4 ms·
I'm assuming there will never be an official proof of concept release, so how long do you all think it will be before we see widely available exploit code and f
by morpheuskafka 7y ago
I'm assuming there will never be an official proof of concept release, so how long do you all think it will be before we see widely available exploit code and fake certificates out in the wild?
- spuz 7y agoTpcaek has said elsewhere in this thread: > Saleem Rashid worked out a POC for this on Slack in something like 45 minutes today So I would be amazed if there were not some malicious certificates out there already.
- Maxious 7y agosome examples of fake certificates/signings https://twitter.com/matthew_d_green/status/1217246161440051200 https://twitter.com/matthew_d_green/status/12172461614400512... https://twitter.com/subTee/status/1217300590696501249 https://twitter.com/subTee/status/1217300590696501249