Linux: Vulnerabilities in nf_tables cause privilege escalation, information leak

Re:Linux: Vulnerabilities in nf_tables cause privilege escal... by shadowofneptune on Tuesday March 29, 2022 @11:56AM (#30844233)

> Europeans I have mentioned this to considered what did happen a sensible outcome.

Well, yeah. The firmware had been designed for a quite different rocket, the Ariane 4: https://www.bugsnag.com/blog/bug-day-ariane-5-disaster

I don't know how this is really a mark against Ada, it's an issue that would only be discovered by human intervention or by running a simulation of the rocket.

[ Parent | on HN ]

Re:Linux: Vulnerabilities in nf_tables cause privilege escal... by ncmncm on Tuesday March 29, 2022 @01:48PM (#30846015)

It would have made the Ariane-4 explode, too, if it had ever tripped.

It is not a mark against Ada, particularly, it is a mark against brain-dead insistence on overflow traps.

And, destroying a $half-billion payload because you insisted on leaving debugging apparatus in a production system would seem less obviously correct if the cost of the loss were deducted from your salary. So, people insisting it was a good result may be interpreted as expressing satisfaction with freedom from consequences of irresponsible behavior.

[ Parent | on HN ]

Re:Linux: Vulnerabilities in nf_tables cause privilege escal... by pjmlp on Wednesday March 30, 2022 @03:24AM (#30852331)

Maybe having devs paying from they own salary the business costs of buffer overflows, stack corruption, and use-after-free isn't that bad idea, good move.

[ Parent | on HN ]