Hacker News Reader

But they have very valid point: a CVE 10.0 with root RCE on twenty internal servers is lower risk than one vulnerable internet-facing server. All need to be patched, but the one on the Internet is your critical risk, the others are medium at worse.

It's trivially easy to disable multipath in Go.

No this vulnerability is about IP Options, not MPTCP.

Any go service exposed over the internet for me is through an apache reverse proxy. Does that preserve MCTCP? Probably not, especially on an EL system...