3 ms·
Unless you are running remote code there is no reason to patch.
by jnordwick 9y ago
Unless you are running remote code there is no reason to patch.
- chrisper 9y agoThis is wrong and bad advice. All you need is a remote code execution vulnerability in PHP or so. Only don't patch if your server is isolated and not connected to the internet.
- nitrogen 9y agoRCE is already kind of game over though. If you have RCE on the server, you can probably get to everything interesting without having to go through a slow side channel.
- jnordwick 9y agoIf you have a remote exploit, there are much bigger issues to worry about. And since this is a timing issue, I'm not even sure that would be enough.