Netflix Uncovers TCP Bugs Within The Linux & FreeBSD Kernels

[starshipeleven]

you are the typical fanboy unable to understand the benefit of improvement. The best way to make better something is to highlight the critical issues.

The best way to make better something is to actually make it better.

Just sending thoughts and prayers (or stating that it "must improve") is pointless and does incite bad reactions.

[aht0]

Really? for something that's free and mostly based on volunteer work, I find everything to be really amazing! The proposed fix had to be tested and reviewed.

Over 50% of commits to Linux kernel are by (most likely paid) corporate devs. Look at the data bit more closely. Biggest single corporate entity doing it is Intel (all by itself over 10%).

[starshipeleven]

A few minutes after the announcement my PC was already running 5.1.11. Too bad it's gonna take quite some time before OpenWRT updates their images. They haven't even applied the patches yet

OpenWrt is running LTS kernels (4.14 and 4.19), Linux git patches fail to apply.

They will just update their LTS kernels whenever the new patches arrive in Linux LTS branches.

Linux Os has to improve in security and efficiency.

I don't think you can have both at the same time. It's always a compromise.

[AndyChow]

Till now, I ignore if Linux Oses are able to provide a LAN Service where Clients could share files. A Network system samba independent.

Not really, to my knowledge. You have NFS, samba, ftp, and that's about it. There are more advanced solutions, like nextcloud, but I don't think that's what you are talking about.

[Azrael5]

Till now, I ignore if Linux Oses are able to provide a LAN Service where Clients could share files. A Network system samba independent.

[Azrael5]

Really? for something that's free and mostly based on volunteer work, I find everything to be really amazing! The proposed fix had to be tested and reviewed.

you are the typical fanboy unable to understand the benefit of improvement. The best way to make better something is to highlight the critical issues.

[wizard69]

I would have to say that these days there is a minimal amount of volunteer work in the Kernel. But otherwise I have to agree Linux is pretty good considering the lack of focus on security.

Really? for something that's free and mostly based on volunteer work, I find everything to be really amazing! The proposed fix had to be tested and reviewed.

[Wojcian]

Linux Os has to improve in security and efficiency.

Like any other OS. However, Linux beats commercial OS'es by a large margin. Windows and OS X are far behind when comes to audit.

[jukk]

iptables -A INPUT -p tcp -m tcpmss --mss 1:500 -j DROP

It is much preferred to use "iptables -I INPUT" instead of "iptables -A INPUT". Depending on rules in your chain, -A could possibly cause much cpu load if the rule is heavily processed.

At HN it is suggested to use "-t raw -I PREROUTING", which could be of benefit especially with heavy traffic.