Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

The DHCP attack vector is the one that is scariest to me. We know that dhclient on Linux is vulnerable, but the number of unpatched Linux machines on a public wifi network will likely be too small to be worthwhile to try to capture. Macs on the other hand are prevalent in places like coffee shops, and Apple is notoriously slow to patch security vulnerabilities in their operating systems. Has anyone done much analysis on OS X's vulnerability to this bug?


dhcpcd-6.4.7 is not vulnerable to this issue as it sanitises variables before calling the shell.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: