Big Windows vuln appearsMicrosoft:>just disable IPv6 bro, nothing to worry aboutSecurity researchers>actually, disabling IPv6 it doesn't helpLMAOhttps://nitter.poast.org/cytexsmb/status/1824117622180315212
>>101911631>my ISP doesn't even offer IPv6not my problem
ahhhhhhha ha ha
>>101911631Windows is $129.99 if your security is worthless.
>>101911669Windows is free now, heck they'll give you special MS points to install it. The whole OS is a game / store now too. Want a new game? Well, MS has installed it anyway, it's free to play!
>>101911631I always disable IPV6 from all my devices, including modem and router.
>>101911631>integer underflow weaknessweak ass can't do 0/0
I use Gentoo btw.
WINFAGS KEEPS LOOSING
>buffer overflows still prevalent in 2024t-thanks cniles
>>101911716It's not funny, 80% of the government runs either on Windows or on MS's Azure Cloud. It's retarded is what it is.
>>101911690>It’s freeNope.$129.99Two Hundo if you get the “pro” version.
>>101911832You *can* pay for it but Windows 10 was a free upgrade, and Windows 11 is a free upgrade too. It's how they got most people onto 10, the forced update that auto-initiated fucked over a shit ton of businesses too remember?
>>101911727sure, blame the language not the fucking incompetence crisis, rustranny
>>101911971>incompetence crisisIs there any evidence that this buzzword is based in reality
>>101911971That bug was probably written 20 years ago
>>101911727C can target the eBPF runtime and write sandboxed kernel modules, rust can'tthe big brain play would be eBPF kernel module in rust everything else in C targeting eBPFironically microsoft has half complete eBPF drivers somewhere on their github just without any signed binaries
>>101911971>incompetence crisisincompetent are the retards managing big tech companies and people like you who fall for that bullshit. I bet you also believe layoffs happen because of """AI"""
>>101911631should have used rust
>>101911631Should have used ruby
>>101911631Should have been rebuilt in Go. They could just disable the GC and manage memory manually.
>>101911631Should have written it in C. They could just disable pointers and refrain from using arrays.
>>101912054it started in 1968 check the graph of the economy
>>101911631The fact that Windows 11 has 9 zero-day exploits, FUCKING NINE ZERO-DAYS, proves that Microsoft intentionally puts backdoors on your system. Do not update, uninstall Windows and replace it with Linux instead.
>>101912957youre fucked either waythe only way to be secure in tyotl 2024 is to airgap your shitsorry pedoes, only programmers can have true privacy now
>>101911631>>101912957This is a marketing tactic meant to shill the Copilot spyware bloat, thereby forcing you to update Windows so it can install more bloatware that you will never use with annoying notifications popping up from time to time.
>>101911631Just disable it on the fucking router retard
>>101911631daily microtoddler L
>>101911631let me guess, this wouldn't have happened if it had been written in rust.
>>101911631>>101912957It was patched on Tuesday so who cares
>>101913301damn im feeling sleepy
>>101912426ah yes, the graph of economy ..
>>101913173yes, everything is a 4D chess to screw you over. never leave your basement, and make sure the doors are nailed/welded shut
>>101913301This, /g/ being retarded once again.
>introduce backdoor>steal user data in eu because fuck gdpr (in US they have no foreskin can be assumed, no need to check)>introduce bugfix>announce it just in case someone saw the data was stolen>repeat
>>101913301I am still using windows 8 though
>>101913443Schizo issue then
>>101911669toddlers BTFO>>101913393>9 zero-days, 6 exploited
>>101913463And all fixed, your point?
>>101913301>I've used this shitty proprietary OS for 20 years and it was backdoored the whole time, but they patched it this Tuesday so who cares>>101913283Correct
>>101913457Windows 10 is just 8 with worse performance
>>101913479Windows 10 has better performance than 8 and 7, retard
>>101911867So Windows *was* free, if you paid for an older version already.Windows *is* not free today.
Windows is truly the most cuck'd operating system ever, I see no hope or future apart from it becoming increasingly pajeetware.Get off this ride before it's too late.
