News for hackers. Stuff that matters.

A comment on Windows 7 patch for Meltdown enabled arbitrary reads and writes in kernel memory. Parent comment

Re:Windows 7 patch for Meltdown enabled arbitrary reads and ... by Raymonf on Wednesday March 28, 2018 @01:01AM (#16695420)
"Linux" had a bug in which you could log into a system by pressing backspace 28 times a few years ago. And by Linux, I meant GRUB[1], and in turn, (many) Linux systems.

We're comparing Linux and Windows, an operating system that contains 3.5 million files[2] (of course, not just the kernel in this case). That isn't really fair. Code is as perfect as humans can make it, and it certainly does not help that there's so much to take into account.

[1] http://hmarco.org/bugs/CVE-2015-8370-Grub2-authentication-by...

[2] https://arstechnica.com/gadgets/2018/03/building-windows-4-m...

[ Parent | on HN ]
Re:Windows 7 patch for Meltdown enabled arbitrary reads and ... by pecg on Wednesday March 28, 2018 @02:03PM (#16700145)
This GRUB bug you are talking about, is not a kernel problem though; on a side note, I'm going to read on the links you provided as I want to see if encrypted root partitions could also be compromised, I suspect no.
[ Parent | on HN ]
Re:Windows 7 patch for Meltdown enabled arbitrary reads and ... by chris_wot on Thursday March 29, 2018 @06:55PM (#16711962)
That's not quite on par with this Windows bug, but I take your point.
[ Parent | on HN ]