3 ms·
This is pretty damning. What is actually needed to find a serious CVE in Linux: One night a few weeks back, I was bored. [...] so I decided to do some rando
by hyperman1 5y ago
This is pretty damning. What is actually needed to find a serious CVE in Linux:
One night a few weeks back, I was bored. [...] so I decided to do some random (kernel) code review.
So how does he decide which direction to look?
... a few notable bugs in the netfilter kernel subsystem ... relatively complex subsystem that’s widely available - the perfect target
That's an awfully low bar.