>>101913393>>101913471>sill working on an update for a tenth publicly disclosed zero-day
>>101913581That's the power of DEI (diversity, equity, and inclusion), a plan to decrease the average IQ around the world by kicking out smart people by implementing a new code of conduct to replace them with retards who don't care about technology but just want your money, the current "AI" hype along with prompt engineering bullshit jobs has made it less technical as to appear magical. And that's why a lot of people can't even code today, they use those LLMs as an excuse to do no actual coding whatsoever.
>>101913803>That's the power of DEI (diversity, equity, and inclusion),LMAO the vulnerable Windows code is older than DEI, probably older this retarded bot bullshittake your (You) and leave, faggot bot operator
>>101913888No... no, it's not.. ok? Because I said so, the west has fallen..
>>101911631When was this vulnerability introduced?
>>101911644your VPN provider certainly does
>>101911631>disabling ipv6 is ineffective as the vulnerability occurs before the firewall processes ipv6 trafficIf you DISABLE IPv6, you don't block it with the firewall. You disable it on the network device.So the security researcher is the retard in this case.
this whole thread is one big nothingburger. it was fixed in a windows update days ago.https://support.microsoft.com/en-us/topic/august-13-2024-kb5041571-os-build-26100-1457-d218c08d-8de2-4f9a-8fe1-a2c2fd83ca9a
>>101913385but you're the paranoid one, saar
>>101911631hardware firewall chads√REJOICE√
>>101914243hardware firewall chads having a banner day.https://www.gl-inet.com/products/personally I use a mesh as my firewall and wifi-ethernet bridge.
>>101911631good job cuckrosoftnow entirety of the internet knows about the vulnerabilityinstall mac or linux or suffer cyber pandemic
>he doesn't disable ipv6 at the adaptor level on every systemngmi
>>101911631What versions of Windows, all of them? Even precious 11?
>>101914834Windows 95 and Windows ME
>>101912147>C can target the eBPF runtime and write sandboxed kernel modules, rust can'tof course it can, ebpf is a project from llvm, any llvm language can target it https://github.com/aya-rs/aya
>>101913173ngl pretty logo
EXPLAIN LILE TO BABBY WHAT IPV6 EBEN IZ
>>101914243you are the retard for misinterpreting his words, retard. of course disabling it at hardware level would stop the vuln from being exploited, but his point is that the OS is still vulnerable even if you don't apply microsofts own suggested measures AT THE OS LEVEL, you brainlet.
>>101915301>of course disabling it at hardware level would stop the vuln from being exploitedExactly, problem mitigated until patched. So what the security researcher said is irrelevant. Disabling IPv6 is completely separate from the firewall.>but his point is that the OS is still vulnerable even if you don't apply microsofts own suggested measures AT THE OS LEVELNo, that isn't his point because he says>Disabling IPv6 is INEFFECTIVE as the vulnerability occurs before the firewall processes IPv6 traffic.Sure, the OS will remain vulnerable until patched, but disabling IPv6 IS effective because the OS will no longer process IPv6 packets.
Looks like anyone using 7/8 will be switching to 11 real soon lol
>>101915865the Windows firewall is part of the OS, you fucking retard. are you being pedantic on purpose or are you actually brainded?
>>101911971Ritchie and Kernighan are the incompetence crisis embodied
>>101915972>the Windows firewall is part of the OS, you fucking retard.And it won't be processing any IPv6 packets if IPv6 is disabled.It is irrelevant.
>>101916106:) I have Ubuntu, the operating system built around linus.
>>101916106... anon, AFAIU, that's exactly what the researcher is saying: it's not irrelevant. the vulnerability could be in the code that manages packages. which means disabling IPv6 is useless, since it can affect Windows anyway.I think there have been vulns like this, where disabling some protocol or whatever is useless as a mitigation for vulns that are related to said protocols.
>>101915982c is fine. you just were taught the wrong way to handle memory. I was taught the right way. for a fee, I will explain, lmao otherwise use RUST, named after their favorite hidden feature of INTEL
>>101916133so right now I can send a packet to your network, and if the port is open to windows, you're pwned?
