3 ms·

Cloudflare blog also mentions javascript https://blog.cloudflare.com/zenbleed-vulnerability/ https://blog.cloudflare.com/zenbleed-vulnerability/

• loeg 3y ago
  Might just be parroting the claim from this thread, though.
  • Mahn 3y ago
    I would think that Cloudflare is reputable enough that they would not state that claim without at least having some knowledge about it.
    • loeg 3y ago
      They have since rewritten that sentence from: > The attack can even be carried out remotely through JavaScript on a website, meaning that the attacker need not have physical access to the computer or server. https://web.archive.org/web/20230725020052/https://blog.cloudflare.com/zenbleed-vulnerability/ https://web.archive.org/web/20230725020052/https://blog.clou... To: > Currently the attack can only be executed by an attacker with an ability to execute native code on the affected machine. While there might be a possibility to execute this attack via the browser on the remote machine it hasn’t been yet demonstrated. https://web.archive.org/web/20230726204030/https://blog.cloudflare.com/zenbleed-vulnerability/ https://web.archive.org/web/20230726204030/https://blog.clou... I think I am vindicated -- they did just make that up, likely from the claim posted here.