conv.

← The whole story
Security
Radicle discloses critical network protocol vulnerabilities affecting all versions

Radicle discloses network protocol vulnerabilities publicly

2 Yesterday 11:23 AM · 13h ago · 1 post · 1 source · development 2 of 4

Radicle publicly disclosed two critical vulnerabilities: unencrypted network traffic between nodes and weak node authentication. The vulnerabilities expose private repository contents to attackers on the network path. Radicle published the disclosure before releasing a fix, stating that no fix can undo exposures that have already occurred.

“We are publishing this before the security update is available. You can act on it today, and no fix we release later can undo an exposure that has already happened.”

Radicle

Radicle Decentralized git hosting platformKonstantinos Maninakis Security researcher

The whole story articlespostscomments the bright band is this development · numbered dots are the others · click one to jump

Peak 6 pieces in one half hour at Yesterday, 1 PM; 28 pieces over 15 hours (1 article · 3 posts · 24 comments) Yesterday, 9:59 AM — quietYesterday, 10:29 AM — 1 piece · 1 post — Lobsters 1Yesterday, 10:59 AM — 2 pieces · 1 article · 1 post — Hacker News 1, Newswires 1Yesterday, 11:29 AM — quietYesterday, 11:59 AM — quietYesterday, 12:29 PM — 2 pieces · 2 comments — Lobsters 2Yesterday, 12:59 PM — 1 piece · 1 comment — Lobsters 1Yesterday, 1:29 PM — 6 pieces · 6 comments — Lobsters 6Yesterday, 1:59 PM — 3 pieces · 3 comments — Lobsters 3Yesterday, 2:29 PM — 3 pieces · 3 comments — Lobsters 3Yesterday, 2:59 PM — 1 piece · 1 comment — Lobsters 1Yesterday, 3:29 PM — 1 piece · 1 comment — Lobsters 1Yesterday, 3:59 PM — 2 pieces · 2 comments — Lobsters 2Yesterday, 4:29 PM — 1 piece · 1 comment — Lobsters 1Yesterday, 4:59 PM — 2 pieces · 2 comments — Lobsters 2Yesterday, 5:29 PM — quietYesterday, 5:59 PM — 1 piece · 1 comment — Lobsters 1Yesterday, 6:29 PM — quietYesterday, 6:59 PM — 1 piece · 1 post — Mastodon 1Yesterday, 7:29 PM — quietYesterday, 7:59 PM — quietYesterday, 8:29 PM — quietYesterday, 8:59 PM — quietYesterday, 9:29 PM — 1 piece · 1 comment — Lobsters 1Yesterday, 9:59 PM — quietYesterday, 10:29 PM — quietYesterday, 10:59 PM — quietYesterday, 11:29 PM — quietYesterday, 11:59 PM — quietToday, 12:29 AM — quiet 1–234
1–2Radicle discloses network protocol…3Technical community questions protocol…4Mixed assessment: cautious credit for…
12 PM4 PM8 PMnow · 12:59 AM ET

What was reported 1 claim about this development

  1. 1 outlet Radicle: Disclosure of Vulnerability in the Network Protocol

    first by HN Frontpage, 13h ago

All 4 developments of Radicle discloses critical network protocol vulnerabilities… →

LobstersHacker NewsNewswiresMastodon