Top
Best
New

Posted by dangelosaurus 16 hours ago

A thousand fewer paths to root(openai.com)
430 points | 316 commentspage 4
ksec 13 hours ago|
I wonder if they could run it on OpenBSD and FreeBSD as well.
tiffanyh 12 hours ago|
Anthropic ran Mythos against OpenBSD and only had 1 reported vulnerability.

https://www.anthropic.com/glasswing

asdff 8 hours ago||
Is this because of security or poor representation in training set? Then again that might not matter, same outcome.
IcyWindows 14 hours ago||
I think this is one area where Windows has an advantage.

ACLs, Appcontainers with capabilities, etc have been something in the OS for more than a decade.

jasonjayr 14 hours ago||
There are a lot of LPE's in Windows too. Remember that it started out as a single user operating system, it took a long time to get software on board to not always running as admin.
easton 11 hours ago|||
Was NT ever single user? I thought they built it with network/multiuser in mind.

(I agree that maybe applications could’ve been built for 3.1/9x and expect a single user, but the os expects multiple).

perching_aix 13 hours ago|||
Considering the amount of crazy shit even just user access allows you to do, by design, an LPE is not even really necessary.
viraptor 11 hours ago||
Linux has effectively same options and more via LSM. I'm not sure why ACL is mentioned here since it exists on Linux too. What advantage do you mean specifically?
breisa 6 hours ago||
Crazy times. These corporations and their governments have access to literal zero-day vending machines. Put $50 in - get another one. I mean, yeah, it was clear that certain agencies had heaps of useful exploits at hand for quite some time now. But AI really commoditizes these exploits. If there's source code or even just a binary available, they can hack it. And even if your code is robust and secure, they just pull the lever on the vending machine again and come back with some zero-day for your OS's networking stack.
matt3210 6 hours ago||
cc <<< 'Rewrite the kernel, all libs and all GNU in rust so we can avoid the unsafe keyword. Make only one mistake and document it in mistake.md'
sean_pedersen 7 hours ago||
How many of these would have been prevented by using safe Rust?
clvx 13 hours ago||
and yet thousands of iot devices will not get these updates. This is gonna be fun.
tarpitt 13 hours ago|
Oh no, they will not be secured against their own users :(
hoppp 15 hours ago||
Well at least they are doing public service while hacking the planet.
snvzz 8 hours ago||
And so many more are hidden in there, in those MLoCs.

The only way forward is a better system architecture, as enabled by the seL4[0] microkernel.

Any solution involving keeping Linux or the monolithic kernel is just stopgap or outright delusional.

0. https://sel4.systems

minfazhai 12 hours ago||
[flagged]
sehw 10 hours ago|
[dead]
More comments...