4 ms·
Why are there further mitigations being put in now, rather than this all being in place before the public disclosure?
by testplzignore 5y ago
Why are there further mitigations being put in now, rather than this all being in place before the public disclosure?
- api 5y agoThe root fix renders this exact attack impossible with current nodes, but we think it's a good idea to close the gap in another way that renders this entire class of attacks impossible just in case someone figures out some other way to accomplish something similar. We found a way to do that so we are releasing it. I don't think security should be done by just playing whack a mole. You want to try to get ahead of it. If there's an opportunity to harden something, do it.