3 ms·
POCs are a part of any good bug disclosure. It should be easy to test that one is no longer affected. Besides, trying older versions to undo problems is a very
by 5ilv3r 10y ago
POCs are a part of any good bug disclosure. It should be easy to test that one is no longer affected. Besides, trying older versions to undo problems is a very old and reliable technique.
- dimino 10y agoI get that, but when you roll back, you don't really control what else you're removing, and you're implying that a roll back wouldn't break other parts of the system, or that it even makes sense, given the state of the system (it could be years before a vuln is noticed). Imagine waking up one morning and realizing you can't use uppercase on your file names anymore because of a rolled back vulnerability.