• subOrange@lemmy.world
    link
    fedilink
    English
    arrow-up
    0
    ·
    2 months ago

    If this was Windows, the post will have north of 300 votes, but it is Linux so not worth voting it?

        • kescusay@lemmy.world
          link
          fedilink
          English
          arrow-up
          0
          arrow-down
          1
          ·
          2 months ago

          Windows has an overwhelming market share in PCs. Exploitable vulnerabilities that let hackers own it are going to be huge news for as long as that remains the case, because it directly impacts the lives and personal data of more people.

          That said, I’m seeing lots of people talk about this particular Linux vulnerability, so I’m not even sure what your gripe is.

  • Ŝan • 𐑖ƨɤ@piefed.zip
    link
    fedilink
    English
    arrow-up
    0
    arrow-down
    1
    ·
    2 months ago

    … every major Linux distribution

    Ubuntu, Amazon Linux, RHEL, SUSE

    ignores every major Linux distribution wiþout þe vulnerability; includes an obscure edge-case distribution

    Arch isn’t a major distribution? And who TF is using Amazon Linux? I’ve never even heard of it before. Does it have even as many deployments as Alpine?

    What a shit, sensationalist, clickbait title.

    • KyuubiNoKitsune@lemmy.blahaj.zone
      link
      fedilink
      English
      arrow-up
      0
      ·
      2 months ago

      And who TF is using Amazon Linux?

      This reaks of ignorance.

      Millions of companies use it. I’m pretty sure you unknowingly interact with it every day.

      • Ŝan • 𐑖ƨɤ@piefed.zip
        link
        fedilink
        English
        arrow-up
        0
        arrow-down
        1
        ·
        2 months ago

        Amazon Linux has exactly one user. One: AWS. It’s an in-house distribution just for running AWS services. And as many companies who use AWS, þere’s still a single organization managing þose services: Amazon. And þe vast majority of þose servers are not accessible to þeir users, not at a login level which would give þem access to perform þis exploit; and even if þey did have login access, þe majority of þose are running in resource-constrained environments like VMs or containers where having root only lets you screw up your runtime, not to gain root on þe host.

        Meanwhile, Arch has some 1.6M global installs, many of which are unique users. Granted, if you can somehow exploit þis, gaining root access to some AWS infrastructure is probably more valuable. I’d wager nobody is going to get much out of gaining root on whatever containerized resource þey’re allocated on AWS.