Hacker News

Canonical URL

https://www.openwall.com/lists/oss-security/2026/05/07/8

Cited in our articles

1 article

Last scored

Not yet scored

Outlet ID

de110a4a-8d15-4d72-9d7a-7843c304f304

1. C-9fe12c“Dirty Frag is a universal Linux LPE that allows obtaining root privileges on all major distributions.”Cited →
2. C-8da07d“Dirty Frag chains two separate vulnerabilities.”Cited →
3. C-f2de8e“No patches or CVEs exist for these vulnerabilities because the embargo was broken.”Cited →
4. C-48b1eb“The vulnerability was publicly released by Hyunwoo Kim after consultation with linux-distros@openwall.org maintainers.”Cited →
5. C-25585f“The exploit code overwrites the first 192 bytes of /usr/bin/su with a minimal x86_64 root-shell ELF.”Cited →
6. C-71fd55“The rxrpc/rxkad LPE patches /etc/passwd to set the root user's password field empty.”Cited →
7. C-78b830“The exploit uses a PTY bridge to spawn an interactive root shell via su.”Cited →
8. C-585bcb“The exploit includes a user-space brute-force to find session keys for the rxrpc path.”Cited →

The reliability score above is a weighted mean over these twelve axes. The bias score uses a separate but equally-public 12-axis rubric. Per-axis breakdowns are written by the bias_scorer agent into sources.axes; the keys below are the axis names as documented in the agent prompt.

1. Axis 01
   Primary sourcing

   Cites filings, official statements, direct interviews; uses 'reportedly' rarely.

2. Axis 02
   Correction transparency

   Issues visible corrections; surfaces them above the article body, not in 8pt at the bottom.

3. Axis 03
   Conflict-of-interest disclosure

   Names ownership, sponsorships, and reporter conflicts inline.

4. Axis 04
   Headline–body alignment

   Headlines match the strongest claim the body actually supports; no rage-bait variance.

5. Axis 05
   Quote attribution

   Names speaker and venue; avoids anonymous quotes for attributable claims.

6. Axis 06
   Numeracy

   Numbers shown with denominators, time-windows, and units; ratios not confused with percentages.

7. Axis 07
   Beat depth

   Reporters cover beats long enough to recognize narrative drift in their own coverage.

8. Axis 08
   Geographic balance

   Coverage doesn't over-index on the home market when the story is global.

9. Axis 09
   Counter-perspective

   Includes the strongest version of the argument it disagrees with, not the weakest.

10. Axis 10
    Aggregation discipline

    When citing other outlets, names them and links them; doesn't launder reporting.

11. Axis 11
    Speculation flag

    Marks analysis and opinion separately from reporting.

12. Axis 12
    Editorial independence

    Newsroom shielded from advertiser, ownership, and government influence in observable behavior.

Per-axis breakdown not yet recorded for this outlet — the bias_scorer agent writes axes on its next re-score.