3 ms·
i know this came out as a leak, but makes one wonder how "responsible" even a Jan 9 official announcement would have been. the scope is absolutely terrifying. t
by leeoniya 9y ago
i know this came out as a leak, but makes one wonder how "responsible" even a Jan 9 official announcement would have been. the scope is absolutely terrifying. this bug will be exploitable for a very long time.
- Piskvorrr 9y agoJan 9, 2019? 2050? How much longer is long _enough_?
- leeoniya 9y agoi guess at minimum it's worth asking how many major hosting providers have been fully patched at the time of disclosure. in addition to browsers and OSes.
- pixl97 9y agoYou don't "think infosec". If I'm an attacker and I notice both amazon and azure rebooting all their systems I know something is up. When I see that both Microsoft and Redhat employees are working overtime it gives away more information. All I have to do is crack on of their patched systems and I can bin diff it and figure out what is up. Then I sell it off to blackhats before the rest of the world is aware.
- jopsen 9y agoThey had like 6 months or so... how is more time going to make things less painful?