2 ms·
So like, was the vuln more or less made widely known at some point? This feels like the scope grew so large because many groups obtained the 0day before Micros
by TameAntelope 6y ago
So like, was the vuln more or less made widely known at some point? This feels like the scope grew so large because many groups obtained the 0day before Microsoft expected it to go wide, which is not what folks seem to have expected.
It'd be interesting to see more info in the timeline about when that might have happened. Just feels like this info is entirely based on what the research community was seeing, not based on any info from the adversary side of this event (not that collecting that kind of data is easy, so fair enough).
- codezero 6y agoNot my field but from observation: Other security researchers watch when a CVE/vuln is announced and many have enough experience/knowledge to then know how to reproduce that vulnerability. I suspect that the researchers involved all saw how bad it was and didn't feel that it was safe to let Microsoft wait, as (although I don't think it's particularly common) they may drag their feet on a patch. Leaking this vulnerable forces MS's hand sooner. So it's not really necessarily totally off from what I've seen in the past. Just not very common. This tends to happen when researchers discover the zero day is ALREADY pervasive in the wild.
- Thorrez 6y ago>many groups obtained the 0day before Microsoft expected it to go wide, There were multiple groups conducting attacks? Is there evidence of that?