4 ms·
Tavis Ormandy tweeted yesterday that he found something: https://twitter.com/taviso/status/758143119409885185 https://twitter.com/taviso/status/758143119409885
by mmaunder 10y ago
Tavis Ormandy tweeted yesterday that he found something:
https://twitter.com/taviso/status/758143119409885185 https://twitter.com/taviso/status/758143119409885185
Tavis has made quite a name for himself lately by going after AV vendors with no mercy. So when he tweeted, the community sat up and took notice. (Our own Slack was busy with discussion about this today)
Mathias, author of this post replied to Tavis with this:
https://twitter.com/avlidienbrunn/status/758232557829914624 https://twitter.com/avlidienbrunn/status/758232557829914624
The fix for the detectify exploit has already been pushed to users, so I'm guessing they were holding onto this public disclosure but Tavis putting his sights on lastpass too caused them to move the schedule up a little.
And the exploit from Tavis from 4 hours ago:
https://bugs.chromium.org/p/project-zero/issues/detail?id=884 https://bugs.chromium.org/p/project-zero/issues/detail?id=88...