undefined | Better HN

0 pointsbawolff1mo ago0 comments

Its not the reporter's fault that other people broke the embargo.

0 pointsbawolff1mo ago0 comments

Its not the reporter's fault that other people broke the embargo.

0 comments

6 comments · 1 top-level

progval1mo ago· 5 in thread

They don't have to publish a working exploit as soon as the embargo is broken, though.

Perhaps, but if the exploit code is published folks can double-check that they implemented the mitigations properly.

If there's no PoC, how can you really be sure?

mike_d1mo ago

Why not? There has already been a working exploit floating around, at least now it comes from an authoritative source.

anyone who will use the exploit maliciously will immediately and trivially be able to create a working exploit.

An exploit was already published.

The third party posted an exploit.

j / k navigate · click thread line to collapse