Big Fish: Exploiting a 37-Year-Old Kernel Bug in OpenBSD
147 points - today at 2:44 PM
SourceComments
bch today at 3:41 PM
Props for the OpenBSD Release -style graphics. Looking forward to the theme song.
phendrenad2 today at 3:17 PM
Interestingly, looks like this was accidentally fixed in NetBSD during a rewrite of that code in August of 1999.
ozereray1 today at 3:20 PM
It’s remarkable that a bug survived 37 years in one of the most heavily audited codebases, which shows how hard some kernel bugs are to catch by review alone. Do you think fuzzing or static analysis could realistically have found this class of bug, or did it need a human thinking about the exploit primitive?
latencyharbor today at 4:15 PM
[flagged]
shiprules today at 4:11 PM
[flagged]
shevy-java today at 4:58 PM
Poor OpenBSD guys. Now they have to acknowledge THREE exploits
(in total) on their homepage.
ewy1 today at 8:14 PM
the ai-generated graphic before any content is presented is kind of a turnoff