Re:PoC to demonstrate root permission hijacking by exploitin...
by uidnobody on Saturday May 04, 2024 @01:17PM
(#40258994)
You're just making stuff up here, the OP was sent abuse firstly by pottering and handled the situation quite professionally by providing a detailed overview of the issue he posted and responding to the maintainers deflections with further information. The OP sent no death threats and posted about his perspectives and technical data on what he sees as a medium risk issue in systemd's pty handling. Why not chown the pty as he suggests, reduce the risk and thank him for giving his time freely on this matter? Conflating the behavior of others against Pottering as somehow someone discussing systemd publicly being responsible is classic DARVO actions. The OP was attacked by pottering, not the other way around.
Re:PoC to demonstrate root permission hijacking by exploitin...
by Foxboron on Monday May 06, 2024 @11:13AM
(#40275619)
Matthew was shitting on systemd and pulling no shots. Poettering calling Matthew a scriptkiddie is mild.
He did call me a "facist weenie" with no clear reason why beyond me pushing back on their grand claims.
And again, there is no "vulnerability", there is simply a person that doesn't know how Linux works and has learned something new. Which again it's fine, nobody knows everything and we all learn new things everyday, it's just that normal and sensible people don't use that to make grand claims on social media and start harassment campaigns culminating in death threats.
Professional security researchers responsibly report real issues using the appropriate channels, such as defined at: https://github.com/systemd/systemd/security/policy this is not the work of a researcher, this is a grifter looking for self-promotion on social media.