4 ms·
Granted, this is weapon grade quality. However, most checks for heartbleed out there could be considered weapon grade or at least not far off[1], this one does
by Xylakant 13y ago
Granted, this is weapon grade quality. However, most checks for heartbleed out there could be considered weapon grade or at least not far off[1], this one does not add anything a somewhat experienced developer could not have added. This time, the bug is just too clear, too easily exploitable. I appreciate that someone saw the IDS signatures were inadequate and wrote a proof showing that.
[1] hey, they read some bytes of server memory, it's fairly simple to move on from there and read more.
- djcapelis 13y ago> Granted, this is weapon grade quality No. Stop. A good security tool that does what it says and means what it says is just a good tool that does what it says and means what it says. There is no "weapons grade" or not "weapons grade" tools. I've seen people pop boxes with netcat and a keyboard. I've seen people fail to pop boxes with the best fucking attack framework you could put in their hands. Nothing is "weapons grade" and code isn't a weapon. Leave the weapons grade labels to radioactive isotopes where they actually have real meaning. Calling some types of code weapons grade is a huge bad thing.