Comment by jeffwass
7 hours ago
This submission is currently the main HN submission.
As of now the submission title is simply “Copy Fail”.
Given the severity of the exploit, can we edit the Title to add some context that it’s a major Linux vulnerability?
Eg the other submissions say this : “Copy Fail: 732 Bytes to Root on Every Major Linux Distribution.”
I dont really get why you'd
- buy a domain
- vibe code a page/artifact/whatever (which, given the quality of LLM wordings, only makes an argument less strong)
- post it on HN with no further explanation in the title
Why not write a detailed report? Even a tweet makes much more sense in my head than this. Even a logo??
Sorry if this comes over as salty, I guess I'm just not getting the thought process.
> I dont really get why you'd buy a domain [...] Even a tweet makes much more sense in my head than this
I think we should be celebrating people hosting their own content on their own website instead of just posting on some social media site.
I think they’re using it to promote their product, Xint Code, which was used to discover it. That’s the way I read it anyway.
I hope they sell a lot of Xint Code licenses, so they don't have to sell their findings.
1 reply →
Where would you have them write a detailed report if not a website?
Maybe it’s tradition https://news.ycombinator.com/item?id=7548991
The domain is canonical.
Then it's syndicate everywhere.
But all roads lead back to the domain.
Definitely comes over as salty. Naming major flaws has been a tradition for decades. Remember Heartbleed? It had a site and a logo :) Shellshock, Meltdown, Spectre as well. A few more: https://github.com/hannob/vulns
This site though is pretty useful; first it serves as a central location to point people to with short links in chats/emails/whatever, then it has a quick visual explainer and a link to the detailed technical report for those who want more info. Pretty neat.
Last but not least, buying the domain must have taken 5 minutes, prompting the page must have taken 30 minutes and posting it on HN must have taken 1 minute. So it certainly wasn't a lot of work in the grand scheme of things and probably did not deter the team from doing other important things.
It used to be done for fame and visibility. Give a marketable name and a website, your exploit will be talked about and your name will shine in the industry.
Now it's done by an LLM to sell more LLMs services. Disclosure is botched to have the most sensational title so more click more upsell.
[dead]