all 49 comments

sorted by: hot top controversial new old
[–] 104 points 5 months ago

I think that the OP(the article author) is not looking at this the right way. Like yea it sucks another exploit is found, but it's not like if it wasn't found it doesn't exist.

I think its much better to have them published and fixed then to live in blissful ignorance when someone could be exploiting it in the wild.

  • source
  • [–] 110 points 5 months ago

    It's listed as medium severity and appears to require the hacker to already have terminal access to the system. It's also already patched and there's a quick and easy workaround if your distro doesn't have the fix yet.

  • source
  • [–] 62 points 5 months ago (10 children)

    Oh FFS, the rest of my life is doomed to be spent updating software

  • source
  • hideshow 10 child comments
  • [–] 51 points 5 months ago (2 children)

    But careful not to update too fast and fall on the supply chain attack of the week.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 5 points 5 months ago*

    Pretty sure that was in the bible.

    Proverbs 25:16 - If you find honey, eat just enough - too much of it, and you will vomit.

    Could update that to be: If you find updates, apply them - too soon though, and you will vomit your credentials.

  • source
  • parent
  • [–] 10 points 5 months ago (3 children)

    It is more important than ever to introduce geo-ip conditional access on your network(s). That way you limit your attack surface by a significant margin.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 4 points 5 months ago* (2 children)

    My personal stuff 100%

    For work? No such choice (apart from the obvious ones)

  • source
  • parent
  • hideshow 2 child comments
  • [–] 11 points 5 months ago

    Oh good. Nothing too serious, then.

  • source
  • [+] -89 points 5 months ago (34 children)

    All found with AI, you haters. And Linus complains the mailing list is too busy… with bugs.

  • source
  • hideshow 34 child comments
  • [–] 67 points 5 months ago (6 children)

    too busy… with bugs.

    with duplicate bug reports.

    “the continued flood of AI reports has basically made the security list almost entirely unmanageable, with enormous duplication due to different people finding the same things with the same tools.”

  • source
  • parent
  • hideshow 6 child comments
  • [+] -54 points 5 months ago (5 children)

    Mailing lists, it turns out, is a bad tool.

  • source
  • parent
  • hideshow 5 child comments
  • [–] 38 points 5 months ago (4 children)

    It's worked for over 30 years, until the slop generators turned on.

    Dunno duder

  • source
  • parent
  • hideshow 4 child comments
  • [+] -33 points 5 months ago (3 children)

    Times change. I’d say if slop finds exploitable bugs, it’s not slop. And if your 30 year old method of doing something doesn’t work anymore, take a few minutes to make a better solution. 🤷‍♂️

  • source
  • parent
  • hideshow 3 child comments
  • [–] 19 points 5 months ago

    Yes but the problem is that people keep submitting the same bug again and again and again. Some bugs exist because they haven't been spotted, but there's a heckton of bugs that are known about, but no-one has been able to put forward a fix for them yet. Overloading people with duplicate reports just means that they have less time and brainspace available to spend on fixing bugs.

    Duplicates don't add anything to the conversation

  • source
  • parent
  • [–] 5 points 5 months ago

    Yes but the problem is that people keep submitting the same bug again and again and again. Some bugs exist because they haven’t been spotted, but there’s a heckton of bugs that are known about, but no-one has been able to put forward a fix for them yet. Overloading people with duplicate reports just means that they have less time and brainspace available to spend on fixing bugs.

    Duplicates don’t add anything to the conversation

  • source
  • parent
  • [–] 3 points 5 months ago

    Yes but the problem is that people keep submitting the same bug again and again and again. Some bugs exist because they haven't been spotted, but there's a heckton of bugs that are known about, but no-one has been able to put forward a fix for them yet. Overloading people with duplicate reports just means that they have less time and brainspace available to spend on fixing bugs.

    Duplicates don't add anything to the conversation

  • source
  • parent
  • [–] 45 points 5 months ago (7 children)

    All found with some AI assistance and a lot of human expertise sifting through the hallucinations to work out the actually exploutable stuff. And the AI bug apocalypse has turned up a whole 4 bugs serious bugs so far, ooo scary. I'm still waiting to be impressed.

  • source
  • parent
  • hideshow 7 child comments
  • [–] 14 points 5 months ago

    And that (obviously) is the low hanging fruit. We end up with a more secure kernel, and these filter in at a manageable rate and the bar raises. Pretty damn good scenario IMO.

    Closed source is going to have a much worse time.

  • source
  • parent
  • [+] -34 points 5 months ago (3 children)

    No one thinks impressing you is a goal.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 29 points 5 months ago (14 children)
  • [+] -27 points 5 months ago (13 children)

    Lemmy has driven me to be an angry person who likes to point out how hypocritical people are.

  • source
  • parent
  • hideshow 13 child comments
  • [–] 37 points 5 months ago (10 children)

    You should try not sucking at it though.

  • source
  • parent
  • hideshow 10 child comments
  • [+] -22 points 5 months ago (9 children)

    Sucking is relative. I would have to respect you for that to be an insult.

  • source
  • parent
  • hideshow 9 child comments
  • [–] 11 points 5 months ago (8 children)

    You're getting ratio'd pretty hard (by lemmy standards)

    You don't have anyone here's respect, so why would they care for yours?

  • source
  • parent
  • hideshow 8 child comments
  • [+] -15 points 5 months ago (7 children)

    I don’t have any concern for votes because I do not display them. Just because you, and several other alt accounts can push a down button doesn’t mean that will ever affect me – because I can’t see it. However, according to you – every single down voted comment is a bad comment regardless of its content. So according to you, if I get downloaded for complaining about, let’s say murdering innocent children, then I must be a bad person. Your logic doesn’t work out buddy.

  • source
  • parent
  • hideshow 7 child comments
  • [–] 9 points 5 months ago* (5 children)

    I didn't read your message.

    Edit: Because you seem a little thick: Because I don't respect you.

  • source
  • parent
  • hideshow 5 child comments
  • [+] -11 points 5 months ago (4 children)
  • [–] 6 points 5 months ago (3 children)

    Glad we understand each other.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 5 points 5 months ago (2 children)

    All found with AI, you haters. And Linus complains the mailing list is too busy… with bugs.

    All found with my infinite set of monkeys on typewriters.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 5 months ago (1 child)

    This isn't an example of a broken clock being right twice a day. Torvalds is complaining that his inbox is flooded with bug reports because everyone's monkey suddenly started outputting Shakespeare.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 5 months ago*

    Torvalds is complaining that his inbox is flooded with endlessly duplicated bug reports because everyone’s monkey suddenly started outputting low-grade, plagiarized, relentlessly repeated "Shakespeare"

  • source
  • parent