feddit.nl
  • Communities
  • Create Post
  • Create Community
  • Aquileo | heart
    Support Lemmy
  • Aquileo | search
    Search
  • Login
  • Sign Up
hirihit640@sh.itjust.works to Cybersecurity@sh.itjust.worksEnglish · 21 days ago

Google pays $250K for Linux vulnerability allowing guest VM escapes

arstechnica.com

Aquileo | external-link
Aquileo | message-square
7
Aquileo | link
Aquileo | fedilink
  • cross-posted to:
  • news@lemmy.linuxuserspace.show
  • selfhosted@lemmy.world
46
Aquileo | external-link

Google pays $250K for Linux vulnerability allowing guest VM escapes

arstechnica.com

hirihit640@sh.itjust.works to Cybersecurity@sh.itjust.worksEnglish · 21 days ago
Aquileo | message-square
7
Aquileo | link
Aquileo | fedilink
  • cross-posted to:
  • news@lemmy.linuxuserspace.show
  • selfhosted@lemmy.world
Both vulnerabilities allow untrusted users to gain root privileges.
Aquileo | alert-triangle
You must log in or register to comment.
  • sun_is_ra@sh.itjust.works
    Aquileo | link
    Aquileo | fedilink
    English
    Aquileo | arrow-up
    3
    Aquileo | arrow-down
    2
    ·
    21 days ago

    Can’t wait to see the day where Linux Kernel is 100% written in Rust

    • Onno (VK6FLAB)@lemmy.radio
      Aquileo | link
      Aquileo | fedilink
      English
      Aquileo | arrow-up
      7
      Aquileo | arrow-down
      1
      ·
      20 days ago

      And if you think that migration to Rust will magically remove all bugs and vulnerabilities, you haven’t been writing software for very long.

      • Muehe@lemmy.ml
        Aquileo | link
        Aquileo | fedilink
        English
        Aquileo | arrow-up
        6
        Aquileo | arrow-down
        1
        ·
        20 days ago

        Nobody said it would? But both of these vulnerabilities were use-after-free, so using Rust would probably have helped here (you know if Rust had been a thing back when they were introduced).

      • sun_is_ra@sh.itjust.works
        Aquileo | link
        Aquileo | fedilink
        English
        Aquileo | arrow-up
        2
        Aquileo | arrow-down
        1
        ·
        20 days ago

        It would solve this kind of bugs for sure

        • Onno (VK6FLAB)@lemmy.radio
          Aquileo | link
          Aquileo | fedilink
          English
          Aquileo | arrow-up
          6
          Aquileo | arrow-down
          1
          ·
          20 days ago

          … and replace them with a whole new class of bugs.

          Source: I’ve been writing software since 1982.

    • corsicanguppy@lemmy.ca
      Aquileo | link
      Aquileo | fedilink
      English
      Aquileo | arrow-up
      3
      Aquileo | arrow-down
      1
      ·
      20 days ago

      Something else will come along with an entourage of fanboys pushing for it to be the next porting language.

      It’ll be great; until the next one comes along.

      By then the kernel will be so slow that Linux will die.

  • Marija@lemmy.zip
    Aquileo | link
    Aquileo | fedilink
    English
    Aquileo | arrow-up
    1
    ·
    18 days ago

    Bug bounties continue paying off.

Cybersecurity@sh.itjust.works

cybersecurity@sh.itjust.works

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !cybersecurity@sh.itjust.works

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

  • Be respectful. Everyone should feel welcome here.
  • No bigotry - including racism, sexism, ableism, homophobia, transphobia, or xenophobia.
  • No Ads / Spamming.
  • No pornography.

Community Rules

  • Idk, keep it semi-professional?
  • Nothing illegal. We’re all ethical here.
  • Rules will be added/redefined as necessary.

If you ask someone to hack your “friends” socials you’re just going to get banned so don’t do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities !databreaches@lemmy.zip !netsec@lemmy.world !securitynews@infosec.pub !cybersecurity@infosec.pub !pulse_of_truth@infosec.pub

Notable mention to !cybersecuritymemes@lemmy.world

Visibility: Public
Aquileo | globe

This community can be federated to other instances and be posted/commented in by their users.

  • 370 users / day
  • 795 users / week
  • 1.35K users / month
  • 3.81K users / 6 months
  • 48 local subscribers
  • 10.4K subscribers
  • 5.17K Posts
  • 8.01K Comments
  • Modlog
  • mods:
  • Kid@sh.itjust.works
  • Lanky_Pomegranate530@midwest.social
  • BE: 0.19.20
  • Modlog
  • Instances
  • Docs
  • Code
  • join-lemmy.org