Ubercomp

Brazilian computer engineer. I build and break software. Formerly: Director of Engineering at VTEX, Software and Security Engineer at Facebook.

Popular posts: 2
Total points: 312
HN comments: 117
Rank: #8,580 personal

Visit ubercomp.com → On Hacker News Jan 2014 – Mar 2022

Security & Privacy 2

Most points Most discussed Most cited Newest

How I found a Remote Code Execution bug affecting Facebook's servers

2014158 points58 commentscited by 3Security & Privacy details

An unexpected Redis sandbox escape affecting Debian-based distros

2022154 points59 comments Security & Privacy details

This post describes how I broke the Redis sandbox, but only for Debian and Debian-derived Linux distributions. Upstream Redis is not affected. That makes it a Debian vulnerability, not a Redis one. The culprit, if you will, is dynamic linking, but there will be more on that later.