3 ms·
LPEs do need to be fixed, but for most people it's not a threat model they need to worry about.
by Analemma_ 3mo ago
LPEs do need to be fixed, but for most people it's not a threat model they need to worry about.
- dathinab 3mo agothis is a misconception yes, most company settings don't run untrusted code, and OpenBSD is mostly used for servers not employee devices but that doesn't mean LPEs aren't quite relevant, because they matter for pretty much everyone if combined with other vulnerabilities, like RCE, supply chain attack etc. and while RCE are becoming less common, supply chain attacks have been increasingly more common