4 ms·
It's public code, for a PAM module that others might be using too. The attack isn't limited to Uber's infrastructure.
by daenney 10y ago
It's public code, for a PAM module that others might be using too. The attack isn't limited to Uber's infrastructure.
- tedunangst 10y agoTo the extent this is true, those others aren't paying the bounty. Uber, who is paying, probably has fairly limited exposure to the bug; i.e. one insider impersonating another. To return to the main point, who exactly would pay more for this bug and why?