4 ms·
I'm lost. You say in the end they "fixed" it (quotes included) and you yourself tested it and it did actually seem fixed... but it's not according to OP. I do
by veb 11y ago
I'm lost.
You say in the end they "fixed" it (quotes included) and you yourself tested it and it did actually seem fixed... but it's not according to OP.
I do apologise if I've missed something blatantly obvious here!
Was your method the same as OP by the way?
- chadscira 11y agoThe method i used had to do with a race condition related to transferring between cards, just like the OP. Either way they should be paying more attention to this type of exploit, considering the history of the issue. I think they may have updated something and had a regression, the big question is how long has it been like this.
- nandemo 11y agoIt's called a regression. Believe it or not, there's a lot of software organizations out there that still get away with using anti-patterns like: not integrating code frequently, not using modern source control systems, not using automated tests, not doing security audits, and not doing incident reviews.
- akshatpradhan 11y agoPart of the SDLC!