4 ms·
"It's called a 0-day because (typically) it is patched a day or two after it's announced, and they are rare. If you have one, you don't use it just to attack on
by greedo 13y ago
"It's called a 0-day because (typically) it is patched a day or two after it's announced, and they are rare. If you have one, you don't use it just to attack one news site."
It's called a zero day, because there's no patch for it. And if you think most 0days are patched in a day or two after announced, I have a bridge to sell you.
- peterwwillis 13y agoAlright, you got me there. General security holes stay open for months at a time, and remote holes in the production site that are actually vulnerable to a PoC get workarounds installed a day or two after. But still, nobody's going to use an unannounced 0day for a defacement.