The "Hunting for Exploitation" section is unclear to me: "The exploit leaves a distinctive trace in kernel logs when it runs." Hmm. Wouldn't a system with a compromised kernel also log exactly what the attacker wanted logged?
How Cloudflare responded to the “Copy Fail” Linux vulnerability
31–40 of 86 posts
Re: How Cloudflare responded to the “Copy Fail” Linux vulnerability
#32this is a techincal dive into how cloudflare responded, not a confirmation that they responded for whatever reason, unknown to me, hn automatically strips "how" from the start of titles. i cant remember ever seeing a title where this was an improvement.
I learned a few years ago that HN also editorializes by dropping "world's" from titles Before: Teens break record for world's longest kickball game After: Teens break record for longest kickball game
Re: How Cloudflare responded to the “Copy Fail” Linux vulnerability
#33Earlier quoted context omitted.
Starting a title with “How” is standard clickbait.
If we are taking that attitude why not go all the way? Titles are standard clickbait.
I do think this would genuinely be useful.
Re: How Cloudflare responded to the “Copy Fail” Linux vulnerability
#34this is a techincal dive into how cloudflare responded, not a confirmation that they responded for whatever reason, unknown to me, hn automatically strips "how" from the start of titles. i cant remember ever seeing a title where this was an improvement.
I learned a few years ago that HN also editorializes by dropping "world's" from titles Before: Teens break record for world's longest kickball game After: Teens break record for longest kickball game
Re: How Cloudflare responded to the “Copy Fail” Linux vulnerability
#35Would love to learn more about their internal behavioural detection program. > One of the first things our security team did was confirm that our existing endpoint detection would catch this exploit. Our servers run behavioral detection that continuously monitors process execution patterns. It doesn't rely on knowing about specific vulnerabilities; it watches for anomalous behavior across the fleet.
Syscalls and kernel module loading can both be logged, I assume that's sufficient here.
Re: How Cloudflare responded to the “Copy Fail” Linux vulnerability
#36this is a techincal dive into how cloudflare responded, not a confirmation that they responded for whatever reason, unknown to me, hn automatically strips "how" from the start of titles. i cant remember ever seeing a title where this was an improvement.
> https://news.ycombinator.com/item?id=48018715 "How do I inform Windows that I’m writing a binary file?"
I wonder if it ending in a '?' has anything to do with it?
edit: Upon review, at the time of posting it was actually on the 2nd page
Re: How Cloudflare responded to the “Copy Fail” Linux vulnerability
#37Earlier quoted context omitted.
If we are taking that attitude why not go all the way? Titles are standard clickbait.
With LLMs, you could actually do anti-clickbait titles. Extract the article text with something like r.jina.ai, and ask an LLM to generate a ~80-character summary that explains the main point of the article for people too busy to read it. I do think this would genuinely be useful.
Re: How Cloudflare responded to the “Copy Fail” Linux vulnerability
#38Re: How Cloudflare responded to the “Copy Fail” Linux vulnerability
#39this is a techincal dive into how cloudflare responded, not a confirmation that they responded for whatever reason, unknown to me, hn automatically strips "how" from the start of titles. i cant remember ever seeing a title where this was an improvement.
Interestingly, there's a current post on the front page with "How" at the start of the title. > https://news.ycombinator.com/item?id=48018715 "How do I inform Windows that I’m writing a binary file?" I wonder if it ending in a '?' has anything to do with it? edit: Upon review, at the time of posting it was actually on the 2nd page
Re: How Cloudflare responded to the “Copy Fail” Linux vulnerability
#40this is a techincal dive into how cloudflare responded, not a confirmation that they responded for whatever reason, unknown to me, hn automatically strips "how" from the start of titles. i cant remember ever seeing a title where this was an improvement.
Interestingly, there's a current post on the front page with "How" at the start of the title. > https://news.ycombinator.com/item?id=48018715 "How do I inform Windows that I’m writing a binary file?" I wonder if it ending in a '?' has anything to do with it? edit: Upon review, at the time of posting it was actually on the 2nd page