Live data from Hacker News

RCE via ND6 Router Advertisements in FreeBSD

freebsd.org

81–85 of 85 posts

Re: RCE via ND6 Router Advertisements in FreeBSD

#81

Earlier quoted context omitted.

"error-prone" means bugs are more likely than the alternatives. It doesn't mean that the alternatives completely eliminate the possibility of bugs. Come on.

I wonder what the tally is for "things posted to HN that'll replace bash/ksh/zsh in every respect REAL Soon Now". It's a genre of post unto itself.

What language is Systemd written in? I'm pretty sure it's not Bash.

Re: RCE via ND6 Router Advertisements in FreeBSD

#82

Earlier quoted context omitted.

I wonder what the tally is for "things posted to HN that'll replace bash/ksh/zsh in every respect REAL Soon Now". It's a genre of post unto itself.

What language is Systemd written in? I'm pretty sure it's not Bash.

I've never been able to use systemd as a command interpreter.

Re: RCE via ND6 Router Advertisements in FreeBSD

#83

Earlier quoted context omitted.

What language is Systemd written in? I'm pretty sure it's not Bash.

I've never been able to use systemd as a command interpreter.

An init system doesn't need to be a command interpreter. Why are you being so obtuse?

Re: RCE via ND6 Router Advertisements in FreeBSD

#84

Earlier quoted context omitted.

I've never been able to use systemd as a command interpreter.

An init system doesn't need to be a command interpreter. Why are you being so obtuse?

It doesn't need to be, but there are some advantages in being able to have system startup scripts in the same language that you do one-liners in at the terminal.

Re: RCE via ND6 Router Advertisements in FreeBSD

#85

Earlier quoted context omitted.

WPA2-entreprise and WPA3 both have certificate chains checking exactly to avoid such attacks

Hmm. Are you sure that your stack wouldn't accept these discovery packets until after you've successfully authenticated (which is what those chains are for) ? Take eduroam, which is presumably the world's largest federated WiFi network. A random 20 year old studying Geology at Uni in Sydney, Australia will have eduroam configured on their devices, because duh, that's how WiFi works. But, that also works in Cambridge,…

I may be missing something, but it is almost a guarantee that you would not receive a RA in this scenario? eduroam is using WPA2/WPA3 enterprise, so my understanding is that until you authenticate to the network you do not have L2 network access.

Additionally, eduroam uses certificate auth baked into the provisioning profile to ensure you are authenticating using your organizations IdP. (There are some interesting caveats to this statement that they discuss in https://datatracker.ietf.org/doc/html/rfc7593#section-7.1.1 and the mitigation is the usage of Private CAs for cert signing).

Post reply on HN