3 ms·
If you remember when heartbleed first was announced, cloudflare put up a vulnerable server and challenged the internet saying they did not think it was possible
by AdamJacobMuller 4y ago
If you remember when heartbleed first was announced, cloudflare put up a vulnerable server and challenged the internet saying they did not think it was possible to exploit it to exfiltrate data. They were quickly proven wrong.
- orra 4y agoThank you. I'd forgotten that, and it's very relevant.
- charcircuit 4y agoI think that's significantly different because that heartbleed gave attackers potentially sensitive information as opposed to just crashing.
- orra 4y ago“Just crashing” is a premise; it hasn't been proven. These are buffer and stack overflows, so I feel some skepticism is warranted.
- charcircuit 4y agoSure, but a vulnerability that out of the box gives attackers potentially sensitive data is a much easier target.