News: 0000816516

  ARM Give a man a fire and he's warm for a day, but set fire to him and he's warm for the rest of his life (Terry Pratchett, Jingo)

OpenWRT code-execution bug puts millions of devices at risk (Ars Technica)

([Security] Apr 1, 2020 15:06 UTC (Wed) (corbet))


Ars Technica [1]reports on the recently disclosed OpenWrt package verification vulnerability. The headline may be a bit overwrought, though. " These code-execution exploits are limited in their scope because adversaries must either be in a position to conduct a man-in-the-middle attack or tamper with the DNS server that a device uses to find the update on the Internet. That means routers on a network that has no malicious users and using a legitimate DNS server are safe from attack. " It also assumes that people actually update their routers, which seems unlikely in most cases in the real world.



[1] https://arstechnica.com/information-technology/2020/03/openwrt-is-vulnerable-to-attacks-that-execute-malicious-code/

OpenWRT code-execution bug puts millions of devices at risk (Ars Technica)

So your router is secure as long as your DNS is secure. Hmm

OpenWRT code-execution bug puts millions of devices at risk (Ars Technica)

So your router is secure as long as your DNS is secure. Hmm

Won't Somebody Please Think Of The Microsoft Shareholder's Children?

The Evil Monopoly will soon be a duopoly of MICROS~1 and MICROS~2 now that
Judge Jackson has made his ruling. Geeks everywhere are shedding tears of
joy, while Microsoft investors are shedding real tears. But not everybody
is ecstatic about the ruling. "It dawned on me today that if Microsoft is
broken up, we won't have anyone to bash anymore. We can have that," said
Rob Graustein, the founder of the new "Save Microsoft Now! Campaign".

Rob continued, "I know what you're thinking! I have not been
assimilated... er, hired... by Microsoft. I'm not crazy. I haven't been
paid off. My life as a geek revolves around bashing Microsoft. I mean, I
own the world's largest collection of anti-Microsoft T-shirts and
underwear. It's time to take a stand against the elimination of Geek Enemy
#1."

Most observers agree that Mr. Graustein's brain has gone 404. "This guy is
nuts! Support Microsoft? I can't believe I'm hearing this. Even fake news
sites couldn't make up this kind of insanity."