3 ms·
Except this isn't a CVE anyone will encounter in the workplace because nobody in their right mind would run Pi-Hole on a Raspberry Pi in a professional setting.
by suprjami 2y ago
Except this isn't a CVE anyone will encounter in the workplace because nobody in their right mind would run Pi-Hole on a Raspberry Pi in a professional setting. It's a waste of time.
If you want to dedicate staff to reviewing useless garbage issues you do that, go and review every issue logged against other non-commercial software.
The rest of us have a job to do.
- ziddoap 2y ago>The rest of us have a job to do. I'm not sure why you are being hostile about it, but okay. Obviously you feel very strongly about the subject. You should engage with MITRE and encourage them to reconsider their current CVE inclusion decision tree.
- chgs 2y agoIf Daniel Steinberg struggles to make headway with them…
- Fnoord 2y agoYeah except Bob, your uncle, is working from home and therefore needs to care about his home network security.
- suprjami 2y agoI look forward to your explanation of how the temperature of Bob's Raspberry Pi poses a threat to his employer. I also wonder how the attacker got access to Bob's home network in the first place? If only he had the chance to focus on actual important security issues instead of constant notifications about useless noise like the temperature of his Pi-Hole.
- witrak 2y ago>I look forward to your explanation of how the temperature of Bob's Raspberry Pi poses a threat to his employer. Hmm, anything like this can be used as part of side channel if an attacker is able to influence the temperature of Bob's RPi.
- Fnoord 2y agoInformational vulnerabilities are often nothing to worry about, until they are.