Netflix Uncovers TCP Bugs Within The Linux & FreeBSD Kernels

[wizard69]

I would have to say that these days there is a minimal amount of volunteer work in the Kernel. But otherwise I have to agree Linux is pretty good considering the lack of focus on security.

Really? for something that's free and mostly based on volunteer work, I find everything to be really amazing! The proposed fix had to be tested and reviewed.

[Azrael5]

Really? for something that's free and mostly based on volunteer work, I find everything to be really amazing! The proposed fix had to be tested and reviewed.

you are the typical fanboy unable to understand the benefit of improvement. The best way to make better something is to highlight the critical issues.

[Azrael5]

Till now, I ignore if Linux Oses are able to provide a LAN Service where Clients could share files. A Network system samba independent.

[AndyChow]

Till now, I ignore if Linux Oses are able to provide a LAN Service where Clients could share files. A Network system samba independent.

Not really, to my knowledge. You have NFS, samba, ftp, and that's about it. There are more advanced solutions, like nextcloud, but I don't think that's what you are talking about.

[Guest]

Linux Os has to improve in security and efficiency.

I don't think you can have both at the same time. It's always a compromise.

[starshipeleven]

A few minutes after the announcement my PC was already running 5.1.11. Too bad it's gonna take quite some time before OpenWRT updates their images. They haven't even applied the patches yet

OpenWrt is running LTS kernels (4.14 and 4.19), Linux git patches fail to apply.

They will just update their LTS kernels whenever the new patches arrive in Linux LTS branches.

[aht0]

Really? for something that's free and mostly based on volunteer work, I find everything to be really amazing! The proposed fix had to be tested and reviewed.

Over 50% of commits to Linux kernel are by (most likely paid) corporate devs. Look at the data bit more closely. Biggest single corporate entity doing it is Intel (all by itself over 10%).

[starshipeleven]

you are the typical fanboy unable to understand the benefit of improvement. The best way to make better something is to highlight the critical issues.

The best way to make better something is to actually make it better.

Just sending thoughts and prayers (or stating that it "must improve") is pointless and does incite bad reactions.

[starshipeleven]

Till now, I ignore if Linux Oses are able to provide a LAN Service where Clients could share files. A Network system samba independent.

it depends from how you define it.

NFS is more or less the same as samba but windows support sucks (not a Linux issue), ftp is kind of crappy but simple and similar enough to samba to share files for most people and home usecases, and also supported natively by Windows.

Then there are other solutions where you are using peers to sync around files like Syncthing.

[Volta]

Default FreeBSD is not even affected.

In term of default configuration.

What's funny Microsoft doesn't consider such vulnerabilities critical. It took them more than 90 days to fix similar problem:

https://www.bleepingcomputer.com/news/security/bad-cert-vulnerability-can-bring-down-any-windows-server/