diff --git a/2configs/default.nix b/2configs/default.nix
index 56a87d7..f218a35 100644
--- a/2configs/default.nix
+++ b/2configs/default.nix
@@ -23,7 +23,8 @@ with config.krebs.lib;
       user = config.krebs.users.makefu;
       source = let
           inherit (config.krebs.build) host user;
-          ref = "b8ede35"; # stable @ 2016-10-19
+          # ref = "b8ede35"; # stable @ 2016-10-19
+          ref = "31c72ce"; # stable @ 2016-10-21 (dirtycow)
       in {
         nixpkgs = if config.makefu.full-populate || (getEnv "dummy_secrets" == "true") then
           {