4 ms·
Not exactly, historically days are counted by how long the editor has provided a patch fixing the bug, as in "you[the adminsys] had X many days to apply the bug
by luch 6y ago
Not exactly, historically days are counted by how long the editor has provided a patch fixing the bug, as in "you[the adminsys] had X many days to apply the bugfix".
0day means no patch is available, whether the vulnerability is known privately/publicly or not
- saagarjha 6y agoIf you (the public) learn of the exploit at the same time as the vendor, then it is still a 0-day. You can construct a definition where it is "a zero day to you, the sysadmin" but that would really make it difficult to pick a single day to measure from. For this reason the most useful definition would be to measure from the defender with the earliest knowledge, which would be the vendor.
- dmix 6y agoThis seems to be a phrase that has a matter of perspective. I always see people trying to nail down a meaning but it always seems to little effect in day to day discourse. I’m a fan of letting context infer meaning. And letting certain words just naturally grow to whatever the culture wants it to. It’s always hard to fight back against it. There’s a million examples of this on the internet where people try to be pedantic about slang or word usage. All that matters is “we know what you mean”. I like to assume enough people here know the real difference zero days vs existing vulnerabilities are. But in practice it matters less.
- wcoenen 6y agoPeople have debated prescriptive vs descriptive linguistics for centuries, it will not be resolved here. https://www.bartleby.com/73/2019.html https://www.bartleby.com/73/2019.html