| ▲ | spydum 6 hours ago | ||||||||||||||||
Wow, that isn't clear. Is there an incident, or did they just become aware about MPTCP vuln? Details on the mptcp are also pretty scarce as well right? | |||||||||||||||||
| ▲ | csnover a few seconds ago | parent | next [-] | ||||||||||||||||
It is almost certainly the latter. There is another open report for a tranche of nginx vulnerabilities[0] and a closed report for PwnEscape that is identical[1]. | |||||||||||||||||
| ▲ | 6thbit 6 hours ago | parent | prev | next [-] | ||||||||||||||||
Yeah its unclear. Sounds like they are just now patching it and treating it as an incident which is probably the right thing to do. | |||||||||||||||||
| |||||||||||||||||
| ▲ | dofm 5 hours ago | parent | prev | next [-] | ||||||||||||||||
I am wondering if there is something significant written with Go in their system stack (Go uses MPTCP by default on listening sockets, it seems) | |||||||||||||||||
| ▲ | tbrownaw 4 hours ago | parent | prev | next [-] | ||||||||||||||||
I haven't seen any emails about it, so I'd lean towards it being something that doesn't rate sending emails. | |||||||||||||||||
| ▲ | lacoolj 5 hours ago | parent | prev [-] | ||||||||||||||||
Yeah agreed. I actually only noticed because my two boxes are super slow and I've been troubleshooting for about an hour. Finally opened up the Customer Support page and this was the top incident. | |||||||||||||||||