4 ms·
I'm really surprised, and disappointed, that Travis announced this publicly like this. From my understanding the Google team has a policy of giving people time
by tedivm 10y ago
I'm really surprised, and disappointed, that Travis announced this publicly like this. From my understanding the Google team has a policy of giving people time to patch the bug before announcing it. I know that the technical details weren't released by by confirming there is a zero day exploit he's making it more likely to be discovered and exploited. The responsible thing would have been to notify the vendor and apply the standard policy they have in place for disclosure.
- libeclipse 10y agoHe announced it exists, though not what it is. Who knows, it might even spur some people to move away from LP.
- sp332 10y agoThey fixed all 3 bugs already. https://mobile.twitter.com/taviso/status/844573211278794753 https://mobile.twitter.com/taviso/status/844573211278794753 I'm not moving.
- ryanlol 10y agoI can confirm that there is unpatched exploitable vulnerabilities with high impact in the following software products: Linux OpenBSD iOS Windows Google Chrome Mozilla Firefox Safari Apache nginx openSSHd bonzi buddy