4 ms·
And it turns out it's been pwned for a couple years by people inserting a vulnerability into a dependency by masterful social engineering where the vuln was int
by hoseja 5y ago
And it turns out it's been pwned for a couple years by people inserting a vulnerability into a dependency by masterful social engineering where the vuln was introduces as an obvious fix to another less exploitable bug.
- moffkalast 5y agoI've never seen people social engineer codebase maintainers into patching them an exploit into it, that was absolutely brilliant.