Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

The MADBugs work is solid, but what's sticking with me is the autonomy angle — not just finding a vuln but chaining multiple bugs into a working remote exploit without a human in the loop. FreeBSD kernel security research has always been thinner on the ground than Linux, which makes this feel both more impressive and harder to put in context. What's the actual blast radius here — is this realistically exploitable on anything with default configs, or does it need very specific conditions?


FTA, top:

> Attack surface: NFS server with kgssapi.ko loaded (port 2049/TCP)

Not sure who would run an internet exposed NFS server. Shodan would know.


You also need a valid Kerberos ticket to get to the point where you can exploit.


This post is AI slop.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: