News for hackers. Stuff that matters.

A comment on The mysterious case of the Linux Page Table Isolation patches. Parent comment

Re:The mysterious case of the Linux Page Table Isolation pat... by saas_co_de on Monday January 01, 2018 @02:03PM (#16047447)
Exactly. This is just some random nerd. There are people all over the world whose full time job it is to track open source projects to develop exploits.
[ Parent | on HN ]
Re:The mysterious case of the Linux Page Table Isolation pat... by avh02 on Monday January 01, 2018 @02:49PM (#16047673)
and when script kiddies get wind that there is something potentially disastrous in the open, it can be exploited 10 times harder, that's all I'm saying.

I understand (and agree) that the system admins/owners should also be able to mitigate through knowledge, but it's a dilemma that I think is better resolved by the other solution

(in this case it's apparently a complex issue, but history has shown that there are surprisingly easy to exploit bugs/issues (see heartbleed, shellshock (which was apparently very quickly exploited.))

[ Parent | on HN ]
Re:The mysterious case of the Linux Page Table Isolation pat... by saas_co_de on Monday January 01, 2018 @03:38PM (#16047910)
No "script kiddies" can write exploit code for something on this level.

This guy is not releasing an exploit implementation, he is just pointing to the existence of a potential exploit that has a patch in development. He can't even figure out exactly what it is.

The only people who would be able to code this exploit would be the ones who already figured it out before this guy.

[ Parent | on HN ]