The piece is a furious criticism of Ubuntu’s handling of CVE-2026-98432, a critical vulnerability in Linux’s TCP code. It says the flaw has existed since 2016, affects nearly every Linux server, and can be exploited remotely; Anthropic reportedly developed an exploit that achieves root access. Debian shipped a fix on October 16, but as of November 2, every supported Ubuntu release, including LTS versions, was still marked vulnerable. The writer contrasts that delay with Ubuntu’s promises of timely security updates, arguing that its marketing language about enterprise-grade reliability is meaningless if a severe, exploitable flaw goes unpatched.
The failure has changed the writer’s own plans: they intend to move all their servers away from Ubuntu and say they took their Ubuntu machines offline because they could not migrate services and data quickly enough. Their loss of confidence is sharpened by the fact that volunteer-run distributions such as Debian, Arch, and Alpine had already shipped fixes, while Canonical, a company that sells security subscriptions, had not. The writer describes Ubuntu as a server choice they had relied on largely because it is widely offered by VPS providers and seemed like a dependable, low-maintenance LTS option. Now they consider that trust misplaced.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
Attackers stole enterprise cloud and AI credentials to run up fraudulent model-usage charges, with some companies facing bills near $1 million. Criminal groups resell stolen access through illicit gateways, prompting Google to urge stronger credential security and monitoring. (cloud.google.com)
Milner Mayor Craig Timmons secretly GPS-tracked Police Chief Bunn over timesheet concerns, bypassing city council approval. The chief, five officers, and city manager resigned, leaving the Georgia town without full-time police officers. (gadgetreview.com)
A Google Android partner allegedly infected 1.3 million set-top boxes with malware and turned them into a botnet. Google says the manufacturer intentionally hijacked the devices. (theverge.com)
WorkOS detected unauthorized access to an internal API, exposing data from Salesforce and Snowflake, including customer contact details, business information, and support tickets. WorkOS says it has found no evidence that customer application data or production services were accessed or affected. (news.ycombinator.com)
![I discovered a sound that leaks your exact location (and it's everywhere) [video]](https://hntoday.pixelshot.io/screenshots/20261103/3cae09e1cadc4410_tn.jpeg)
A sound signal found in everyday environments can reveal someone’s exact location. The discovery raises concerns about location privacy. (youtube.com)
The New York Times and several other publishers sued Brave, alleging it scraped and distributed copyrighted content to AI companies without permission. The lawsuits also challenge Brave’s paywall-bypassing feature and ad blocking, and seek damages and an injunction. (techcrunch.com)
Today's best Hacker News stories, summarized and screenshotted, one email a day.