From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-io1-xd31.google.com (mail-io1-xd31.google.com [IPv6:2607:f8b0:4864:20::d31]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by lists.bufferbloat.net (Postfix) with ESMTPS id BE77C3B2A4 for ; Fri, 17 Dec 2021 11:04:45 -0500 (EST) Received: by mail-io1-xd31.google.com with SMTP id c3so3614956iob.6 for ; Fri, 17 Dec 2021 08:04:45 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=iulzslyFzBkvPibBJd+sXRi3Tr0jOHzVyQyV5YO7C0w=; b=TB8JVA7Jp3vZyxn0zOh3Q0L6Lp6VgmhclXZT8hxUODm/bj7edT05wu4R+9ntMLtRSd EhnbKC1uTx6lYLBIZbAJCrYS4vxuPxnfPF0VEVKtEgMS52umjpXOTFLaYABHBvneEZTS xiXBIk695LZPAE/IYwihvTZKvncADuKdTvwuRWkPu/5mkwobxM3CooITOdIUB0Fo2uEn unu36ZOOy2ur8FA0cAIwVG5vCN7kSBTCtZDWYS6GOIpwidRUeiXkXKu8eZaUmgegzm3k rFFt/w1voUtTowDgCz1QWiWPnYKTDlYCzOkYEpYXAomf8jMZFyl0myTTLfX/IWaNNLUj vTLA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=iulzslyFzBkvPibBJd+sXRi3Tr0jOHzVyQyV5YO7C0w=; b=3cxkqX8I55/+SyyzcnHxkullhoKfm3KMHgtBG0ljvDrsIiKbPuiNjwjks+RFCIQ45v pvU79dHMfMHRHfOMeZR8e1aWzwBhK8F4MF7RJ/MDSE3vBiUNbd2Y7cxvDEj+KJuB4lsN zSGKIteqMVJSWHpe4d0cmCb/fMO2vxcFTr59UE+9tf/1+5jBDRtlZI88lW0f4lxEnWKT cXulLZbHixG0pWijgwoEaq5TFIUoguV8JQirTvwFTHc/7GZn5tdcFE3smcRNNpvyKwlG C3v3luDyYFxRnrs8lrwZ3Lik/7PyuHO25DspWdm1erHHgaEHhh+F6j6wD1eN8pMjpE/D PHjQ== X-Gm-Message-State: AOAM531hmjUJriTNq9XxVADQhCPbK+rdy6eDviuADwU9ew3SaAkFaNyA YHrv/AYoJLvqkXDx+eSomwU9KS0WV0YbDGGM4hI= X-Google-Smtp-Source: ABdhPJy1UPosbqbfQpVtpENy9Ja8qNnApiIyBnhidH0iOKX9wz6bAxs8Cmz4hNZNyDbPHJM4LmQzv27lA6ZwNUjPlrs= X-Received: by 2002:a05:6638:25c4:: with SMTP id u4mr2397430jat.87.1639757085007; Fri, 17 Dec 2021 08:04:45 -0800 (PST) MIME-Version: 1.0 References: In-Reply-To: From: Dave Taht Date: Fri, 17 Dec 2021 08:04:32 -0800 Message-ID: To: Jonathan Bennett Cc: starlink@lists.bufferbloat.net Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Subject: Re: [Starlink] Starlink Security Find X-BeenThere: starlink@lists.bufferbloat.net X-Mailman-Version: 2.1.20 Precedence: list List-Id: "Starlink has bufferbloat. Bad." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 17 Dec 2021 16:04:45 -0000 Nice work, Jonathan! You buried the lede... A lot simpler than the other two bugs you discussed, either one of which has me inclined to log out permanently and head to mexico. Why do we get all these security vulns at christmas? I lost a christmas to spectre, another to a mips fpu bug, another to the ping of death - I remember how I spent those christmases far more clearly than the actual "fun" ones. Also nice to see the 28ms RTT between you and your friend. Care to try a few flent tests between you? or to the internet? Over here I've been doing some pretty extensive tests of my starlink test cloud, from a dsl and a cable modem, the cake rtt_fair results (from dallas to sydney) were to die for: https://forum.mikrotik.com/viewtopic.php?p=3D898777#p898627 On Fri, Dec 17, 2021 at 7:47 AM Jonathan Bennett wrote: > > Thought you guys might appreciate this. A traceroute lead to a Starlink b= ug bounty. https://hackaday.com/2021/12/17/this-week-in-security-log4j-pdf-= cpu-and-i-hack-starlink/ > > --Jonathan Bennett > _______________________________________________ > Starlink mailing list > Starlink@lists.bufferbloat.net > https://lists.bufferbloat.net/listinfo/starlink --=20 I tried to build a better future, a few times: https://wayforward.archive.org/?site=3Dhttps%3A%2F%2Fwww.icei.org Dave T=C3=A4ht CEO, TekLibre, LLC