News for hackers. Stuff that matters.
Re:Linux: Vulnerabilities in nf_tables cause privilege escal... by arka2147483647 on Tuesday March 29, 2022 @03:32AM (#30839824)
How would fault tolerance help with privilege escalation?

Would it not just mean that you have more computers to update in your redundant/tolerant cluster?

Re:Linux: Vulnerabilities in nf_tables cause privilege escal... by hnlmorg on Tuesday March 29, 2022 @03:45AM (#30839910)
In this context it means you can take individual servers offline without taking your entire service down. So you can then update each server (even on production systems) live without requiring a maintenance window.

For bonus points you're also not babysitting manually provisioned servers but instead have your software installs automated. So any failure on a server or OS update isn't seen as a maintenance piece but rather just terminating the old server and letting your pipeline auto-build a new server. This is often referred to as "treating your servers as cattle rather than pets", though not everyone likes that analogy.

Re:Linux: Vulnerabilities in nf_tables cause privilege escal... by jhugo on Tuesday March 29, 2022 @03:39AM (#30839870)
In the context of a cluster, fault tolerance allows you to replace nodes without downtime. With automation a kernel update can then be a routine, low effort, low stress task.

Honestly, a kernel update has to be a routine, low effort, low stress task. It's a common event that should be seen as part of the normal operation of the system, not as some exceptional event that means someone has to work on the weekend.

Re:Linux: Vulnerabilities in nf_tables cause privilege escal... by kasey_junk on Tuesday March 29, 2022 @03:41AM (#30839880)
Theoretically it means that you can be running regular node OS updates as a matter of course simply by replacing some percentage of them on a rapid cadence.

Then there isn’t any stress to doing it, it’s routine and automated.