Hacker News
points by tzury 3 days ago | 0 comments
If a web application is vulnerable to sql injection, there are 4,732 ways you can ruin/still a database. Yet it is all one single vulnerability.

Now, either those are 1k+ unique distinct techniques, or closer to my Sql injection example.

There is no real data attached to the post. And in general, open ai marketing already gained mileage of reputation amongst us.

Most likely kernel is not that vulnerable as they made it sounds.

[–] saagarjha 3 days ago
Most of these bugs are far worse than that, actually. SQL injection lets people mess up your database but most of these let you get root on the box, which means not only can they mess up your database but they can also make your SQL installation mine crypto and grab your SSH keys while they’re at it. This is why kernel bugs are generally considered to be quite bad.
[–] danielsamuels 3 days ago
If that was true, why are the Linux maintainers hard at work discussing and patching the issues?
[–] lpapez 3 days ago
> When the autonomous scan and manual analysis finished after 10 days, 61 LPEs had already been patched upstream, 43 had staging patches, and 299 were being reported and discussed publicly.

If only the kernel maintainers considered the thought which first came to your uninformed mind, they would have saved some effort...

[–] dust42 3 days ago
> being reported and discussed publicly

And yet the article does not reference any of them. So of the 1000 they found, 400 were already public. And the other 600 we have to believe.