4 ms·
"it was a binary, so no one could just compare the old code to the new and figure out exactly what the problem was and launch an attack" Sorry but this is plai
by yaps8 11y ago
"it was a binary, so no one could just compare the old code to the new and figure out exactly what the problem was and launch an attack"
Sorry but this is plain false, people doing vulnerability research for closed source software do compare the binaries to understand the patch.
- rudolf0 11y agoYou're right, but there's no question that being somewhat vague with the patch details and producing only a changed binary means attackers will be slowed down a bit from producing a functional exploit. Even if you're only buying yourself maybe ~6-24 hours, that might mean N extra hours for millions of machines to patch.