>>101916133Ok, but the comment about the firewall still remains irrelevant.The firewall is not related to disabling IPv6, and it doesn't even appear to be related to the vulnerability.If the researcher wanted to say that neither disabling IPv6 or using the firewall to block IPv6 packets would be effective, then what's what he should have said.But anyway, seeing this is a Windows vulnerability and not a driver vulnerability, the OS doesn't handle any IPv6 packets when you disable IPv6 in the device. The network device won't be passing those packets to the OS anymore.
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38063>Systems are not affected if IPv6 is disabled on the target machine.dont care
>>101911631I've you've ever worked with companies the size of microsoft you know that its mostly just jeets straight out of india cross-talking eachother saying bullshit spinning their wheels following playbooks written by some white dudes 20 years ago that are irrelevant today.Nothing gets done, no one knows whats happening.
>>101914219my what?
>>101916133nta but the researcher is a moron if he thinks that disabling IPv6 in windows just causes the firewall to filter ipv6That's not how it works (and why would it, that makes zero sense), disabling ipv6 has nothing to do with windows firewallIt's such a bizarre nonsequitur that there must have been a miscommunication somewhere because it's hard to believe the guy could be that ignorant
>>101911828Got a source that the entire backbone of MS Azure is running on Windows OS?
>>101916305NTA, but I understood it in such a way meaning that disabling IPv6 on Windows would only affect traffic in Windows at a firewall-level.But you're right that if disabling IPv6 in Windows actually disables all of its traffic, the firewall shouldn't even matter.
Who the fuck have a windows server exposed to the internet on the first place?>remembers my jellyfin on windows server>already on 26100.1457oof
>>101916364it's disabled at the level of the network interface which is pre-firewall
>>101911631Joke's on them, I already had ipv6 disabled because it shits the bed on half of websites anyway.
>>101911631Why do the poojeets keep getting to ruin the modern world?Why does anyone believe they can actually code or make a good OS.
>>101916642joke's on you (windows fool)
>IPV6 is a backdoor>>>/g/>>>proven right again against shillsReminder to block ipv6 in all forms and use dnscrypt-proxy with no-logging, non-cloudflare or google (Really don't use corporate DNS) servers over at least one proxy hop with self hosted SNI
>>101916996what ones work here?
>>101911631>just disable IPv6 broImagine not already doing this.
>>101911631>nitter.poast.orgstop leaking my secret instance REEEEEEyou fags will get it ratelimited
>>101916275basedcuckolds on suicide watch
>>101911669Free when combined with vlmcsd!Who uses that shit anyway when Qubes is free *and* way waaay more secure?
>>101917198>designed for intelJesus Christ
>>101913488
>>101913463>most popular/common environment receives the most attacks>acting like this is newsit's been that way for 30 yearsyou are not immune to exploits
>>101917340nta but>>designed for intel??? you can run Qubes on AMD CPUs
>>101917411it was designed for intel :)tells you everything you need to lnow about it.
>>101917492anon, it's QEMU running Linus on top of Xen. Qubes is nothing special beyond some self-customized VMs. maybe the Intel part came from Xen idk, but Qubes just works if you have (IIRC) IOMMU enabled CPU + motherboard.
>>101912957But I like having a stable shell w/o frame pacing issues and developers that reinvent the wheel twice a decade.
>>101912957No it doesn't. It proves you're a technologically incompetent young teenager who has just started working with computers.
>>101917799>young teenager
I use windows 7 am I safe?
>>101911631ipv6 version chasers on suicide watch.>>101911644my isp does (they betrayed me, it hadn't for the longest time), but my router has been set to not even try to do ipv6
This is only relevant to the retards that dont update their windows.
IP stack written in rust solves this
>>101917877In terms of overall competence and mentality, most likely, even if you're some 20-something who should have started his career by now.Instead, you're just some consumer who doesn't know how computers work. And for some reason you ended up on the Technology board of 4chan, of all places, when the only thing you know about technology is picking a sports team and thinking your problems are solved.
