--blackberries, peaches, and a loaf of Hi Rise bakery's "Concord" bread. I then walked over to Toscanini's, but noticed New City Microcreamery en route, and went in. I asked for a taste of the key lime pie ice cream, and was pleased that it tastes like key lime pie and works as ice cream, so I got a scoop and took it outside to eat at a nearby table.

Then to Tosci's, where the board said they had raspberry and sweet cream (among other flavors). I asked for a pint of each, and discovered they were out of raspberry. I asked to taste the mango sticky rice ice cream, which I didn't like. So I just got sweet cream, then walked back to New City for a pint of key lime pie ice cream.

I now have dairy ice cream from four different local ice cream places in my freezer, the other two being Lizzy's (chocolate orgy and black raspberry) and JP Licks (peach). Boston is a good city for ice cream.

Predicament

https://xkcd.com/3130/

I dropped my phone while trying to search, and I tried to unlock it from up here, so can you also search for screen repair places?

https://xkcd.com/3130/

The Food Pantry

( You're about to view content that the journal owner has advised should be viewed with discretion. )

Entry tags:

The Disaster Days, by Rebecca Behrens

13-year-old Hannah, who lives on a tiny island off Seattle, is excited for her first babysitting job. Then a giant earthquake hits, cutting the island off from the mainland... and leaving Hannah alone in charge of two kids in a devastated landscape.

Hannah is not having a good day. She was recently diagnosed with asthma, forcing her to drop out of soccer and always carry an inhaler. Her best friend Neha, a soccer star, is now hanging out more with another soccer girl than with Hannah. Hannah forgets to bring her inhaler with her to school, and her mom doesn't turn around the car to get it as Hannah is desperate not to be late. When she arrives for her babysitting job after school, minus her inhaler (no doubt looming ominously on the mantelpiece at home, along with Chekhov's gun), she gets in a huge fight with Neha over text and the girls say they no longer want to be friends...

...just as a giant earthquake hits! Hannah gets her charges, Zoe and Oscar, to huddle under a table (along with their guinea pig) and no one is injured. But the windows break, the house is trashed, and the power, internet, and phones go out. The house is somewhat remote, an all-day walk from the next house. What to do?

Hannah is a pretty realistic 13-year-old. She's generally sensible, but makes some mistakes which are understandable under the circumstances, but have huge repercussions. She enlists the kids to help her search for her phone in the wreckage of the house, and Zoe immediately is severely cut on broken glass. The kids freak out because their mom (along with Hannah's) is on the mainland, and Hannah calms them down by lying that she got a text from their mom saying that she's fine and is coming soon. The next morning, she lets Oscar play on some home playground equipment. Hannah checks the surrounding area, but doesn't check the equipment itself. It's damaged and breaks, and Oscar breaks his leg. So by day one, Hannah is having asthma attacks without her inhaler, Zoe has one arm out of commission, Oscar is totally immobilized, and there's no adults within reach.

Well - this is a HUGE improvement on Trapped. It's well-written and gripping, the events all make sense, and the characterization is fine. It was clearly intended to teach kids what can happen during a big earthquake and how to stay as safe as possible, and the information presented on that is all good.

But - you knew there was a but - as an enjoyable work of children's disaster/survival literature, it falls short of the standards of the old classic Hatchet and the excellent newer series I Survived.

The basic problem with this book is that it has a very narrow emotional range. For the entire book, Hannah is miserable, guilty over her friend breakup and the kids getting hurt, worried about her parents, and desperately trying to keep it together. The kids get hurt so seriously so early on that they never have any fun. Even when Hannah tries to feed them S'Mores to cheer them up, nobody actually likes them because they're not melted!

The I Survived books have much more variety of emotional states and incidents, as typically the actual disaster doesn't happen until at least one-third of the way into the book. The kids have highs and lows, fun moments and despairing moments and terrifying moments. This book is all gloom all the time even before the disaster! Hannah eventually saves everyone, is hailed as a hero, and repairs her friendship, but we don't get that from her inner POV - it's in a transcript of a TV interview with her.

