←back to thread

Kernel-hack-drill and exploiting CVE-2024-50264 in the Linux kernel

(a13xp0p0v.github.io)
239 points r4um | 1 comments | 03 Sep 25 06:58 UTC | HN request time: 0.001s | source
Show context
charcircuit ◴[03 Sep 25 09:05 UTC] No.45113673[source]▶
>Convinced the path forward would be painful, I shelved the bug.

As opposed to fixing the bug? Either the incentives are broken for security researchers to fix bugs, contributing fixes to Linux is broken, or both.

A rewrite of these user interactable subsystems in Rust can't come soon enough.

replies(4): >>45113715 #>>45113831 #>>45113876 #>>45114005 #
pdw ◴[03 Sep 25 09:32 UTC] No.45113831[source]▶
Security researchers rarely fix bugs. They don't see it as their job, and it requires a very different skill set than finding or exploiting them anyway.
replies(2): >>45113915 #>>45114734 #
1. blueflow ◴[03 Sep 25 12:04 UTC] No.45114734[source]▶
"fixing bugs" gets lets street creds than "hacking into things"