Systemd Opened Security Hole in Linux, VPNs Could Be Compromised

Re:Systemd Opened Security Hole in Linux, VPNs Could Be Comp... by gmueckl on Saturday December 07, 2019 @10:38AM (#21730783)

I am not quite convinced by the arguments with which the attack is downplayed here. I think this explanation is biased too much towards attackimg short lived HTTP connections. Not all TCP connections are short lived. It might also be possible to spoof DNS replies with some guessing (if the VPN endpoint is associated with a known public provider, the DNS server is likely known as well).

[ Parent | on HN ]

Re:Systemd Opened Security Hole in Linux, VPNs Could Be Comp... by noobermin on Saturday December 07, 2019 @10:40AM (#21730792)

Did you perhaps mean to say you're not convinced?

[ Parent | on HN ]

Re:Systemd Opened Security Hole in Linux, VPNs Could Be Comp... by gmueckl on Saturday December 07, 2019 @10:56AM (#21730886)

Yes, I did a sloppy editing pass over the first sentence. Fixed.

[ Parent | on HN ]