Re:Dirty COW is a privilege escalation vulnerability in the ...
by avian on Friday October 21, 2016 @06:38AM
(#12759353)
I like how "Am I affected by the bug?" part checks your user agent string for "Linux" and says "yes" or "no" accordingly.
As if I wasn't reading that page from a phone while running Linux on a server. Then again, the exploit didn't work for me on unpatched 3.4.112 kernel, so it might actually be correct.
Re:Dirty COW is a privilege escalation vulnerability in the ...
by Terr_ on Friday October 21, 2016 @05:27AM
(#12759158)
> Dirty COW
For a second that sounded like the group "Cult of the dead cow" and their showpiece trojan "Back Orifice", designed to popularize the insecurity of Windows 98.
Re:Dirty COW is a privilege escalation vulnerability in the ...
by rurban on Friday October 21, 2016 @03:18AM
(#12758725)
This has immature and false information.
Mostly, yes exploits in the wild have been detected in HTTP requests, and as the researcher assumes this exploit could have existed for a very long time.
And it's not a local privilege escalation only as the write up assumes, it was exploited remotely!
As if I wasn't reading that page from a phone while running Linux on a server. Then again, the exploit didn't work for me on unpatched 3.4.112 kernel, so it might actually be correct.
[0] https://news.ycombinator.com/item?id=12756006
For a second that sounded like the group "Cult of the dead cow" and their showpiece trojan "Back Orifice", designed to popularize the insecurity of Windows 98.
Mostly, yes exploits in the wild have been detected in HTTP requests, and as the researcher assumes this exploit could have existed for a very long time.
And it's not a local privilege escalation only as the write up assumes, it was exploited remotely!