Home | Notifications | New Note | Local | Federated | Search | Logout

Note Detail

Reply to @sun@shitposter.world
Blurry Moon@sun@shitposter.world (2026-09-24 08:58:18)
@romin @anemone @icedquinn do I know my linux distribution didn't fuck up one of its ssh backport patches for LTS? no, I don't.
---Reply---
Only 3 Easy Payments of $19.95@feld@friedcheese.us (2026-09-24 09:01:03)
@sun @icedquinn @anemone @romin it's not like Debian or RHEL have ever fucked up something like that before

I know somewhere in the hall of shame is a completely new CVE caused by Debian trying to backport an Apache CVE fix and they did it wrong

---Replies---

Q.U.I.N.N.@icedquinn@blob.cat (2026-09-24 09:03:35)
@feld @anemone @romin @sun i feel like something like heartbleed is a very different story to "auth=none."

the JWT style breaches are so absolutely catastrophically bad in that they are so well documented that literally just asking claude to look at your code would have probably gotten you slapped. it's a special kind of incompetence.