3 ms·
It was both, tbh. These commands would be usable in some attacks against a “trusted” esp32 implementation. It’s something they probably should allow developers
by karlgkk 2y ago
It was both, tbh. These commands would be usable in some attacks against a “trusted” esp32 implementation.
It’s something they probably should allow developers to disable but it’s also being WILDLY overstated by clout seekers.
You can, from some angles, call this a security flaw or issue. Anyone calling it a backdoor - a term with a specific meaning intentional secret access - is being irresponsible imho
- scripturial 2y agoWe are talking about a programable device used as a programable device by hobbyists and device manufacturers to make things that you need to program to do something. It’s no different to trying to claim a PC has a security problem because you can load software onto it to do bad things.
- karlgkk 2y agoFwiw I’m referring to “trusted” as a specific use case using specific features. Most users won’t use those features. For those that do, this is a big game over. Although some do this, the platform was never well suited to it anyways. I think we both agree, this “vulnerability” is overstated.