Hacker News: chuso

New comment by chuso in "Copy Fail"

chuso — Thu, 30 Apr 2026 08:05:59 +0000

It's the same with Gentoo, setuid binaries are installed without read permission.

But modifying a setuid binary is just the demo exploit that was published with the vulnerability disclosure. The vulnerability actually allows modifying four bytes in any readable file. That means system configuration files, other binaries intended to be run by root, libraries... It's not limited to modifying setuid binaries.

New comment by chuso in "Balancing “If it ain’t broke, don’t fix it” vs. “Release early and often”"

chuso — Fri, 23 Sep 2022 15:11:47 +0000

Break it often and don't fix it.

New comment by chuso in "ISPs Removing Their Customers' Email Encryption"

chuso — Tue, 11 Nov 2014 23:21:44 +0000

AFAIK, GnuPG and S/MIME only encrypt message body, but not its headers such as sender, receipt, date, subject, ...