5 ms·
can we please not refer to a kid who exploits a 10-year-old known vulnerability as a "researcher".
by wepple 10y ago
can we please not refer to a kid who exploits a 10-year-old known vulnerability as a "researcher".
- ec109685 10y agoHow do you know he/she is a kid?
- ftxdri 10y agoYour ego is showing. Just because the vulnerability is old doesn't mean you can disrespect his profession. Sometimes people just write bad code. I'm sure you've done the same.
- wepple 10y agoI've definitely written bad code, for sure. I don't mean to sound disrespectful, I chose my words pretty poorly there. I'm arguing that this isn't research. There was no novel technique used or investigation into original paths of exploitation or increasing our understanding of previously unknown areas of anything. There's a material reason I said the above; calling the individual a researcher suggests that the exploitation of AFF was something quite complicated requiring a previously unknown attack, taking away from the fact that having an LFI in your app in 2016 is potentially bad luck but more likely just negligent; it should be highlighted as such.
- mpclark 10y agoIn the sheepish confirmation it'll be "a sophisticated and meticulously executed attack by what can only be a state-sponsored hacking group"
- user5994461 10y agoHum. Your quote is a line from the last Mirai DDoS. And the next week, a later article corrected to "a script kiddie from HackForums" as determined by the FBI :D