6 ms·

Seconded! Only a PR person would dream of saying that a 0 day exploit is a good thing. I expect that most HN readers just finds this hillarious, but still peopl

by rijoja 6y ago

Seconded! Only a PR person would dream of saying that a 0 day exploit is a good thing. I expect that most HN readers just finds this hillarious, but still people read HN since it has a good standard. Saying that a 0 day exploit is a good thing goes against this needless to say. Especially since they've faced serious accusations earlier on.

brundolf 6y ago
It's very clearly sarcasm and not a serious PR move, though I agree it makes the article confusing and hard to follow. Changing it to a different source link seems appropriate.
- rijoja 6y ago
  I don't really think a communication from Malwarebytes is the place for sarcastic comments. Lets say if you are working with a US government this could have enormous implications. I've talked to a lot of clients who ditched Zoom for Microsoft Teams due to their earlier mistakes. Also I find it funny that the heading "Not patched yet" is solved by the headline "Security done right". Lets say if you are working with a company that deals with say healthcare information a 0-day certainly doesn't make things safer and since it is not patched yet this is definitely not done right.
  - gowld 6y ago
    Teams is exploitable too.
    - vulcan01 6y ago
      No one ever got fired for choosing Microsoft.
    - rijoja 6y ago
      Did I say that it wasn't?
- okamiueru 6y ago
  How can it be very clearly something, and at the same time confusing and hard to follow?
  - gowld 6y ago
    What's clear to A can be confusing to B. Sarcasm or satire is a common example.
  - brundolf 6y ago
    It's clear that it's not serious, but once you get the joke you then have to mentally transform every statement as you go along in order to get the base facts. That hurts clarity.
dylan604 6y ago
>Only a PR person would dream of saying that a 0 day exploit is a good thing Depends on your perspective. a 0-day is a very good thing if you are an advesary trying to get in. so maybe to the alphabet soup of groups CCP, FBI, NSA, etc, woohoo!!!
toomanyducks 6y ago
Well, as is previously mentioned, it's not _quite_ a 0-day, and finding it and responsibly disclosing it is a very good thing *compared to alternatives*. I do agree, though, that the tone is needlessly confusing, and it feels like PR over clarity.
charcircuit 6y ago
Having critical zero days being reported is always a good thing.
- HenryBemis 6y ago
  But I thought we call them "zero day" when they are already being abused. I didn't get from the article that this vulnerability has been discovered and abused by the baddies. Thus it is NOT a "zero day" but a "critical vulnerability". Sod the clickbait-y titles!
  - jacobr1 6y ago
    It doesn't need to be exploited to be a zero-day, just not yet mitigated.

by rijoja 6y ago

brundolf 6y ago

It's very clearly sarcasm and not a serious PR move, though I agree it makes the article confusing and hard to follow. Changing it to a different source link seems appropriate.

rijoja 6y ago
I don't really think a communication from Malwarebytes is the place for sarcastic comments. Lets say if you are working with a US government this could have enormous implications. I've talked to a lot of clients who ditched Zoom for Microsoft Teams due to their earlier mistakes. Also I find it funny that the heading "Not patched yet" is solved by the headline "Security done right". Lets say if you are working with a company that deals with say healthcare information a 0-day certainly doesn't make things safer and since it is not patched yet this is definitely not done right.
- gowld 6y ago
  Teams is exploitable too.
  - vulcan01 6y ago
    No one ever got fired for choosing Microsoft.
  - rijoja 6y ago
    Did I say that it wasn't?
okamiueru 6y ago
How can it be very clearly something, and at the same time confusing and hard to follow?
- gowld 6y ago
  What's clear to A can be confusing to B. Sarcasm or satire is a common example.
- brundolf 6y ago
  It's clear that it's not serious, but once you get the joke you then have to mentally transform every statement as you go along in order to get the base facts. That hurts clarity.

dylan604 6y ago

>Only a PR person would dream of saying that a 0 day exploit is a good thing Depends on your perspective. a 0-day is a very good thing if you are an advesary trying to get in. so maybe to the alphabet soup of groups CCP, FBI, NSA, etc, woohoo!!!

toomanyducks 6y ago

Well, as is previously mentioned, it's not _quite_ a 0-day, and finding it and responsibly disclosing it is a very good thing *compared to alternatives*. I do agree, though, that the tone is needlessly confusing, and it feels like PR over clarity.

charcircuit 6y ago

Having critical zero days being reported is always a good thing.

HenryBemis 6y ago
But I thought we call them "zero day" when they are already being abused. I didn't get from the article that this vulnerability has been discovered and abused by the baddies. Thus it is NOT a "zero day" but a "critical vulnerability". Sod the clickbait-y titles!
- jacobr1 6y ago
  It doesn't need to be exploited to be a zero-day, just not yet mitigated.