3 ms·
Is the word zero-day here superfluous? If they were previously unknown doesn't that make them zero-day by definition?
by fred_is_fred 8mo ago
Is the word zero-day here superfluous? If they were previously unknown doesn't that make them zero-day by definition?
- bink 8mo agoYes. As a security researcher this always annoys me.
- tptacek 8mo agoIt's a term of art. In print media, the connotation is "vulnerabilities embedded into shipping software", as opposed to things like misconfigurations.
- limagnolia 8mo agoI though zero-day meant actively being exploited in the wild before a patch is available?
- rcxdude 8mo agoZero day means that there is zero days between a patch being available and the vulnerability being disclosed (as opposed to the patch being available before disclosure).
- Dylan16807 8mo agoDiscovering a zero day implies that there is no patch, but the term is talking about how long the vendor has known about the vulnerability.
- jfyi 8mo agoI think it's a fairly common trope in communication to explain in simple terms any language that the wider part of an audience doesn't understand.