Hacker GitHub

← All repos

Netflix/security-bulletins

View on GitHub ↗ ★ 745

Security Bulletins that relate to Netflix Open Source

13 mentions on Hacker News by 11 people: 3 stories, 10 comments · first 2019-06-17 · latest 2020-01-14

Mentions per year 13 mentions · busiest year 2019 (12)
20082026
AllStoriesComments NewestTopOldest
  1. …Consider such things as this variety of DoS attacks against HTTP/2 from the last six months: https://github.com/Netflix/security-bulletins/blob/master/ad... . It’s improbable that these are are only major attack vectors in HTTP/2 and…
    comment by chrismorgan · 2020-01-14 · in The Status of HTTP/3
  2. Here's the actual Bulletin from Netflix. https://github.com/Netflix/security-bulletins/blob/master/ad... The Arstechnica article misses a few points, but basically SACK is fairly broken on Linux and inconvenient on FreeBSD only if you're…
    comment by bifrost · 2019-06-18 · in New vulnerability discovered by Netflix can kernel panic Linux
  3. …will be appended to the end of the INPUT chain. This has already been reported as an issue[2]. [2]: https://github.com/Netflix/security-bulletins/issues/4
    comment by ilikepi · 2019-06-18 · in SACK Panic – Multiple TCP-based remote denial-of-service issues
  4. …just inverting/negating the DROP rule ? >iptables -A INPUT -p tcp -m tcpmss --mss 1:500 -j DROP [1] https://github.com/Netflix/security-bulletins/blob/master/ad...
    comment by hackersword · 2019-06-18 · in SACK Panic – Multiple TCP-based remote denial-of-service issues
  5. They found a bug in FreeBSD too: https://github.com/Netflix/security-bulletins/blob/master/ad...
    comment by jontro · 2019-06-18 · in SACK Panic – Multiple TCP-based remote denial-of-service issues
  6. …"CVE-2019-11478: SACK Slowness (Linux < 4.15) or Excess Resource Usage (all Linux versions).") https://github.com/Netflix/security-bulletins/blob/master/ad...
    comment by loeg · 2019-06-17 · in SACK Panic – Multiple TCP-based remote denial-of-service issues
  7. https://github.com/Netflix/security-bulletins/blob/master/ad... is the advisory by the party that discovered the issue. (Disclosure: I have met Jonathan Looney and know some of the Netflix engineering staff, but I don't work for Netflix.)
    comment by loeg · 2019-06-17 · in SACK Panic – Multiple TCP-based remote denial-of-service issues
  8. https://github.com/Netflix/security-bulletins/blob/master/ad...
    comment by loeg · 2019-06-17 · in SACK Panic – Multiple TCP-based remote denial-of-service issues
  9. Some solution: echo 0 > /proc/sys/net/ipv4/tcp_sack https://github.com/Netflix/security-bulletins/blob/master/ad...
    comment by usrname · 2019-06-17 · in SACK Panic – Multiple TCP-based remote denial-of-service issues
  10. https://github.com/Netflix/security-bulletins/blob/master/ad... Hold on to your butts
    comment by ctime · 2019-06-17 · in CVE-2019-11477 TCP: Make sack processing more robust