Join the discussion
Write your take first — we'll ask for email only when you're ready to publish.
- Hacker News
- Given these types of security bugs that are being found left and right, I reckon there's going to be an uptick in hiring of software engineers to fix them.
- This is a good portion just slop, another 9000 word article that could have been a couple of paragraphs. More text doesn't mean better.by drum55
- The overlaid HTML popup on that page for "Try The World's First Agentic AI Hacker." tool is cancerous and annoying. This should really be a link to a more reputable link for the CVE in question.
It doesn't appear until you've read the page for maybe 10-15 seconds, so if you're not seeing it, just wait.
It even managed to get past ublock origin, since there's no specific rule for it yet.
by walrus01 - I fail to understand / find the gist of this article.
Article describes the technical aspects of the bug, how it got handled by different vendors...AI position on it...
But, one would always ask themselves, why did the author write this article? That part hasn't been clear to me even after going through much of the article.
by ReDress - Would dropping these specialized ipv4 syn packets with extra header size beyond 20 bytes (as indicated by options value >5) with the firewall be low enough in the order of things to mitigate the attack? Like, iptables -A INPUT -p tcp --syn -m u32 --u32 "0>>24&0xF=6:15" -j DROP ?by superkuh
- Thankfully the vast majority of servers are not creating MPTCP listeners by default (that I'm aware of).
Not sure why the article doesn't mention it, but you can specifically check for MPTCP listeners using `ss -M`.
by majorchord - Whoever failed to edit this CVE description down owes us all a bunch of our time back
Everyone using LLMs needs to stop shipping their first draft.
by cadamsdotcom