5 ms·

I get what you mean, but also worth noting that the vulnerability was discovered by Chen Zhaojun of Alibaba Cloud Security Team.

by mgbmtl 5y ago

Tabular-Iceberg 5y ago
I guess it’s safe to assume that the actual discovery happened a long time ago and the CCP has already pwned everyone they wanted to using the vulnerability already. Responsible disclosure with Chinese characteristics.
- adrianN 5y ago
  Literally every country in the world hoards every zero day they can get their hand on.
  - Tabular-Iceberg 5y ago
    Yes, I expect the NSA to get first dibs on using anything Amazon discovers too. Two wrongs do not make a right. And I’m not sure how good of a strategy it really is, at least not for the west. The value in using zero days for attacking enemies is highly speculative and not subject to public scrutiny, but the value in rolling out fixes as soon as possible to protect against anyone else is easily felt by everyone. I believe independent security researchers still exist, and they are worth fighting for.
- aaomidi 5y ago
  I can smell the xenophobia from miles away.
  - Tabular-Iceberg 5y ago
    Criticising a political system is not xenophobia.
    - boffinAudio 5y ago
      "Chinese" is not a political system.
      - Tabular-Iceberg 5y ago
        The CCP is a political party, it being the only legal party is a political system. And I’m criticising it. If you’re offended by the “with Chinese characteristics”, look up the origin of the phrase. It’s CCP code for “it’s not wrong when we do it”. When people questioned Deng Xiaoping’s reforms as being capitalist he responded with “it’s socialism with Chinese characteristics, I ain’t gotta explain shit”.
      - dragonwriter 5y ago
        “Chinese” was used twice in the post; once in the informal (and usually hostile) abbreviation “CCP” for “Chinese Communist Party” and in “with Chinese characteristics”, a reference toa political motto of the same party identified by the abbreviation, the Communist Party of China (CPC), who describes their system as “socialism with Chinese characteristics”. So, yes, it's a reference to a particular political platform, not a nationality. It's no more ethnically bigoted than blaming a problem on the US Democratic or Republican party is.
- boffinAudio 5y ago
  Its not safe to assume such clearly bigoted things. In fact the worlds safety levels are impinged negatively by such hubristic nationalism. Its probably safer to assume this was discovered by the NSA years ago and left unreported for their own hijinks - after all, the NSA has a far worse track record of violating peoples human rights than, pretty much, any other organization on the planet.
  - Tabular-Iceberg 5y ago
    [flagged]
    - boffinAudio 5y ago
      Nothing 'whatabout' it: the moral authority you think you have, does not exist. Thus, your prejudice is clear and you'd be better off directing your ire towards an institution you can actually do something about as a member of a Western democracy or one of the 5-eyes superstate member nations: the NSA.
      - Tabular-Iceberg 5y ago
        Why not both? Places like HN are full of legitimate criticism of western abuses of power, and you can plainly see it if you do a search, since it doesn’t get scrubbed from the internet unlike certain places.
        boffinAudio 5y ago
        >Why not both? * Americans criticizing China = war * Americans criticizing America = civil society Shouldn't even have to explain it. Americans can do NOTHING about China for as long as they do nothing about the USA.
loxias 5y ago
YES, Agree. To be honest, after I posted the comment I was unsure if I ought to edit to add that I don't mean it as a diss or with any ill intent... to any human. Just an amusing "isn't this cute" parallel. And also I sorta want to add something about necessity being the mother of invention. There's a lot of very high quality proxy/vpn/DPI evasion code that seems to come from China. ;)

I get what you mean, but also worth noting that the vulnerability was discovered by Chen Zhaojun of Alibaba Cloud Security Team.

by mgbmtl 5y ago

I get what you mean, but also worth noting that the vulnerability was discovered by Chen Zhaojun of Alibaba Cloud Security Team.

Tabular-Iceberg 5y ago

I guess it’s safe to assume that the actual discovery happened a long time ago and the CCP has already pwned everyone they wanted to using the vulnerability already. Responsible disclosure with Chinese characteristics.

adrianN 5y ago
Literally every country in the world hoards every zero day they can get their hand on.
- Tabular-Iceberg 5y ago
  Yes, I expect the NSA to get first dibs on using anything Amazon discovers too. Two wrongs do not make a right. And I’m not sure how good of a strategy it really is, at least not for the west. The value in using zero days for attacking enemies is highly speculative and not subject to public scrutiny, but the value in rolling out fixes as soon as possible to protect against anyone else is easily felt by everyone. I believe independent security researchers still exist, and they are worth fighting for.
aaomidi 5y ago
I can smell the xenophobia from miles away.
- Tabular-Iceberg 5y ago
  Criticising a political system is not xenophobia.
  - boffinAudio 5y ago
    "Chinese" is not a political system.
    - Tabular-Iceberg 5y ago
      The CCP is a political party, it being the only legal party is a political system. And I’m criticising it. If you’re offended by the “with Chinese characteristics”, look up the origin of the phrase. It’s CCP code for “it’s not wrong when we do it”. When people questioned Deng Xiaoping’s reforms as being capitalist he responded with “it’s socialism with Chinese characteristics, I ain’t gotta explain shit”.
    - dragonwriter 5y ago
      “Chinese” was used twice in the post; once in the informal (and usually hostile) abbreviation “CCP” for “Chinese Communist Party” and in “with Chinese characteristics”, a reference toa political motto of the same party identified by the abbreviation, the Communist Party of China (CPC), who describes their system as “socialism with Chinese characteristics”. So, yes, it's a reference to a particular political platform, not a nationality. It's no more ethnically bigoted than blaming a problem on the US Democratic or Republican party is.
boffinAudio 5y ago
Its not safe to assume such clearly bigoted things. In fact the worlds safety levels are impinged negatively by such hubristic nationalism. Its probably safer to assume this was discovered by the NSA years ago and left unreported for their own hijinks - after all, the NSA has a far worse track record of violating peoples human rights than, pretty much, any other organization on the planet.
- Tabular-Iceberg 5y ago
  [flagged]
  - boffinAudio 5y ago
    Nothing 'whatabout' it: the moral authority you think you have, does not exist. Thus, your prejudice is clear and you'd be better off directing your ire towards an institution you can actually do something about as a member of a Western democracy or one of the 5-eyes superstate member nations: the NSA.
    - Tabular-Iceberg 5y ago
      Why not both? Places like HN are full of legitimate criticism of western abuses of power, and you can plainly see it if you do a search, since it doesn’t get scrubbed from the internet unlike certain places.
      - boffinAudio 5y ago
        >Why not both? * Americans criticizing China = war * Americans criticizing America = civil society Shouldn't even have to explain it. Americans can do NOTHING about China for as long as they do nothing about the USA.

loxias 5y ago

YES, Agree. To be honest, after I posted the comment I was unsure if I ought to edit to add that I don't mean it as a diss or with any ill intent... to any human. Just an amusing "isn't this cute" parallel. And also I sorta want to add something about necessity being the mother of invention. There's a lot of very high quality proxy/vpn/DPI evasion code that seems to come from China. ;)