Hacker Newsnew | past | comments | ask | show | jobs | submit | glacier9147's commentslogin

I don't know, trying to stop communism also accounts for a lot of human suffering


Capitalism is just really good at telling people the reason they are poor is because they just don't work as hard as the elites


Yet people want to live in capitalist countries the most. Curious.


what other options do you have?

capitalism can work with say 99% tax on estate on death. No trust funds. Tax on wealth above a certain point. Rule of law with sharp teeth. Proper investment in education. Proper anti monopoly so all large corporations gets broken up to avoid their power consolidation...

communism is dictatorship in disguise.

then you have old style feudalism with aristocracy.

anything else?


What are the top countries to live in the world?


you tell me


western/nordic europe, japan, singapore, usa, canada

All capitalist.


I don't know if this is a Norway exclusive thing or if some other countries have similar laws aswell, but we have the right to take three continuous weeks of vacation during summer. You don't have to take the continuous weeks, but in my experience most people do


Wouldn't manually loading a module require elevated privileges? Isn't the issue they are trying to solve that completely unprivileged users can exploit the module to elevate their privileges?


Let's consider a sysadmin who says "I blacklisted this module, so we shall never see it on this system."

And then, some random service or cronjob goes down a list and "modprobes" things. Such as a vulnerability scanner.

So the kernel module got loaded by name, until the next reboot.

Yeah, it's another coincidence and another narrowing of the conditions by which this can be exploited. But it's correct to say that blacklisting modules is not the panacea or a 100% airtight solution.


I just tried it on Ubuntu 24.04. Blacklisting algif_aead does not prevent the module from getting loaded by `nobody` using the unprivileged AF_ALG API.

So this project literally does nothing except spew some vibe coded slop across your cluster. Please just upgrade your kernel packages, it's way safer.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: