44 points rs_rs_rs_rs_rs 1 hour ago 5 comments
phendrenad2 32 minutes ago | parent
Interestingly, looks like this was accidentally fixed in NetBSD during a rewrite of that code in August of 1999.
ozereray1 29 minutes ago | parent
It’s remarkable that a bug survived 37 years in one of the most heavily audited codebases, which shows how hard some kernel bugs are to catch by review alone. Do you think fuzzing or static analysis could realistically have found this class of bug, or did it need a human thinking about the exploit primitive?
waz0wski 8 minutes ago | parent
Every blog post on this site is AI generated and covers bugs and exploits that were uncovered also by AI
So, sort of like fuzzing. There's a scary amount of exploitable stuff like this sitting in every BSD and Linux system out there, including every embedded system running old kernels in routers, cars, plcs, on and on
sippingabonedry 4 minutes ago | parent
It's not as heavily audited as you think. They have like a dozen active developers.
bch 9 minutes ago | parent
Props for the OpenBSD Release -style graphics. Looking forward to the theme song.