3 ms·
How are they affected yet no exploits can impact users?
by CardenB 9y ago
How are they affected yet no exploits can impact users?
- ringaroundthetx 9y agobecause nobody wrote the weaponized exploit yet and put it in the wild.
- geekamongus 9y agoThat we know of.
- tritium 9y agoNo one has invested effort in packaging up an easy-to-use developer kit for distribution yet. The hole is there, and publicly known as of today, but nothing a high school script kiddie can trivially leverage for good grades. Yet. No one is giving out payloads and telling people they can try this at home, and watch it go. Nothing is known to be in a pastebin or git repo at the moment. This doesn’t mean the black market isn’t crafting kits for sale at a high price right now for big game hunting though.
- CardenB 9y agoOkay that makes sense. I understood it as the interface wasn't exposed to anyone that could exploit it. However they meant that no exploit methods had been developed yet.
- tritium 9y agoThe exploit methods that the researchers uncovered have not been provided to the world at large. You can bet that test kits are in the hands of large companies right now, to aid security patch development. If those test kits, intended for white hat purposes get leaked in any way, for any reason, it's out in the wild. That's not supposed to happen, and there's no way for the layman to know the status of a zero day in the wild, until explicitly reported as discovered. Any company or project providing a patch, has a way of testing the validity of the patch. Those test kits can be weaponized, but not without a degree of skill. Anyone who tests software knows this.