News for hackers. Stuff that matters.

A comment on How to get root on Ubuntu 20.04 by pretending nobody’s /home. Parent comment

Re:How to get root on Ubuntu 20.04 by pretending nobody’s /home by howlgarnish on Wednesday November 11, 2020 @04:39AM (#25056949)
For others wondering what this was referring to: http://taint.org/2008/05/13/153959a.html

TL;DR: To silence a valgrind warning, Debian maintainers added a local patch to OpenSSL that commented out the entropy pool, making all SSL keys predictable.

[ Parent | on HN ]
Re:How to get root on Ubuntu 20.04 by pretending nobody’s /home by Dylan16807 on Thursday November 12, 2020 @12:55PM (#25072545)
More specifically, they made a valid change that silenced a valid warning, and then in a terrible mistake they found a line somewhere else that looked the same and made the same change to it too.
[ Parent | on HN ]