alt Hacker NewsIs step 3 reading the CVE for long enough to understand that disabling mptcp is an incomplete mitigation? What happens if someone discovers a bug in the particular firewall software you're running?
Is step 3 reading the CVE for long enough to understand that disabling mptcp is an incomplete mitigation? What happens if someone discovers a bug in the particular firewall software you're running?
Sure, firewall bugs exist. I’m not sure what you’re trying to prove here, that it’s impossible to be fully secure? That’s not news to any of us. If you don’t see any difference in attack surface using defense in depth and separating concerns (and platforms! we quite like BSDs for our firewalls) then i’m not sure really what to tell you.