TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

4chan was still running on a version of FreeBSD from 2019

20 点作者 stiray20 天前

5 条评论

pengaru20 天前
&gt; The version of Ghostscript was from 2012 and this allowed a specially crafted PDF file to execute a SUID binary and the attacker to gain access.<p>I don&#x27;t care what version of Freebsd you&#x27;re using. If your webapp is running Ghostscript against user-supplied data without doing so in a throwaway VM or at least container of some sort, no amount of updating will save you. That is an insane piece of software to be feeding untrusted input to without wearing a condom.
vermaden19 天前
Not from 2019 - from 2014.<p>FreeBSD 10.1 was released in 2014 and reached EoL in 2018.<p>I can compile FreeBSD 10.1 today and the displayed date by `uname` will be 2025 - that does not mean that code is from 2025 - only that it was compiled in 2025.<p>Hope that helps.
stiray20 天前
Such high profile target without security patches for system and probably outdated pkgs&#x2F;ports for at least 3 years, I am actually surprised they survived that long.
评论 #43809802 未加载
riffraff20 天前
The title here says 2019 but the linked page says 2014. This confused me for a bit.
评论 #43809969 未加载
n2d420 天前
I know we don&#x27;t comment on formatting here, but WTF is this website?? I can&#x27;t tell whether this is some early AI experiment or just someone trying to imitate the slang used on 4chan, and also there are ads covering literally two thirds of my screen. It almost feels like a parody. Is it?
评论 #43809887 未加载
评论 #43810241 未加载