6 comments

  • TonyTrapp37 minutes ago
    While the timing with the copy.fail patches mentioned by a few comments here seems suspicious indeed, I have seen this repeating over the last few weeks: packages.ubuntu.com was hardly reachable on some days, causing apt-get to take forever to update the system. They have been struggling hard recently, it seems. Best of luck to the people having to deal with this mess on a holiday!
  • jollymonATX5 minutes ago
    We are so broken as society ddos'n ubuntu is now a thing.
  • corvad1 hour ago
    This seems to be pretty targeted, and with the services affected like livepatch and such this could indeed be an actor DDoSing to avoid patches rolling out for copy.fail
  • Faaak1 hour ago
    Tinfoil hat mode: a competitor wants to exploit copy.fail on some ubuntu servers, and is DDoSing canonical so that they can't update and thus patch the vuln
    • bjackman3 minutes ago
      If you can access AF_ALG on a server you don&#x27;t need to do shenanigans like that. It&#x27;s much easier to just find another bug and exploit that one instead.<p>The copy.fail website is very silly, it is not a special bug. If anyone gets compromised by that vuln their node architecture was broken anyway, patching copy.fail doesn&#x27;t help.
    • yallpendantools42 minutes ago
      Double tinfoil hat mode: an attacker learned of my plan to finally update my personal computer out of 20.04 today and is DDoSing canonical so I can&#x27;t do that and I remain vulnerable to the backdoors they&#x27;ve found.<p>The plot thickens...
    • touwer4 minutes ago
      why a competitor? Criminals, secret services, country adversaries...
    • kubb1 hour ago
      s&#x2F;competitor&#x2F;intelligence services&#x2F;
    • bouncycastle1 hour ago
      Seems reasonable to assume it&#x27;s something to do with the recently publicized exploits. More likely, this could be an extortion attempt by criminals rather than a competitor.
  • Wxc2jjJmST9XWWL1 hour ago
    Noticed it because snap didn&#x27;t work, snap has its own status page just fyi: <a href="https:&#x2F;&#x2F;status.snapcraft.io&#x2F;" rel="nofollow">https:&#x2F;&#x2F;status.snapcraft.io&#x2F;</a>
    • ForHackernews54 minutes ago
      Frustrating because the Slack snap is broken so every day you have to downgrade it and I guess you can&#x27;t without connectivity.<p>This might be the incentive I need to finally purge snap.
      • esseph23 minutes ago
        Just move to flatpak, much nicer to deal with
  • someperson1 hour ago
    I like to imagine it&#x27;s returning a 500 error response asking you to email rhonda@ubuntu.com