The boom in Linux CVEs lately should get you thinking.
Surely, given a finite codebase, there are also a finite number of bugs / unintended behavior, thus, a finite amount of vulnerabilities. Theoretically, a “solvable” problem. Right?
Well…not at all actually.
It gets a bit philosophical, but there’s the concept of “weird machines”.
A weird machine is an accidental computer located inside of another computer program. Quite a few exploits (e.g. anything ROP) falls into this category, where the attacker’s instruction set consists of fragments of the original software.
Finite code can *easily* have infinite Unintended Behavior (not undefined behavior btw…that’s a very different thing). Weird machines don’t even have to be Turing complete to be, really, really powerful!
Even if you have a million superhuman AI coders and fuzzers thrown at the Linux kernel, you quickly hit halting-problem-esque uncomputable states. The concept of patching every possible bug until none remain isn’t possible, because we can’t often correctly define what a “bug” even is.
Now, can you make a kernel that truly has zero weird machines relative to a formal specification? ….yes, but it wouldn’t look like Linux. It’d look more like sel4, VxWorks, or (shudder) INTEGRITY-178.
The two CIA operatives who died on the raid were Richard Leiter Johnston, 35, and John Dudley Black, 44. According to file, they were in Ford F150 pick-up with Chihuahua state agency head. It had gasoline cans which exploded when it went over edge of road into ravine, file says.
On 11 October, N828CL, which made headlines a few months ago in @nytimes and @washingtonpost articles as FENIX701, arrived in Bogotá, Colombia, from Raleigh Regional Airport, NC.
Since arriving, it has been flying out of El Dorado International Airport as DLPHN21.
Four people died when a vehicle carrying two Chihuahua state investigators and two U.S. nationals to the operation crashed. FGR later dismantled the drug lab.
https://t.co/BHbqGuW5sq
FGR executed an arrest warrant against former Chihuahua state attorney general César Jáuregui on a treason charge. FGR alleges he allowed U.S. agents to take part without authorization in an April drug lab operation in El Pinal, Chihuahua.
Photo: Government of Chihuahua
On 18 September, a contract was awarded to Relyant Global LLC for the construction of an aircraft maintenance hangar at CSL Comalapa, El Salvador, capable of fitting C-130 and P-8A-sized aircraft.
The hangar is estimated to be complete by September 2028.
RCH148 (#AE595C) out of CSL Comalapa (SAL/MSLP) 🇸🇻 is descending into San Juan (SJU/TJSJ) 🇵🇷.
This flight is supporting the repositioning of P-8As from the CSL back to San Juan, now that the CSL no longer has space for them to support JTF-WHEM missions in the Pacific.
31 NM entre Cancún (MMUN) y Cozumel (MMCZ) en el Learjet 31A (XC-LQU) del Gobierno de Quintana Roo. Puede tener su razón de ser, pero ¿es proporcional al trayecto?
Desde #Cozumel nos reunimos con las y los integrantes de la Mesa de Coordinación Estatal para Construcción de Paz y Seguridad, para revisar los avances, resultados y acciones para seguir fortaleciendo la seguridad, con coordinación entre los tres órdenes de gobierno y poniendo siempre en el centro el bienestar de nuestra gente.
Busy night over Jalisco. XC-LRI (Diamond DA62 MPP, #0D13CA), possibly SSPC based on its registration sequence, and Mexican Air Force 5212 (King Air 350ER, #0D08A9) tracked flying patterns along Federal Highway 70 (MEX-70).
Update from the road. Heading back up to Las Barrancas. It looks like that's where #Hurricane#POLO is aiming. There's been no rain yet, so there's a lot of blowing desert dust.