3 ms·
No PoC was released with the Heartbleed disclosure, but many were published within hours by others (including myself). And this was a good thing, without them a
by Titanous 11y ago
No PoC was released with the Heartbleed disclosure, but many were published within hours by others (including myself). And this was a good thing, without them admins would be unable to verify that their servers were patched successfully.
- zorked 11y agoAt a company where I worked previously one team only noticed one of their systems hadn't been correctly patched against Heartbleed because there was an exploit available that they could use to test. Who knows what would have happened days/weeks/months later if that hadn't been the case.