Multiple Vulnerabilities in PfSense

Re:Multiple Vulnerabilities in PfSense by m1gu3l on Friday March 18, 2022 @03:05AM (#30719370)

> Until the attack on Wireguard's Jason A. Donenfeld. Then I realised - it's all true. They are bordering on insane in that organisation. I regret suggesting my old workmate purchase some of their hardware now.

This sounds fun. do you know where I can read more?

edit: think i found a good start https://www.reddit.com/r/networking/comments/m6zjie/wireguar...

[ Parent | on HN ]

Re:Multiple Vulnerabilities in PfSense by Arnavion on Friday March 18, 2022 @03:14AM (#30719403)

HN thread: https://news.ycombinator.com/item?id=26475519

Events in chronological order:

- zx2c4 points out the brokenness of the Netgate implementation and his efforts to fix it: https://lists.zx2c4.com/pipermail/wireguard/2021-March/00649...

- ... which ends up being published by Ars: https://arstechnica.com/gadgets/2021/03/in-kernel-wireguard-...

- Netgate throws a fit, zx2c4 responds: https://lists.zx2c4.com/pipermail/wireguard/2021-March/00649...

- FreeBSD maintainer of the WireGuard implementation announces Netgate's implementation will be removed: https://lists.freebsd.org/pipermail/freebsd-hackers/2021-Mar...

- Netgate's damage control / copium response: https://www.netgate.com/blog/painful-lessons-learned-in-secu...

- FreeBSD dev steps down from further involvement with WireGuard-in-FreeBSD: https://lists.freebsd.org/pipermail/freebsd-hackers/2021-Mar...

[ Parent | on HN ]

Re:Multiple Vulnerabilities in PfSense by aaaaaaaaata on Friday March 18, 2022 @09:45AM (#30722151)

> zx2c4

is Jason (Wireguard creator).

[ Parent | on HN ]