4 ms·
Do you remember the CVE number of this bug? How about the Citrix bug from last week? It's a poor way to communicate, and there's very strong anecdotal evidence
by dguido 7y ago
Do you remember the CVE number of this bug? How about the Citrix bug from last week? It's a poor way to communicate, and there's very strong anecdotal evidence that using a real name promotes patching rates faster than otherwise.
Plus, the whosecurve.com website includes the information you want if you only have 10 seconds and it's by the same authors as the blog linked in the OP.
- JshWright 7y agoIt has the added "benefit" of making it appear to the casual observer that Trail of Bits found the vulnerability in the first place...
- tptacek 7y agoThe fact that their writeups all credit NSA and link to other people's descriptions of the vulnerability has the "benefit" of ensuring that you have to want that misconception in order to end up with it.