@phnt@fluffytail.org @icon_of_computational_sin@mstdn.starnix.network @mangeurdenuage@shitposter.world To me CopyFail revealed what a complete and utter clusterfuck modern Linux systems are — and it's not about the fact that vulnerabilities exists or how they are disclosed. Cryptographic routines running in kernel space exported to user space via a socket, what the fuck for? For a 0.1% performance gain?! And kernel module getting loaded when a user — any user at all, creates a socket of a particular type? For real?! This is the shit a ni~ ehm… user gets to deal with now?! And in RHEL AFAIK they went even further and built that module right into the kernel — so there is nothing to unload or prevent from getting loaded. Neither of these things should be possible in a system that is considered even remotely secure! :marseytabletired2: While security folk insist on putting everything in a container — these things exist!