The information provided in the book is very solid, but I would have preferred that it didn't have BOTH kids get injured because of something Hannah does wrong. (That is not realistic! ONE, maybe.) It also would have been a lot more fun to read if the kids' injuries were either less serious or occurred later. The situation is desperate and miserable almost immediately, and just stays that way for the entire book.

Still, there's a lot about the book that's good and there should be an entertaining book that provides earthquake knowledge, so I'm keeping it. But I'm not getting her other book about two girls lost in the woods.

Bundle of Holding: Tiny Dungeon MEGA (from 2023)

An assortment of tabletop roleplaying games from Gallant Knight Games that use the streamlined, minimalist TinyD6 rules.

Bundle of Holding: Tiny Dungeon MEGA (from 2023)

Entry tags:

type: promotion: event

[Promo] October Review-a-Thon 2025

We are getting closer and closer to October (where is the time going?!) and the [Sign-Up Post] October Review-a-Thon 2025 post is of course still up. Sign-ups will not close until Oct 31, LOL.

This event took place last October, too, and the rules are the same. I'm super excited to see what reviews will be posted!

(It's a low-commitment event: you can drop your sign up at any time, and if you don't manage to post a review on your claimed day(s), there are zero (0) consequences. Just have fun at your desired comfort level!)

(no subject)

Video of adult cat and kitten interacting, with all cat vocalizations removed and replaced by sappy piano music.

Overselling It

Posted by Jen

https://www.cakewrecks.com/home/overselling-it-2025

"Good day, Madam! Please allow me to welcome you to the West Rutheford Winery, Gastropub and Patisserie. Might I offer you a moist towelette?"

"Um, no. I just need to order a cake for my son's birthday, please."

"But of course! We have many, many cakes to choose from. If I may point out on our Ménu dú Jöur, here you see we have our Incredibly Moist Chocolate Cake Uniquely Finished By Hand With Butter Cream Icing."

"As you can see, it is 'Great For Any Occasion.'"

"Finished by hand? Are you sure feet weren't involved?" [smirking]

[ahem] "Ah, yes, very amusing. Well, Madam, if that is not your particular cup of Earl Gray, might I suggest our Moist Gold Cake Uniquely Hand Finished Tastes Just Like A Real "WATERMELON"?

"Soooo, it tastes like a watermelon?"

"Not at all, Madam. It tastes like a 'WATERMELON.'"

"Ah."

"Ah, but I have saved the best for last! It is the pièce de résistance of our repertoire, the crème de la crème, the horloge de le stylo du la baguette fo di fa fa! Behold!

"A Rich Belgian Chocolate Cup filled with a layer of moist yellow Cake, Fudge, and sweet cream Ice Cream and topped with fluffy white Frosting...

...and a menstrual duo."

"Ew."

"As you might expect, this is available but once a month."

...

"Madam? Wait! Where are you going?!"

Thanks to eagle-eyed Wreckporters Dawn C. and Aimee W. who are just glad that last one isn't red velvet.

Oh, and since *I* couldn't figure it out, I thought you might want to know that last label should read minstrel - which is apparently a type of cake. Plus, when Aimee pointed it out to the manager she shrugged, said they were all probably like that, and put it back on the shelf. Yay, quality control!

******

And from my other blog, Epbot:

https://www.cakewrecks.com/home/overselling-it-2025

Entry tags:

clarke award

Clarke Award Finalists 2010

2010: Cadbury falls into shadow, electoral loss sends the Labour Party off on a delightful journey of reinvention, and millions of travelers spontaneously learn how to spell Eyjafjallajökull.

Poll #33506 Clarke Award Finalists 2010

Open to: Registered Users, detailed results viewable to: All, participants: 27

View Respondents

Which 2010 Clarke Award Finalists Have You Read?

View Answers

The City & The City by China Miéville
27 (100.0%)

Far North by Marcel Theroux
0 (0.0%)

Galileo's Dream by Kim Stanley Robinson
6 (22.2%)

Retribution Falls by Chris Wooding
2 (7.4%)

Spirit or The Princess of Bois Dormant by Gwyneth Jones
0 (0.0%)

Yellow Blue Tibia by Adam Roberts
2 (7.4%)

Bold for have read, italic for intend to read, underline for never heard of it.

Which 2010 Clarke Award Finalists Have You Read?
The City & The City by China Miéville
Far North by Marcel Theroux
Galileo's Dream by Kim Stanley Robinson
Retribution Falls by Chris Wooding
Spirit or The Princess of Bois Dormant by Gwyneth Jones
Yellow Blue Tibia by Adam Roberts

Entry tags:

I travel the world and the seven seas

Business first: If you have read a Liaden novel or short story collection, or, heck, a Carousel book or short story collection, please consider leaving a review on the bookselling site of your choice.

Thank you.

What went before ONE: Chores done, including remaking the bed with nice clean sheets, that may help me sleep tonight. I have regretfully had to close the windows, because there is not a breath of air moving outside and it was 85F/29C in my office, which is -- too warm.

Wordle has also been solved, so! I guess it's time to find something to eat for lunch, so I can go to work.

What went before TWO: I cleared off half of the top of the supply dresser, so Rook and Tali can use the side window. Not that any of these cats are spoiled.

What went before THREE: Hey, it's raining. We really need rain.

I? Am not done inputting the correx, but I've come to a picky bit, and I'm tired, so instead of pushing myself to frustration -- knocking off now; early-ish to bed, and tomorrow's a new day.

Everybody stay safe; I'll see you tomorrow.

What went before FOUR: I think they're trying to tell me something:

Monday, and it's a Beautiful Morning. I have opened every window in this house that opens. Sirius XM popup channel 80s ChillPill is my morning entertainment, currently listening to "Sweet Dreams" from the Eurythmics.

I had a lovely, long sleep, despite which the day started . . . awkwardly.

As has become the habit, I got up and immediately gave Trooper his gravy-and-meds and got dressed while he was chowing down. Came out to the kitchen with the intention of making scrambled eggs with Inclusions, followed by Trooper who was screaming his head off, despite having just eaten. I applied snuggles; that wasn't it. I offered dry food, which is never it, anymore, but I was starving and really needed to eat. Yelling continued to a point where I actually couldn't think, and when you can't think to scramble eggs, you're in a bad spot.

I put Trooper, and Rook, for company, into the bathroom, closed the door, and went back to the kitchen to make my own breakfast. Got the Inclusions into the frying pan. Reached for the salt grinder, and?

The base fell off. Salt everywhere. I mean, yeah, thank ghu it was salt and not, oh, molasses, but yikes! I finished making breakfast, let Trooper and Rook out of the bathroom, ate breakfast, opened a can of gooshy food for Trooper, who at least licked the gravy, and cleaned up the salt. I don't have any more coarse salt to pour into the Oxo grinder, and anyhow the Oxo grinder and I need to have A Talk . . . and -- sigh. OK, guys, the Eurythmics was great, and Whitney Houston I can tolerate, but I draw the line at Peter Cetera. I guess the 80s were a mixed bag.

Where was I? Oh, Come to Jesus with the Oxo Salt Grinder. I do have a McCormick disposable grinder full of salt, so that's what I'm playing with now.

Recapping: The salt has been cleaned up, Trooper has had his second breakfast and is in his box on my desk, sleeping. Junior Grade Cats are distributed in various windows. I need to stage the trash, perform my duty to the cats, do the bookkeeping I've been avoiding, write a letter, make a call for my annual eye appointment, and then? I can write.

How did your Monday start out?

Today's blog post title brought to you by the Eurythmics, "Sweet Dreams"

Entry tags:

personal: friends

(no subject)

Yesterday I was in transit (from "leave my apartment" to "get to friend's house") for uh

well during the drive back from the airport I was like "I have now been travelling for twelve hours" and there was like another hour or so left of that drive???

TOO LONG

(two planes, which is good because it meant I could eat a meal over the layover, but that + traffic on the way back to friend house meant A LONG DAY)

worth it, though, and now I am on Pacific time by virtue of going "please keep me awake until the sun sets", so I ~only~ woke up for real at 4:30am Pacific time (instead of my normal 4:30am Eastern time).

but I am looking forward to FRIEND HANGOUTS where I am NOT dead of "have been travelling all day oh god" and instead merely running on possibly less sleep than preferred but FRIEND TIME will make up for that, it's fine.

(I'm here for a few days and then go down the coast to my family, who I will be staying with longer.)