News for hackers. Stuff that matters.

A comment on Still Standing [4chan]. Parent comment

Re:Still Standing [4chan] by bradly on Sunday April 27, 2025 @07:18PM (#43815961)
I agree. It is interesting how much they focus the hardware servers in the article.

I'd be more interested knowing which package was vulnerable?, was it a known exploit?, and what systems were/are in place to alert on vulnerable dependencies?. Instead they are focused on the new servers just taking too long and not enough money because of advertiser pressures.

[ Parent | on HN ]
Re:Still Standing [4chan] by dbaggerman on Sunday April 27, 2025 @09:51PM (#43816789)
They do mention their OS being out of date. One possible interpretation is they are using packages provided by a Linux distro, and getting up to date may have required a full OS update.

If that's were case, it would be easy to see how they might want to tie their OS upgrade to a hardware refresh rather than taking servers offline for a reinstall.

[ Parent | on HN ]
Re:Still Standing [4chan] by j_bum on Sunday April 27, 2025 @10:51PM (#43817065)
According to a Firebase video [0], the outdated and exploited package was called GhostScript.

[0] https://youtu.be/XNratwOrSiY?si=dxfD8Y7-wfOi0XcJ

[ Parent | on HN ]
Re:Still Standing [4chan] by sadeshmukh on Monday April 28, 2025 @12:25AM (#43817546)
Fireship is the channel name - firebase is the product he initially had based his channel off
[ Parent | on HN ]
Re:Still Standing [4chan] by j_bum on Monday April 28, 2025 @09:54AM (#43821553)
Oops - thanks for correcting my typo
[ Parent | on HN ]