Hacker News new | ask | show | jobs
by walletdrainer 25 days ago
> Can we make the kernel vulns less important?

Local kernel vulns are totally unimportant in any vaguely reasonable environment.

2 comments

People are doing too much HackTheBox or the like I guess … where you always have some entry point and then need to do privesc to get the root flag.

Then they are forgetting how much untrusted software they are running as their user account that can do much damage without need to do privilege escalation to root.

They absolutely suck in HPC environments. Bunch of users running all types of code that can just LPE themselves to root, not a good scenario.
Yes, but academic HPC environments are very 90s and are far from what is generally considered reasonable in 2026.