collinfunk4 hours ago
As the person who wrote the fix for this issue (and not the original code), I will just mention that I find this paragraph makes the author sound incredibly entitled:
Shamefully, the inetutils project hasn’t actually released a fixed version of their software (at least at the time of publishing).
Perhaps I am just unlucky in my interactions, but I feel like this entitlement is too common among software security people. Note that I see zero return in spending time working on Inetutils, and I find other projects I work on more interesting.
[1] https://lists.gnu.org/archive/html/bug-inetutils/2026-03/msg... [2] https://lists.gnu.org/archive/html/bug-inetutils/2026-03/msg... [3] https://www.openwall.com/lists/oss-security/2026/03/12/4
x______________3 hours ago
The not-so-silent minority hanging out on HN know that the true heroes are those who take the time and put in the effort, and then put even more effort to reply and post about it here.
Thanks to all of our heroes, op included.
taftster3 hours ago
It's an unfortunate statement. And it does feel like it discredits you and the heroic efforts of those like you.
But this is probably forgiven as just sensationalism in writing, which is all too common. Not to excuse the author, but these types of writeups tend to drift into name calling and finger pointing a little too soon.
"Shamefully" is definitely the wrong word here, for sure.
JoshTriplett2 hours ago
> But this is probably forgiven as just sensationalism in writing
Why should we forgive sensationalism in writing at all?
saidnooneeveran hour ago
you are right they are entitled brats. usually they cant write good code themselves and they purposefully look for very old or low traffic code to find things that are 'old' etc. to make stupid uninteresting AI generated blog posts.
i have not seen a decent writeup in one of these clickbait things these ppl push out.
just ignore these types of ppl. its fine to fix the bugs ofc but what i mean is, ignore their attitudes. its a kids' attitude to life they keep
johnnyApplePRNGan hour ago
Something tells me the NSA is none too pleased about the advent of LLMs.
Or is there a tradeoff?
Fewer ancient holes like this for their hackers but wide open access to anyone who installs codex or claude code?
notimetorelax3 hours ago
I really dislike articles that blow out of proportion the technical details. TLDR; bounds checking was missing leading to potential memory corruption.
krautsauer3 hours ago
Needs a (March 19) (I know HN only does this for years, but this being about vulnerabilities…)
b800han hour ago
> "1994" > "RISC was a distant dream"
Ahem
dspillettan hour ago
Maybe I'm in a generous mood, but I would credit the writer with making a joke about the content of the film they had just mentioned and subsequently show a screen cap of work the subtitles for a line about RISC being a significant future technology, rather than being that historically inaccurate in their own tech memory.
mitxela2 hours ago
FYI all signalling is in-band signalling
khrbtxyz2 hours ago
A surprisingly long article for a one-line fix the authors didn’t send.
Skywalker132 hours ago
Since AI is redacting, a lot of articles are long and boring to read with a lot of useless details.
sjpb2 hours ago
If you're going to rip off xkcd pictures, I feel it'd be polite at least credit and/or link the original.
[deleted]3 hours agocollapsed
[deleted]5 hours agocollapsed
jeffbee3 hours ago
RISC was not a distant dream in 1994 LMAO.
b800han hour ago
That made me spit out my tea. The prose was insulting.