Earlier quoted context omitted.
"error-prone" means bugs are more likely than the alternatives. It doesn't mean that the alternatives completely eliminate the possibility of bugs. Come on.
I wonder what the tally is for "things posted to HN that'll replace bash/ksh/zsh in every respect REAL Soon Now". It's a genre of post unto itself.
RCE via ND6 Router Advertisements in FreeBSD
81–85 of 85 posts
Re: RCE via ND6 Router Advertisements in FreeBSD
#82Earlier quoted context omitted.
I wonder what the tally is for "things posted to HN that'll replace bash/ksh/zsh in every respect REAL Soon Now". It's a genre of post unto itself.
What language is Systemd written in? I'm pretty sure it's not Bash.
Re: RCE via ND6 Router Advertisements in FreeBSD
#83Re: RCE via ND6 Router Advertisements in FreeBSD
#84Earlier quoted context omitted.
I've never been able to use systemd as a command interpreter.
An init system doesn't need to be a command interpreter. Why are you being so obtuse?
Re: RCE via ND6 Router Advertisements in FreeBSD
#85Earlier quoted context omitted.
WPA2-entreprise and WPA3 both have certificate chains checking exactly to avoid such attacks
Hmm. Are you sure that your stack wouldn't accept these discovery packets until after you've successfully authenticated (which is what those chains are for) ? Take eduroam, which is presumably the world's largest federated WiFi network. A random 20 year old studying Geology at Uni in Sydney, Australia will have eduroam configured on their devices, because duh, that's how WiFi works. But, that also works in Cambridge,…
Additionally, eduroam uses certificate auth baked into the provisioning profile to ensure you are authenticating using your organizations IdP. (There are some interesting caveats to this statement that they discuss in https://datatracker.ietf.org/doc/html/rfc7593#section-7.1.1 and the mitigation is the usage of Private CAs for cert signing).