4 ms·

I'm very happy to see that a vulnerability introduced in a May 2022 was found, diagnosed, and fixed in a June 2022 update. After something went wrong, a bunch

by ISL 4y ago

I'm very happy to see that a vulnerability introduced in a May 2022 was found, diagnosed, and fixed in a June 2022 update. After something went wrong, a bunch of things went right very quickly. Nice to have good news on a Monday morning.

bumbledraven 4y ago
It's a bit confusing to me. The doc says: > … the vulnerable firmware was introduced by Google's Pixel security update of May 2022. However, further down, in the timeline section, the doc indicates that the issue was reported before May 2022, all the way back in March 2022: > 2022-03-02: Vulnerability reported. Opened issue 222318108 in Google's Issue Tracker, providing a technical description of the bug and a Proof of Concept (PoC) exploit…