bawolff
It is a very famous vulnerability that has been all over tech news sites. Sometimes it is ok to assume the audience has the slightest bit of background knowledge about the topic at hand.
Given people have demonstrated getting root with it, unlikely seems questionable
> Especially given that the exploit can only be done if packets with IP options. IP options are commonly dropped or removed from packets on the open web.
It sounds like iphones use mptcp in the wild, which use tcp options, so im not sure how true this is.
I think its working so far.
Wikipedia has always been different from other sites for leaning more on human labour instead of automated systems (so-called "soft security" https://meatballwiki.org/wiki/SoftSecurity ).
Bonus points for also filtering out paywalls.
I'm tired of search results being useless. The signal to noise ratio on internet search is much worse now a days.
Sounds like all the more reason for china to start a war.
Just having one side dependent isn't going to stop war.
Personally i feel for the guy, imagine the whole world insisting you only work on the project you started back in 1991.
On that hypothesis, it doesnt really surprise me that illusions based on context clues are interpreted differently.
I think its important to remember that Wikipedia wasn't always the only game in town, it was just the one that won. Part of that comes down to the choice of caring about prestige and reputation. Other projects like everything2 did not; look where they are now.
On the internet, nobody knows you're a dog.
If someone has it in for you and hired a high skill attacker, its not a stretch to imagine they compromised your home network.
I don't think its wise to make current security decisions based on screw ups from almost 2 decades ago.
Physical access to networks isn't that hard to come by.
For the hezbollah attack, it wasnt detectable because they used a very small amount and they used PTEN which is harder to detect than other explosives. Even still there is a lot of speculation online that they might have detonated earlier than planned due to being discovered
As far as USA goes - countries dont have friends they have shared interests. They are allies because their interests largely align, but they are very far away from perfectly aligning. I think people believe the propaganda that Israel is a vassal of USA too much - that isn't the case; Israel has more than enough power to plot their own foreign policy and they dont hesitate to do so when it suits their interests, just like any other country does when they have the ability.
The article seems careful to say "manipulated equipment", which sounds more like snowden style eavesdropping devices than bombs. That would be more believable to me, as sneaking exploding devices into countries they are not at war with seems implausibly diplomatically stupid. It also mostly worked for hezbollah because they were a non state group that didnt have the budget to do supply chain security. I could see targeted spy devices being plausible, but hezbollah style exploding pagers doesnt seem all that plausible or even desirable against real countries.
Consider me doubtful.
If it was really true, i'm pretty sure they would STFU about it.
Wouldn't those people choose to stay? Buyouts are much more attractive if you can easily get a new job.
Security improved one blockbuster vuln at a time.
Closed source might have more money but they almost never invest it in security.
It only bothers me when they try to claim their new license is open source or use misleading language when it isn't. Which seems to be what 90% companies doing that do.
People can do whatever they want with their intellectual property as long as they aren't lying about it.