A Skeleton Key of Unknown Strength | Dan Kaminsky’s Blog
▻http://dankaminsky.com/2016/02/20/skeleton
this galaxy is (…) Ubuntu Linux, in a map by Thomi Richards, showing how each piece of software inside of it depends on each other piece.
There is a black hole at the center of this particular galaxy – the GNU C Standard Library, or #glibc. And at this center, in this black hole, there is a flaw. More than your average or even extraordinary flaw, it’s affecting a shocking amount of code. How shocking?
I’ve seen a lot of vulnerabilities, but not too many that create remote code execution in #sudo. When DNS ain’t happy, ain’t nobody happy. Just how much trouble are we in?
We’re not quite sure.
#cartographie #internet #linux (et le gros #trou de sécurité #DNS au cœur du trou noir qu’est #glibc)