Post B6I604cpx4Lg7Zoc6q by freddy@security.plumbing
 (DIR) More posts by freddy@security.plumbing
 (DIR) Post #B6HoN8YHijiFmiXAI4 by mhoye@cosocial.ca
       0 likes, 1 repeats
       
       Oh, lovely. FYI copy.fail, dirty frag and so forth are a class of bugs now, and the newest member of that class is called "fragnesia".https://github.com/v12-security/pocs/tree/main/fragnesiaPatches have to be applied manually, I don't think anything is upstream yet. Patch details are here:https://lists.openwall.net/netdev/2026/05/13/79
       
 (DIR) Post #B6HoNBlVm14jkbkGp6 by mhoye@cosocial.ca
       0 likes, 0 repeats
       
       For the next few months I think we have to assume that userland security barriers don't exist. Once somebody's got a shell it's over. Once somebody has physical access it's over.
       
 (DIR) Post #B6I604cpx4Lg7Zoc6q by freddy@security.plumbing
       0 likes, 0 repeats
       
       @mhoye giving up has never looked so appealing 😅🥲😢😭
       
 (DIR) Post #B6I604npID8gfexOEq by mhoye@cosocial.ca
       0 likes, 0 repeats
       
       @freddy I feel like we're going to have to revisit the fundamentals at some point here. Like, now that we know the germ theory of disease is real how could we be doing the whole surgery thing differently.
       
 (DIR) Post #B6I6053QMDcFS2FqYC by freddy@security.plumbing
       0 likes, 0 repeats
       
       @mhoye THIS metaphor! Just heard a related, incredibly mindblowing talk where Sergey Bratus (Prof at Dartmouth), said we could shift away from engineering mentality ("everything is broken, sure. Go build a better one") to a medical one ("information on this new pathogen in itself is useful research. Do go on.") - or put differently: we are all pest doctors now :D
       
 (DIR) Post #B6I605HbVUxUA0tAeW by mhoye@cosocial.ca
       1 likes, 0 repeats
       
       @freddy The thing about our guy here is…. As ridiculous as it he looked, everything there is there with a reason, _and mostly, kinda, worked_. Those lenses meant to ward off the “evil eye”, that beak full of potpourri to protect you from the “mal aria”, it also kept people from coughing on your face. Those waxed robes kept bodily fluids off you. This whole thing is a hazmat suit for a demon-haunted world, where we have some learned practice but no grounding theory. This is infosec right now.
       
 (DIR) Post #B6I606F9w4b58ikjTs by mhoye@cosocial.ca
       0 likes, 0 repeats
       
       @freddy right now it feels like we’re trying to build a sterile operating theatre to do neurosurgery using only the tools in this picture, and … it’s not going to work. It can’t work. We need soap and sterile bandages and anaesthetics and and and. Our current set of foundational tools and practices aren’t cutting it.