Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on CVE-2026-28952: Apple macOS 26.5 Kernel Vuln found by Claude. Parent comment
- looking at components in isolation, not realizing that a component could receive untrusted input
- looking at the entire system, but not in a configuration that made the CVE possible
- having to be extremely lucky to find the issue through fuzzing, and Apple not hitting that jackpot
- having found the issue in testing, but incompletely/incorrectly fixing it
- mostly focusing testing on other components because this one’s code didn’t change and hadn’t seen issues in years
I don’t think we have enough info to know which (or something entirely different) it is.
There are no comments on this comment yet.
- looking at components in isolation, not realizing that a component could receive untrusted input
- looking at the entire system, but not in a configuration that made the CVE possible
- having to be extremely lucky to find the issue through fuzzing, and Apple not hitting that jackpot
- having found the issue in testing, but incompletely/incorrectly fixing it
- mostly focusing testing on other components because this one’s code didn’t change and hadn’t seen issues in years
I don’t think we have enough info to know which (or something entirely different) it is.