Hacker News Reader

> It would crash all clients after injecting just a single message to any node of the network. Message would also be persisted in datastore so it would recrash the client on restart.

Wouldn't that fail to propagate through the network? Crashing nodes can't forward messages to other nodes.

View on HN

It depends where the issue is exactly triggered in code. If it's possible to get data persisted which crashes system on recall, then it's possible. BM also uses pickle on 'non-secure' data, which could allow much wider exploits with lower level attack code.

Reply on news.ycombinator.com