3 ms·
I do not doubt the severity of the flaw, but most practical attacks end up being far more mundane. Consider SolarWinds, for example. No dazzling tricks needed,
by ngneer 3y ago
I do not doubt the severity of the flaw, but most practical attacks end up being far more mundane. Consider SolarWinds, for example. No dazzling tricks needed, whatever gets the job done.
- DarkNova6 3y agoHas there even be a documented practical attack in the wild?
- willy_k 3y agoDepends. This type of vulnerability is probably fairly valuable to state actors, for example.
- ngneer 3y agoAre state actors subject to different economics? Their budgets are finite, too. Why opt for a complex less reliable exploit if a simple more reliable one is available?