5 ms·

First Heartbleed, then Badlock and now ImageTragick. Are bugs getting their own domains now?

by Yuioup 10y ago

jalami 10y ago
I thought the same thing. You can't sensationalize hacking in the news though without a catchy name. I see them as eventual NerdCore band names. Don't forget Shellshock.
- acbabis 10y ago
  The sad thing is, I would probably buy a Heartbleed CD
golergka 10y ago
Whatever helps awareness. May be it even gives a hint to people outside of tech about how bad things in security really are.
Buge 10y ago
https://weakdh.org/ https://weakdh.org/ http://breachattack.com/ http://breachattack.com/ (an attack against https, ironically not even bothering to serve over https) https://freakattack.com/ https://freakattack.com/ https://factorable.net/ https://factorable.net/ http://badlock.org/ http://badlock.org/ https://drownattack.com/ https://drownattack.com/ https://poodle.io/ https://poodle.io/ http://backronym.fail/ http://backronym.fail/ https://gotofail.com/ https://gotofail.com/
- astrodust 10y ago
  It's almost like we need a site that indexes them.
  - discreditable 10y ago
    Here, I just made one! https://github.com/KeenRivals/Bugsite-Index https://github.com/KeenRivals/Bugsite-Index
    - astrodust 10y ago
      Give it some GitHub pages love with a custom domain and re-submit to HN!
      - discreditable 10y ago
        I looked at doing that first, but I couldn't figure out how folks could submit PRs against the markdown used to generate the site. I might just be a newb but I can't find a direct way to do it. Suggestions?
mwfunk 10y ago
Not just their own domains, but in this case its own logo and Twitter account. Seems really bizarre to me, I don't get it.
- msbarnett 10y ago
  You really don't get why the web is better off if serious bugs are given memorable, human parse-able branding that helps facilitate press coverage and raise awareness among stakeholders, rather than hiding flaws behind opaque identifiers like CVE-117293 that only a handful of people will know enough about to look into?
- rl3 10y ago
  At this rate it seems to be leading towards a new comedy subgenre, so I'm happy with it.
reidrac 10y ago
I hate this "branding of security issues" trend, I don't think it adds anything at all to the security process; but there you are.

First Heartbleed, then Badlock and now ImageTragick. Are bugs getting their own domains now?

by Yuioup 10y ago

First Heartbleed, then Badlock and now ImageTragick. Are bugs getting their own domains now?

I thought the same thing. You can't sensationalize hacking in the news though without a catchy name. I see them as eventual NerdCore band names. Don't forget Shellshock.

acbabis 10y ago
The sad thing is, I would probably buy a Heartbleed CD

golergka 10y ago

Whatever helps awareness. May be it even gives a hint to people outside of tech about how bad things in security really are.

Buge 10y ago

https://weakdh.org/ https://weakdh.org/ http://breachattack.com/ http://breachattack.com/ (an attack against https, ironically not even bothering to serve over https) https://freakattack.com/ https://freakattack.com/ https://factorable.net/ https://factorable.net/ http://badlock.org/ http://badlock.org/ https://drownattack.com/ https://drownattack.com/ https://poodle.io/ https://poodle.io/ http://backronym.fail/ http://backronym.fail/ https://gotofail.com/ https://gotofail.com/

astrodust 10y ago
It's almost like we need a site that indexes them.
- discreditable 10y ago
  Here, I just made one! https://github.com/KeenRivals/Bugsite-Index https://github.com/KeenRivals/Bugsite-Index
  - astrodust 10y ago
    Give it some GitHub pages love with a custom domain and re-submit to HN!
    - discreditable 10y ago
      I looked at doing that first, but I couldn't figure out how folks could submit PRs against the markdown used to generate the site. I might just be a newb but I can't find a direct way to do it. Suggestions?

mwfunk 10y ago

Not just their own domains, but in this case its own logo and Twitter account. Seems really bizarre to me, I don't get it.

msbarnett 10y ago
You really don't get why the web is better off if serious bugs are given memorable, human parse-able branding that helps facilitate press coverage and raise awareness among stakeholders, rather than hiding flaws behind opaque identifiers like CVE-117293 that only a handful of people will know enough about to look into?
rl3 10y ago
At this rate it seems to be leading towards a new comedy subgenre, so I'm happy with it.

reidrac 10y ago

I hate this "branding of security issues" trend, I don't think it adds anything at all to the security process; but there you are.