News for hackers. Stuff that matters.

A comment on Man who thought opening a TXT file is fine thought wrong. Parent comment

Re:Man who thought opening a TXT file is fine thought wrong by SquibblesRedux on Friday April 02, 2021 @11:05PM (#26678129)
Looking in /etc/auto_master, which is the configuration for Autofs, the /net mount point is commented out by default. I do not know when (or if) it was ever turned on by default.
[ Parent | on HN ]
Re:Man who thought opening a TXT file is fine thought wrong by tmp538394722 on Saturday April 03, 2021 @12:08AM (#26678366)
Whether or not a default configuration is vulnerable is a pretty typical component of accessing a vulnerability’s severity.

Unfortunate that the author didn’t mention this.

Obviously this doesn’t excuse the bug, but it’s important to contextualize if we hope to compare relative impact and have frank discussions.

[ Parent | on HN ]
Re:Man who thought opening a TXT file is fine thought wrong by comex on Saturday April 03, 2021 @01:47AM (#26678682)
The default configuration was, in fact, vulnerable at the time. Having it be commented out by default is new.
[ Parent | on HN ]
Re:Man who thought opening a TXT file is fine thought wrong by saagarjha on Saturday April 03, 2021 @06:55AM (#26679951)
The vulnerability: https://www.fcvl.net/vulnerabilities/macosx-gatekeeper-bypas...
[ Parent | on HN ]
Re:Man who thought opening a TXT file is fine thought wrong by icedchai on Saturday April 03, 2021 @12:07PM (#26682127)
I'm stilling running Mojave (10.14.x) and it is uncommented. The file dates to 2014 so I suspect it was set up with the original OS that came with this machine.
[ Parent | on HN ]