conv.

← The whole story
Security
Radicle discloses critical network protocol vulnerabilities affecting all versions

Radicle announces major version bump and protocol migration plan

Due to lack of version negotiation and backward-incompatible fixes needed, Radicle announced a major version bump. The fix involves replacing the custom Noise protocol with iroh, an open-source peer-to-peer stack, requiring a breaking network change that will partition upgraded and non-upgraded clusters.

“The resolution involves replacing Radicle's networking protocol (currently a custom protocol using Noise) with iroh, an open source peer-to-peer networking stack built on open standards.”

Radicle

Radicle Decentralized git hosting platformKonstantinos Maninakis Security researcher

The whole story articlespostscomments the bright band is this development · numbered dots are the others · click one to jump

Peak 5 pieces in one half hour at Today, 1 PM; 28 pieces over 13 hours (1 article · 3 posts · 24 comments) Today, 10:22 AM — 1 piece · 1 post — Lobsters 1Today, 10:52 AM — quietToday, 11:22 AM — 2 pieces · 1 article · 1 post — Hacker News 1, Newswires 1Today, 11:52 AM — quietToday, 12:22 PM — 2 pieces · 2 comments — Lobsters 2Today, 12:52 PM — 1 piece · 1 comment — Lobsters 1Today, 1:22 PM — 3 pieces · 3 comments — Lobsters 3Today, 1:52 PM — 5 pieces · 5 comments — Lobsters 5Today, 2:22 PM — 2 pieces · 2 comments — Lobsters 2Today, 2:52 PM — 3 pieces · 3 comments — Lobsters 3Today, 3:22 PM — 1 piece · 1 comment — Lobsters 1Today, 3:52 PM — 2 pieces · 2 comments — Lobsters 2Today, 4:22 PM — 1 piece · 1 comment — Lobsters 1Today, 4:52 PM — 1 piece · 1 comment — Lobsters 1Today, 5:22 PM — 1 piece · 1 comment — Lobsters 1Today, 5:52 PM — 1 piece · 1 comment — Lobsters 1Today, 6:22 PM — quietToday, 6:52 PM — 1 piece · 1 post — Mastodon 1Today, 7:22 PM — quietToday, 7:52 PM — quietToday, 8:22 PM — quietToday, 8:52 PM — quietToday, 9:22 PM — 1 piece · 1 comment — Lobsters 1Today, 9:52 PM — quietToday, 10:22 PM — quietToday, 10:52 PM — quiet 1–234
12 PM4 PM8 PMnow · 11:22 PM ET

Reported in the same hours no headline names this development itself — these 1 claim were published in its stretch

  1. first by HN Frontpage, 11h ago

All 4 developments of Radicle discloses critical network protocol vulnerabilities… →

LobstersHacker NewsNewswiresMastodon