4 ms·
Exactly. This is just some random nerd. There are people all over the world whose full time job it is to track open source projects to develop exploits.
by saas_co_de 9y ago
Exactly. This is just some random nerd. There are people all over the world whose full time job it is to track open source projects to develop exploits.
- avh02 9y agoand when script kiddies get wind that there is something potentially disastrous in the open, it can be exploited 10 times harder, that's all I'm saying. I understand (and agree) that the system admins/owners should also be able to mitigate through knowledge, but it's a dilemma that I think is better resolved by the other solution (in this case it's apparently a complex issue, but history has shown that there are surprisingly easy to exploit bugs/issues (see heartbleed, shellshock (which was apparently very quickly exploited.))
- saas_co_de 9y agoNo "script kiddies" can write exploit code for something on this level. This guy is not releasing an exploit implementation, he is just pointing to the existence of a potential exploit that has a patch in development. He can't even figure out exactly what it is. The only people who would be able to code this exploit would be the ones who already figured it out before this guy.