4 ms·
This is wrong and bad advice. All you need is a remote code execution vulnerability in PHP or so. Only don't patch if your server is isolated and not connected
by chrisper 9y ago
This is wrong and bad advice. All you need is a remote code execution vulnerability in PHP or so.
Only don't patch if your server is isolated and not connected to the internet.
- nitrogen 9y agoRCE is already kind of game over though. If you have RCE on the server, you can probably get to everything interesting without having to go through a slow side channel.
- jnordwick 9y agoIf you have a remote exploit, there are much bigger issues to worry about. And since this is a timing issue, I'm not even sure that would be enough.