Recent submissions

Comment · 2 years ago
The thread that the title comes from is from a Twitter user that later stated about the issue: "And YES: I LOVE hyping the sh1t out of this stuff because apparently sensationalism is the only language that forces these people to fix. "

As such, every single thing about the topic should be taken with a grain of salt. Starting with systems affected (it's not all GNU/Linux) and also CVSS score (I score it as a 6.3 instead of 9.9). Use your imagination to decide how much of what was posted is based on fact as opposed to fantasy.

Comment · 2 years ago
Disabling the firewall for testing is simple enough. If things work after turning off the firewall, then this is your problem.
Comment · 2 years ago
Comment · 2 years ago
See: https://waclaw.blog/macos-firewall-blocking-web-browsing-aft...

If disabling the firewall (for testing) solves this problem, this is likely your issue.

Comment · 2 years ago
Comment · 8 years ago
So... two of the routers affected by the recent VPNFilter malware? Interesting choice.
Comment · 10 years ago
No mention of ASLR. Helping to prevent memory corruption bugs apparently isn't on their radar?
Comment · 10 years ago
If you're on BSD, that'll kill dd.
Comment · 11 years ago
What version of IE is that dialog from? 6? Things have changed quite a bit since then.

Yes, SSL inspection is a security tradeoff. Whether the folks rolling it out realize this is another story.

Comment · 11 years ago
Comment · 11 years ago
"It desperately wants to just upgrade whenever it wants."

Do you think that it's better that operating systems get security updates or that they get left alone?

"Copy and paste is still a bit frustrating."

You really are just using SSH in a terminal, and FreeBSD apparently can't get that right? Copy/paste is pretty basic functionality, I'd think.

To each their own...

Comment · 11 years ago
Comment · 11 years ago
It's the FreeBSD folks that didn't bother. Not you.
Comment · 11 years ago
We all know that exploit mitigations aren't perfect. But to not even bother using them... that's just ridiculous. There are plenty of scenarios where ASLR helps prevent exploitation. And the fact that FreeBSD doesn't even have it is pretty damning.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton