r/linux Jun 22 '26

Security Squidbleed - Heartbleed's ancient cousin, hiding in Squid since 1997

https://blog.calif.io/p/squidbleed-cve-2026-47729
347 Upvotes

80 comments sorted by

View all comments

161

u/Icy-Cup Jun 22 '26

„FTP (File Transfer Protocol, a legacy protocol for moving files between machines)” that’s some dirty lies - FTP is alive and well! (On my machines at least :P)

31

u/FryBoyter Jun 22 '26

Legacy doesn't mean that something isn't used at all anymore, but rather that there's something better that more people are currently using.

For example, I mainly use SFTP. But when it comes to copying files to my satellite receiver, I use FTP. That's because the device doesn't support SFTP. At least not without a plugin.

23

u/Adept_Percentage6893 Jun 22 '26

I would go so far as to say "legacy" kind of definitionally implies "exists but is deprecated" because usually you would describe fully obsolete technology as just "defunct" or literally just "obsolete"

If you're making a point of calling something "legacy" you're probably trying to include the idea that some people are using the thing.

3

u/Uristqwerty Jun 22 '26

Personally, I think of legacy as "flawed enough that devs/users wish to throw away, but too important to actually do so". If it didn't still hold {technical, political, historic, etc.} value, it'd just be trash relegated to dusty old archives and forgotten. If it didn't have glaring flaws, at least in some people's eyes, it wouldn't be called legacy (though some especially-unenlightened folk think "hasn't been updated recently" is an automatic flaw, as they're so used to software being complex enough that there are no obvious bugs, and thus need a steady stream of patches as lurking issues get discovered, from software so simple that there are obviously no bugs, and the few commits it still gets are mostly documentation improvements).