Egregoros

Oh, lovely. FYI copy.fail, dirty frag and so forth are a class of bugs now, and the newest member of that class is called "fragnesia".

https://github.com/v12-security/pocs/tree/main/fragnesia

Patches have to be applied manually, I don't think anything is upstream yet. Patch details are here:

https://lists.openwall.net/netdev/2026/05/13/79

For the next few months I think we have to assume that userland security barriers don't exist. Once somebody's got a shell it's over. Once somebody has physical access it's over.

@mhoye giving up has never looked so appealing 😅🥲😢😭

@freddy I feel like we're going to have to revisit the fundamentals at some point here. Like, now that we know the germ theory of disease is real how could we be doing the whole surgery thing differently.

@mhoye THIS metaphor! Just heard a related, incredibly mindblowing talk where Sergey Bratus (Prof at Dartmouth), said we could shift away from engineering mentality ("everything is broken, sure. Go build a better one") to a medical one ("information on this new pathogen in itself is useful research. Do go on.") - or put differently: we are all pest doctors now :D