3 ms·
Right!? Just because several people have been unable to exploit this stack overflow in a week, doesn't prove the flaw is not exploitable.
by orra 4y ago
Right!? Just because several people have been unable to exploit this stack overflow in a week, doesn't prove the flaw is not exploitable.
- AdamJacobMuller 4y agoIf you remember when heartbleed first was announced, cloudflare put up a vulnerable server and challenged the internet saying they did not think it was possible to exploit it to exfiltrate data. They were quickly proven wrong.
- orra 4y agoThank you. I'd forgotten that, and it's very relevant.
- charcircuit 4y agoI think that's significantly different because that heartbleed gave attackers potentially sensitive information as opposed to just crashing.
- orra 4y ago“Just crashing” is a premise; it hasn't been proven. These are buffer and stack overflows, so I feel some skepticism is warranted.
- charcircuit 4y agoSure, but a vulnerability that out of the box gives attackers potentially sensitive data is a much easier target.
- snvzz 4y agoYou forgot the /s sarcasm indicator.
- orra 4y agoI'm being perfectly sincere.