4 ms·

the article literally points out the somewhat rare configuration you would have to have to be exploited by this. The way this headline is worded is pretty misl

• codetrotter 3y ago
  Here’s the thing. I use Nginx. Some of the configurations in which I use Nginx were mostly copy-pasted from recommendations from third-parties. Hence, my initial assumption which had been that no action was needed when I didn’t find anything mentioning Nginx with this attack when I searched a few days ago, needed to be revisited. Because when I saw the op article it turned out that there was reason for me to have a closer look at my Nginx instances. To see if any of the configs that had been recommended by third-parties involved changing values that could lead to this attack being able to affect me. > you clearly sucked it up Clearly not. Or at least, not without reason.