3 ms·
This is the fifth time I've seen this site be linked this week, and I feel I must be missing something. There's nothing there yet, folks. It's still just an an
by jsnell 1y ago
This is the fifth time I've seen this site be linked this week, and I feel I must be missing something.
There's nothing there yet, folks. It's still just an announcement of an announcement! No longer does a vulnerability need just brand, a logo and a website. It also needs premarketing. I'm surprised there's not a "sign up for the waitlist" popup.
It's not even actionable as a warning. What are you going to do in preparation? Turn off HTTP/1.1 entirely? Of course not. Turn off your reverse proxy? Even if it were theoretically possible, what site could do anything at this timeframe. Switch vendors? Good luck figuring out which systems are vulnerable and which are not. Add a calendar entry to check for patches in two weeks? I guess, but given how viral this is with no details, odds are you won't be able to miss it when it actually goes public.