3 ms·
An oversight is still a vulnerability. I agree it didn't take some over the top technical knowledge to discover it, and a 512 bit static key was known to be vul
by hbhakhra 12y ago
An oversight is still a vulnerability. I agree it didn't take some over the top technical knowledge to discover it, and a 512 bit static key was known to be vulnerable, he exploited it and showed it to be vulnerable. A widely known bug that is in your code is still a bug.
- simoncion 12y agoYou... clearly failed to understand my comment. I was addressing your claim that "This vulnerability easily had a value of millions to Google...". I argued that it did not. This was the only thing that I argued. I don't understand why you're telling me that a security oversight can lead to an exploitable vulnerability. I never claimed otherwise.