Linode Security Incident

https://status.linode.com/incidents/nt58zhx3pmgm

83•lacoolj•1h ago

Comments

rvz•41m ago

So it begins. The war against the abliterated AI models. Even at 1,000 TPS any service is a target.

Imagine swarms of abliterated frontier AI models that reach >20,000 TPS. As I said before [0] you are going to have to hire specialized security engineers or technical bodyguards from the senior to senior staff level using AI agents to protect your entire business.

Otherwise you are cooked.

[0] https://news.ycombinator.com/item?id=50310312

jacquesm•38m ago

Guess who has access to abliterated frontier AI models?

cyanydeez•31m ago

The worst people you know.

lacoolj•17m ago

Teenagers

samwilliams•37m ago

Infrastructure is an FPS now.

pawelduda•33m ago

One day your job will be to play StarCraft but under the hood it will be your agents vs attacker's agents

tripleee•18m ago

If this is the job description sign me up

ProllyInfamous•15m ago

Today? Today is that day... probably a yesterday or two, as well.

singinwhale•14m ago

Basically Enders Game

jdprgm•9m ago

Enders Game but AI instead of aliens.

lacoolj•17m ago

Primeagen went over this in the last episode or two - apparently this sort of defense is costing ... one of the big models or companies hosting them ... $900k/day or something to constantly run the best model and monitor 24/7 to combat the attacks [0]

[0] https://www.youtube.com/watch?v=9OahTki4cPA

vsgherzi•6m ago

I don’t really have experience running anything like this so this is very much a comment front the peanut gallery but

Is that really the best way to do things? I’m not really sure what an agent offers here does it just look at logs and do actions? I would not really feel safe if that’s my service’s answer to security.

I could see it maybe as a really smart filter to block ips that are sending probing requests but I don’t really see that as a good reason to have an agent be sitting 24/7 looking at logs.

scottrogers86•17m ago

armadin.com?

shoobiedoo•15m ago

What's the future of cybersecurity going to look like? A rapid shift to shoving everything into microvm's to minimize attack surface?

lelandfe•9m ago

Airgapping.

I'm hoping goverments take stock of what is online that needn't be.

spydum•34m ago

Wow, that isn't clear. Is there an incident, or did they just become aware about MPTCP vuln? Details on the mptcp are also pretty scarce as well right?

6thbit•31m ago

Yeah its unclear. Sounds like they are just now patching it and treating it as an incident which is probably the right thing to do.

lacoolj•23m ago

Yeah agreed. I actually only noticed because my two boxes are super slow and I've been troubleshooting for about an hour. Finally opened up the Customer Support page and this was the top incident.

pugworthy•19m ago

Lately it seems like we need "hacks.ycombinator.com" as a new sub-list.

minimaxir•15m ago

Show Hacks:

keeganpoppen•13m ago

ironic that "hacks" is a needed subdomain of "hacker news"

optimalsolver•10m ago

Yeah it is, but everyone forgets this board was launched in the 90s for discussion of the 1995 movie "Hackers", not for discussion of hacking in general.

brian-armstrong•6m ago

I'm still holding out for the sequel

6thbit•5m ago

/incidents would do

paaloeye•18m ago

Even better CVE 10.0 has just dropped https://news.ycombinator.com/item?id=50310937

optimalsolver•18m ago

I mean, this situation is untenable. HN's front page is just going to be an endless list of breaches.

I don't see how web services proceed like business is normal.

peri-cl•5m ago

Introducing: HNN (Hacker non-news): a list of web domains *not* currently under apocalyptic AI attack. Shorter and more parsimonious.

- Tell HNN: pets.com was *not* owned today

- Tell HNN: about:blank is safe, too

- Show HNN: my new gopher protocol project—no currently known CVE 10's

elashri•12m ago

@dang I would encourage you to really think about having security incident as a new HN tag. The wording can be better though.

downrightmike•7m ago

We can call it [SI]

6thbit•6m ago

It feels like we hit an inflection point in the last week or so. Kind of a large tidal wave to crash on the coast, but likely not the tsunami yet. I hope.

If you are running services and don't yet have an easy way to react to these things with swift process defined, I hope you don't like to sleep.

consumer451•4m ago

Hey Supabase YC20 - Can we have pause on paid projects just in case?

I think people would keep paying, even for pause.

Hands on the Wheel

The N64's GPU Is a Technical Marvel [video]

The Thaura Constitution

Somoene bets $10M on Reddit stock anad loses half of it

The Ground Beneath Them Was Dry

Sndstation will transform cheap gaming consoles into music handhelds

The Commanding Heights

$20 plans, $1 of Sol costs 7x what $1 of Opus does. A task, only 1.3x

Assure – your AI agent says "done." This checks if it's lying

Ukrainian arms manufacturer Fire Point has overcome Starlink restrictions

AI's Bill Is Due – Intelligence or Brand? – Cold Logic – EP01

Zinc creep in cable spelter sockets brought down the Arecibo telescope in 2020

The reasons embedded projects get into trouble (2002)

Show HN: Fastbrowse, Browser agent that picks clicks with a System One model

Defining AI

Now what? After the AI crash

Compromised eMudhra Certificates: Update Your JetBrains IDEs, ReSharper, etc.

Show HN

Some Memories of Early Anthropic

CVE 10.0: CVE-2026-112816, no emudhra required

Google's $500B bloodbath reflects the danger it faces from AI

CVE-2026-112816: Improper certificate validation in the HTTPS listener in LXD

Supersonic airliner in doubt as company shifts to powering AI data centers

INTC and ORCL to Collab Around Agentic AI on OCI

Show HN: SkillWire, a searchable catalog for coding-agent skills

Alabama Is Sued over App Store Age Verification Law

Ignore AI and ask for that pay rise

Update and Self-Correction: Unlocking Zero-Point Energy (coming soon)

France is getting download tax for content providers (€0.055/GB)

Free to Think