The DMZ

« first day (2774 days earlier) ← previous day next day → last day (2098 days later) »

1:37 AM

Read this a while ago, but maybe someone else will also find this interesting (talks about CPU bugs and Intel's formal verification): danluu.com/cpu-bugs

> As someone who worked in an Intel Validation group for SOCs until mid-2014 or so I can tell you, yes, you will see more CPU bugs from Intel than you have in the past from the post-FDIV-bug era until recently.

And it came true. And keeps coming true. It's the gift that keeps on giving.

1 hour later…

forest

2:49 AM

You are still not giving a single concrete example on how an unprivileged user can crash a root sshd locally. Trigger an OOM... yes and so how exactly? What kind of input create a crash of sshd? Any concrete examples or just pure speculations? — Patrick Mevzek 50 mins ago

[SCREAMS INTERNALLY]

This guy is literally arguing that OpenSSH cannot be affected by local DoS bugs...

So I give him some examples of DoS CVEs ranging from 2006 to 2016, and he points out that I am giving examples from 2006, saying:

> When asked how to crash a modern ssh you reply with some CVEs of 2006 ?? Yeah right if you think that proves your point...

7 hours later…