top 50 comments

sorted by: hot top controversial new old
[–] 117 points 3 months ago

It's listed as medium severity and appears to require the hacker to already have terminal access to the system. It's also already patched and there's a quick and easy workaround if your distro doesn't have the fix yet.

  • source
  • [–] 110 points 3 months ago

    I think that the OP(the article author) is not looking at this the right way. Like yea it sucks another exploit is found, but it's not like if it wasn't found it doesn't exist.

    I think its much better to have them published and fixed then to live in blissful ignorance when someone could be exploiting it in the wild.

  • source
  • [–] 62 points 3 months ago (10 children)

    Oh FFS, the rest of my life is doomed to be spent updating software

  • source
  • hideshow 10 child comments
  • [–] 51 points 3 months ago (2 children)

    But careful not to update too fast and fall on the supply chain attack of the week.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 5 points 3 months ago*

    Pretty sure that was in the bible.

    Proverbs 25:16 - If you find honey, eat just enough - too much of it, and you will vomit.

    Could update that to be: If you find updates, apply them - too soon though, and you will vomit your credentials.

  • source
  • parent
  • [–] 10 points 3 months ago (3 children)

    It is more important than ever to introduce geo-ip conditional access on your network(s). That way you limit your attack surface by a significant margin.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 4 points 3 months ago* (2 children)

    My personal stuff 100%

    For work? No such choice (apart from the obvious ones)

  • source
  • parent
  • hideshow 2 child comments
  • [–] 11 points 3 months ago

    Oh good. Nothing too serious, then.

  • source
  • load more comments
    view more: next ›