News for hackers. Stuff that matters.
Re:Freenginx: Core Nginx developer announces fork by arp242 on Wednesday February 14, 2024 @11:55PM (#39379255)
Almost every bug can be considered a security bug under the wrong set of circumstances.

With fairly cheap ddos services you can "just" order you can knock most servers offline anyway. Internet reachability is rarely safety-critical, and if it is, that's probably a huge design flaw somewhere because there's tons of reasons outside of your control that can make the internet not work for either the server or clients.

Is all of this inconvenient and (potentially) a serious problem? Sure. But not "zomg criminals have credit card records / can spoof random domains / read private data / etc. etc." type serious.

Re:Freenginx: Core Nginx developer announces fork by dspillett on Thursday February 15, 2024 @06:02AM (#39381286)
> Almost every bug can be considered a security bug [...] With fairly cheap ddos services...

A DoS bug and an DDoS attack are very different things. One is a flaw that can bring a service down, the other is a brute force technique for making a service unusable. You can DDoS services without exploiting bugs.

Re:Freenginx: Core Nginx developer announces fork by arp242 on Thursday February 15, 2024 @09:53AM (#39383343)
I am aware; my point is that "denying the service" is pretty easy even without the presence of any bugs in the service. Stealing credit cards on the other hand...