News for hackers. Stuff that matters.

A comment on The importance of Devuan. Parent comment

Re:The importance of Devuan by someone12345 on Monday December 11, 2017 @02:55AM (#15895713)
> stuff such as the vulnerabilities in the DNS resolver because they reimplemented things from scratch without the necessary domain knowledge on how to do that securely that has been collected and implemented by the dozens of existing implementations over the decades

By domain knowledge how to do this securely in implementations tested oer time, do you mean something like https://access.redhat.com/articles/2161461?

It doesn't look like systemd's resolver fares worse in comparison... In addition it can be sandboxed (and is), an advantage over having a resolver part of libc.

[ Parent | on HN ]
Re:The importance of Devuan by zAy0LfpBZLC8mAC on Monday December 11, 2017 @06:26AM (#15896394)
Thank you for the demonstration, that is indeed roughly what that lack of domain knowledge combined with arrogance looks like.

Would you mind explaining how exactly sandboxing prevents cache poisoning?

[ Parent | on HN ]