3 ms·
You posted a tutorial describing how to use your software to exploit servers, and you're surprised that people used it? I really hope this was a one time lapse
by tedivm 11y ago
You posted a tutorial describing how to use your software to exploit servers, and you're surprised that people used it? I really hope this was a one time lapse in judgement and not indicative of how the redis team thinks about security.
- johnmaguire2013 11y agoThis is the full disclosure vs antisec debate... if they posted it after they had a patched version out, the best thing to do is explain the issue and get people to upgrade, in my opinion. Granted, I didn't read the original blog post. Were they distributing tools to make it easy? Or were they explaining how it worked? In any case, if he hadn't written the blog post, someone else would have.
- andrewchambers 11y agoThe only fault lies with those who put the service on the open internet.
- deleted 11y ago[deleted]
- deleted 11y ago[deleted]