6 ms·

Seems a bit overkill with a brand + domain name for every new vulnerability. Don't get me wrong, it's a nice find and all, but I'm really distracted by all the

Seems a bit overkill with a brand + domain name for every new vulnerability. Don't get me wrong, it's a nice find and all, but I'm really distracted by all the fluff.

tptacek 3y ago
That's on you, though. The name doesn't cost anything, but it does make the vulnerability easier to talk about.
- thomastjeffery 3y ago
  I suspect the domain literally cost money...
  - lrvick 3y ago
    It cost me $4 to help get the word out on a bug that is being actively exploited right now, stealing valuable property. I am good with that.
    - lalopalota 3y ago
      Where do you buy a $4 domain?
      - jnaulty 3y ago
        based on the `whois milksad.info` Domain registrar is Namecheap :shrug:
      - topato 3y ago
        Porkbun? I buy under a dollar domains from them frequently
NelsonMinar 3y ago
Eh, let the security consultants have their moment. Also it's a great name. "Running bx seed on 3.x versions with a system time of 0.0 always generates the following secret: milk sad wage cup reward..."
- ryanatdistrust 3y ago
  we had so much fun trying to figure out the icon!
- bombcar 3y ago
  Milk sad is ok. “Wage cup reward” is almost poetry …