News for hackers. Stuff that matters.

A comment on OpenWRT remote code execution via MITM due to bug in package manager.

Re:OpenWRT remote code execution via MITM due to bug in pack... by eggsome on Friday January 31, 2020 @08:48PM (#22207962)
I'm confused, they recommend using your vulnerable version of opkg to update opkg?
[ Parent | on HN ]
Re:OpenWRT remote code execution via MITM due to bug in pack... by presumably on Friday January 31, 2020 @09:04PM (#22208050)
In that recommendation, they provide clear and easy to follow instructions for doing the checksum verification manually before applying the update.

> Compare both checksums and, if matching, proceed with installing the package

[ Parent | on HN ]