>>101917931No, trash it and get 11 now. 7 is never getting the patch
>>101912054yes, C got popular because it was way easier to write than other languages, this allowed midwits into programming, C++ tried to control the damage, but look here, every time you mention C++ to a midwit, he hysterically screeches about how bad C++ is, well guess what, cniles even 50 years ago thought same thing about every GOOD language released before C, including FORTRAN, always remember to never take retards obsessed with C seriously, they're biggest nocoders in the entire history, even Rustrannies are better.
>>101918349at least I consume gentoo instead of being a coping wintoddler
>>101918750Nice evidence.
>>101919121post c code that proves that you're competenthard mode: don't trip up and format it in a style I prefer before I read it, I can tell who's a nocoder just by how their code looks
>>101918750C got popular because you could learn how to write C on one machine and then use those skills to also write C on a completely different machine with a compiler written by a completely different company
>>101919253which means it allows low IQ's to not understand how computers work, ironic that cniles now larp about understanding that the most
>>101919370yeah anon, REAL coders write in assembly for 10 different ISAs
>>101919513I fail to see how I can't just use FORTRAN for this in 1980 and can't use C++ for this in 2024, both are languages better than C
>>101919533irrelevant, moving the goalpost
Quickly patched thing. ipv6 will win, 64 bit address space for everyone vs shared address. ipv6=personal mailbox. ipv4=go to post office to collect mail. The old hag tries to figure out if the letter is for you or someone else. And btw she has right to open the letter and put it in a new letter.>>101911644Poorfag
>>101911631blocking IPv6 in the windows firewall doesn't help, however you can disable processing of IPv6 packets right after the NIC driver like this:
>>101919577yes keep moving it, tranny, cniles were forever incompetent and this proves it
>>101919635It is ineffective retard, the underflow occcures before these
>>101919654the underflow occurs in the processing of the IPv6 options. If you disable IPv6, the vulnerable driver code is never reached for packets coming from that adapter.
>>101919674No, it especially means before sending the packet to the specific ipv6 driver
>>101914219why would any tech literate person use a vpn
>>101919533Fortran in 1980 might've been fine for simple text-based programs but what about say 1986 when computers started drawing graphics and making noises?C didn't become a big hit until mid-80's precisely because people were running into limitations with BASIC, and C was one of the few languages available that offered a similar portability to BASIC.
>>101919701>language most efficient for doing lots of math is le slow
>>101919157Still no evidence.
>>101919625>ipv6 will winwhen?it has been decades at this point and nothing changed
>>101919713Language most efficient for doing lots of math is slow at doing anything that's not lots of math such as IO
>>101919755IO is slow in 2024 and we have C to thank for it, even windows has better interfaces for doing massively parallel asynchronous IO, yet cniles can never come up with anything good on Linux>inb4 io_uringshitty name aside, it's slower than epoll, dilate
>>101919739Big tech and people fear change. Americans own most ipv4 adresses but they NAT the most. Who has the adresses?NAT is a security risk. You cannot know if someone is messing with your packets.
>>101919808NAT is a free opt-out firewall
>>101911727hello, bruce3434. /g/'s most famous sex offender.
>>101919654>>101919689> he's really this fucking retarded> not even pretendingfrightening
>Buffer overflowYep, typical C behaviour.Should have crabbed
>>101917931It goes back to Windows Server 2008 (vista based). Old server versions will be patched but not client versions. You can install the msu version manually if you want, but you need to crack esu to do so.
>>101920659How do you do that exactly?
>>101920659From the update catalog plus bypassesuThis should be update https://catalog.update.microsoft.com/Search.aspx?q=KB5041823
>>101911711based last available address as gw enjoyer
>>101920064>https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38063>https://www.theregister.com/2024/08/14/august_patch_tuesday_ipv6/imagine using ipv6>>101919654>>101919689>https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-38063>Mitigations>Systems are not affected if IPv6 is disabled on the target machine.
