Hacker News

points by tptacek 1 day ago | 0 comments

You can't insist your way through not learning about one of the most important vulnerabilities announced in the last 50 days.

[–] otterley 1 day ago

You’re posing a false choice. I can learn it and still insist that people communicate well.

[–] tptacek 1 day ago

I mean, it's good to want things, but I don't know what that gets you today. They're not going to give you the hand-crafted post you're asking for.

[–] otterley 1 day ago

Not me personally, but with enough social pressure, perhaps these will cease over time. Minority positions become majorities. Policies change. You know, like what happened this past week.

The fact that you’re not joining the call for higher quality content is disheartening.

[–] tptacek 1 day ago

Hey, I don't write AI blog posts. But I want to know how KVM escapes work, too.

[–] sscaryterry 16 hours ago

You don't because you consider KVM to be part of Firecracker?

[–] tptacek 16 hours ago

If you're a provider, you absolutely do; it's part of the stack. It's like saying "Ruby" isn't a part of "Rails".

[–] sscaryterry 12 hours ago

This vulnerability does not require firecracker. The CVE does not mention firecracker at all.

Ruby is not Rails. The same way Linux KVM is not Firecracker. You cannot paint everything with the same brush. The author chose to make this sensationalist by implying its a firecracker issue. It is not.

I've repeatedly explained this.

[–] otterley 8 hours ago

You make it sound like uncritically tolerating AI slop is a nonnegotiable price of learning new things.

[–] tptacek 8 hours ago

It is when the "AI slop" is literally the only source of time-sensitive information, as it is here.

[–] otterley 7 hours ago

The time sensitive part containing the patch (which was also sloppy) was published last month; this article is but a PoC.

https://lore.kernel.org/netdev/20260922030310.8684-2-habte.y...

Anyway, I think you keep missing my point. It’s the “uncritical” word that is important here. How work is done is often as important as the work itself. Isn’t that what we teach our children and our junior colleagues? What’s more, expectations should be even higher with seniority.