News for hackers. Stuff that matters.
Re:Systemd Opened Security Hole in Linux, VPNs Could Be Comp... by pkilgore on Saturday December 07, 2019 @10:47AM (#21730826)
A response to the report [1] noted:

> This attack works regardless of if you have a VPN or not. The attacker just needs to be able to send packets to the other host. It's not systemd specific.

[1] https://seclists.org/oss-sec/2019/q4/123

Re:Systemd Opened Security Hole in Linux, VPNs Could Be Comp... by chapium on Saturday December 07, 2019 @10:58AM (#21730902)
> Most of the Linux distributions we tested were vulnerable, especially Linux distributions that use a version of systemd pulled after November 28th of last year which turned reverse path filtering off. However, we recently discovered that the attack also works against IPv6, so turning reverse path filtering on isn't a reasonable solution, but this was how we discovered that the attack worked on Linux.