sscaryterry

This vulnerability does not require firecracker. The CVE does not mention firecracker at all.

Ruby is not Rails. The same way Linux KVM is not Firecracker. You cannot paint everything with the same brush. The author chose to make this sensationalist by implying its a firecracker issue. It is not.

I've repeatedly explained this.

The op is known to not read and spew propaganda.

You don't because you consider KVM to be part of Firecracker?

And honestly, how the &*DK is this ANYTHING related to firecracker?

They 100% added this because they want to be regulated, sued, blamed.

They ran it without a jailer, and exploited a bug in the linux socket code. Firecracker was just how they invoked/worked with /dev/kvm. It is not a firecracker bug. Its sensationalist nonsense.

> This is an issue in the kernel networking stack.

Exactly, its not a firecracker issue. Using firecracker without a jailer is like setting your password to "password".

Yes, 2 months is ancient if 0 days is the game.

Firecracker v1.17.0 was released 10 September, so the version is ancient.

The article is light on details, it is LLM slop.

This is pure LLM slop.

Your analogy is way off...

The first 2 it has, and the 3rd, you really don't want.

Objective-C is an Apple thingie :)

Slopfest

Placing a regex in configuration is asking for trouble.

We really don't need yet another format.

Slopfest

Agreed, but let’s not make such wild statements. Racism and xenophobia does not look at the colour of the perpetrator’s skin.

> Black people cant be racist

You are clearly misinformed.

Love OpenBSD, but the song thing is creepy.

Agreed.

Amen.

Who in their right mind would do this?

This could be an interesting bug-bounty type of initiative. Setup a system, lets other dudes at their expense battle for scraps?

Remember. Linux is a kernel. You can get the macOS userland to behave GNU/Linux like. Use homebrew :)

> OpenShell collects anonymous telemetry

Spyware

Exactly! This is the only place I like using LLMs, making old stuff work again, breathing new life into it. Containing it so it doesn't create security issues.

Exactly :) Its a pity people are so gullible that they cannot see, that people, truly are bastards.

As far as I know, to become a CA, with the requirements and ceremonies involved, this type of mistake must never happen. Assuming malice instead of ignorance is reasonable here. The entire premise of a CA, is trust.