3 ms·

I feel this is way too optimistic. Who doesn't own a few devices (especially routers and cellphones) that probably aren't ever going to get much-needed security

by AgentME 12y ago

I feel this is way too optimistic. Who doesn't own a few devices (especially routers and cellphones) that probably aren't ever going to get much-needed security updates from the manufacturer? I'm very for any PR about how not-okay this type of situation is.

0xdeadbeefbabe 12y ago
I feel the opposite, or that your optimism about exploiting the GHOST vulnerability is silly. PR firms aren't paid for good judgement. Lets see your cellphone and router exploits for GHOST, and then worry. Since you bring up cellphones how about these vulnerabilities http://www.extremetech.com/computing/170874-the-secret-second-operating-system-that-could-make-every-mobile-phone-insecure http://www.extremetech.com/computing/170874-the-secret-secon... These sound much worse. You can brick a phone etc.
- yuhong 12y ago
  Yes, cellphones and routers are not affected, but this is only because they use BusyBox etc not glibc.
  - teraflop 12y ago
    That's a non-sequitur -- busybox isn't a replacement for glibc. In fact, the busybox package included with Debian is linked against glibc, and I would assume the same is true for most other distributions.
    - yuhong 12y ago
      Sorry, I should have mentioned uclibc instead.