Every Go application since 1.24 will activate MPTCP on their sockets by default.

And I've read that this includes Syncthing, which is why I'm posting this here

you are viewing a single comment's thread
view the rest of the comments
[–] 1 point 2 hours ago*

Difficult as in unlikely that the exploit works or difficult to write an exploit?

Difficult as in it's a race condition that can theoretically be exploited when you get the timing right. But timing, if it's not on a well-known isolated system right before you in some lab, depends on a million details, some –once we are talking about real-life examples– outside your control.

  • source
  • parent