>>101911631>>101920921
>>101915044it's like an IP address but longer
>>101917198qubes runs mostly linux which is monolithic and has same tcp/ip issues...in hurd (or any microkernel for that) tcp/ip runs as process, you can restart and debug itvirtual machines are bloat and false security when you run non free software on top of them
>>101913457>he can't into windows server 2012 R2>>101913488LMFAO8.1/2012 R2 was and still is the most performant OS of all time, even beats desktop leunuchs in memory usage too
>>101920921How do I know if IPv6 is disabled on my machine?
>>101921004it's self explanatorywhat are you even doing on this board?just updoot your windows if you're a computer illiterate tourist
>>101921015>what are you even doing on this board?90% of this board is completely retarded. Just look at the last browser extension thread, BUT YEAH
>>101921004Open cmd.Type ipconfigIf you have an IPv6 address listed, it is enabled.
>>1019210157, can't use update. It's not "self-explanatory", everyone's flailing around like retards arguing over whether disabling IPv6 actually does anything or not with the added confusion of whether disabling it could mess with the system since Microsoft advises against doing so
>>101921203anon, if you're going to be a baby duck you can't afford to be retarded and then ask for help
>>101921104All I saw listed was IPv4 so I guess I'm good, thanks anon
>>101921203have you seriously not seen network adapter settings before? it looks exactly the same on windows 7
>>101911711Bro just doxxed himself lmao
So wouldn't just the PC behind a router protect you from that as long as it doesn't forward any port?
>>101921772yes, this effects only windows hosting some service
So this is it? The part where 7 finally becomes vulnerable to being hacked by doing absolutely nothing, even with a firewall just like the fearmongerers say. Besides the Wi-Fi one but that counts even more.
>>101922358Protip. Even if you have IPv6 internet connection, you can always set up your internal network as IPv4, meaning your computers can always remain separated from direct IPv6 connections.
>>101911867they stopped honoring OEM win10 keys it seems like, I had a stack and none of them work anymore on 10 or 11The years where you could use even win7 OEM keys to activate 10 were lit
I'm confused. Do I install the update or not? Am I actually at risk or is "vulnerability" just an excuse to put fedware on people's PCs?
>>101917354
>>101911631>Security researcher >It's just some random pajeet on Twitter
>>101923344You sure showed him with that random screenshot from some random Jewtube video from some random jerkoff. Point proven, case closed.
>>101924081I accept your concession.
At this point you're an idiot if you aren't using a free and open source kernel. Linux has a lot of dubious shitcode (mainly because it's delusional C garbage) but it has more eyeballs and more usage and bug fixes than any other actual kernel.
>>101911631I don't think you can even disable IPv6 in windows.
>>101911644>be you>hackerman hacks your shitty router/modem>uses Link local to attack every machine reachable on the gateway>get hacked.
>>101912321> let's rewrite the spyware operating system in the language from the other spyware producer
>>101911690>Windows is free nowonly if you had a valid license at some point. my Win7 one doesn't even work even though I had used it for 8. I ended up just acquiring one with other means and I only use it for my VM to test if my software will "just work" on Windows. Thankfully shithub actions offers free Windows build machines so I don't need it for "release" builds.
>>101924299>>101919635>>101924246Probably. Mine doesn't have anything of that sort, so I don't know where that is coming from.
>>101911971there is literally zero standard compliant way to do arithmetic without over/under being a problem up until very very recently you faggot shill.
>>101912957>Do not update, uninstall Windows and replace it with Linux instead.sirs plese do not redeem the Linux DO NOT REDEEM THE LINUX SAARS we fix exploit saars no worry sirs bloody benched basterds do not exploit it sirs zero day is fix immediate
>>101920991the point of Qubes is not that it's 100% safe. The point is that you WILL get hacked, and when it happens, you can just wipe your web browsing profile or whatever and you'll be fine
>>101912426>the graph of the economy
>>101917375keep ccoping
>>101919699torrenting
>>101911631If I disable IPv6 my Internet stops working. My isp no longer supports v4.
>>101924353You can just use Windows sans activation. Idk why they even require activation. It's so retarded.
>>101925135why would you need it for torrenting
>>101925505tech illiteracy
>>101925247you can also get activation tool from github
>>101919934why this board is always shilling the communism language?
>>101925505To avoid copyright lawsuits and/or avoid getting listed on iknowwhatyoudownload.com/
power of outsourcing to pajeetistan
>>101911828>>101916306I thought Azure mostly ran on Ubuntu server.
>>101913488>Windows 10 has better performance than 8 and 7Not on the 15 year old shitboxes with 4GB of RAM the average 7igger is using
>>101911631>specially crafted packets#define HACKING_STRING "HACKINTOCOMPUTERS_BILL_VISITED_THE_ISLAND_42_TIMES"if (memcmp(mmsock,HACKING_STRING,strlen(HACKING_STRING))){ transmit_entire_disk_contents(NtGetIPV6_BySocket(socket_handle));}
#define HACKING_STRING "HACKINTOCOMPUTERS_BILL_VISITED_THE_ISLAND_42_TIMES"if (memcmp(mmsock,HACKING_STRING,strlen(HACKING_STRING))){ transmit_entire_disk_contents(NtGetIPV6_BySocket(socket_handle));}
>>101926928ive used torrents for 15 years and have never gotten a letter from an ISP. that meme website never displays any results for my IP address eitherfeels good living in the US
>>101924299You can either via the adapter or registry, but no one knows which is the definitive solution here exactly
>>101911631this is what you get if you are not running Gentoo with ipv6 missing from the kernel
ipv6 is disabled in my router.
does this affect Win 7 8 and 10?
>>101911631>Windowshttps://www.zerodayinitiative.com/blog/2024/8/14/cve-2024-38213-copy2pwn-exploit-evades-windows-web-protections
>>101931176Yes
>>101911631>only affects asians and turd worldersKek
Why would I sit on a desk getting carpal tunnel and back pain like a wagecuck or a lab monkey when I can hold the internet in my hands comfortably browsing from my couch on a tablet
>>101922448Just use massgravel. There's not really a diference.
>>101934437???
>>101934574You're just trading carpal tunnel and back pain for arthritis in your hands and neck pain lol
>literally who claims something>ms claims the oppositeWho to trust? MS says I can just disable ipv6.
>>101934842Trusting M$ when they released buggy ass software.
>>101911631>turn ipv6 off on your router>vuln is no moreits that easy
I thought they patched the ipv6 exploit couple days ago
>>101914219I've literally never seen a commercial VPN service that provides an IPv6
>>101934842>that buzzword slop
Oh fuck off I'm not turning ipv6 off.
>>101936892azirevpn, airvpn, mullvad, ivpn all support it
>>101934842you ignore the literal twitter who every single time. those delusional fucking idiots are useless.
>>101911631is that a default user space service or the actual windows like the update system?
>>101911631Is there a way update security patches only? Because updating windows proper always fucks shit up so I'm not doing that.
>>101925135>>101926928Do Americans really
>>101911644mine does but apparently you need a new modem for it. idk what kind of retard designed it so that you need special hardware to get a certain kind of address. this was also a thing with old 2/3g modems
>>101913888>"new" os>full of ancient codemicrosoft is a scammer. there hasn't been a true new windows since the first nt release
>>101916996whats the deal with all these ipv6 anti bots? i can't believe /g/ is this full of total retards
>>101924595nice placebo KEKif tcp/ip exploit hit linux, qubes would be useless because you could jump vms and dom0all this bloat for NOTHING
>>101941247good luck with that. most of the vulnerabilities people have freaked out over in the recent years are not mass exploitable. they actually have to target you specifically and put a huge amount of effort and skill into it to succeed and for what gain? maybe some random shitty porn and a tiny bit of cash. its a concern only for corporations and governments with significant resources making all the effort worth it
>0.0.0.0 day exploit gets discovered>doesn't affect Windows>does affect Linux>/g/ is silent>IPv6 exploit gets discovered>affects Windows>doesn't affect Linux>/g/ goes apeshitReally makes you think
